Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/dBK2n6sqJnACc6nNUBD4YcMJy3M.roa
File: dBK2n6sqJnACc6nNUBD4YcMJy3M.roa (raw, json)
Hash identifier: 6/oNoXCw6JLnpiYitp94ZlHhwO6+BX8OUUoI7ijZoek=
Subject key identifier: 74:12:B6:9F:AB:2A:26:70:02:73:A9:CD:50:10:F8:61:C3:09:CB:73
Certificate issuer: /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial: 019421B1C43EF9515ECC14798875AE176524
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/dBK2n6sqJnACc6nNUBD4YcMJy3M.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41549
IP address blocks: 194.0.212.0/24 maxlen: 24
2001:678:8ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c4:3e:f9:51:5e:cc:14:79:88:75:ae:17:65:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7412b69fab2a26700273a9cd5010f861c309cb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:67:4c:90:44:48:79:b4:63:58:75:b6:1c:
42:12:29:cf:b1:d8:91:8f:4f:23:31:25:8e:ae:03:
89:7e:6c:f7:cc:b2:84:d9:d3:0b:07:3e:db:c6:68:
1f:fd:d9:ee:02:1e:97:61:18:d9:5a:b2:2e:82:19:
eb:30:61:92:6e:bb:ff:14:5c:f0:b3:36:26:db:2b:
d1:90:c1:bd:27:85:cd:ae:8d:ce:47:b6:15:d0:ed:
55:2b:fd:4f:96:49:d0:aa:66:58:0f:c1:9f:f7:d9:
5c:64:d9:00:fb:2a:6e:55:6e:65:6b:1f:4a:46:7d:
a5:a2:5c:76:79:a6:8a:fb:94:08:f0:cc:98:b5:6d:
e0:19:db:69:76:77:70:b2:76:e9:d9:30:90:59:0f:
92:98:eb:1c:7d:e3:cf:b3:6a:0f:7c:7c:ac:27:5b:
cd:68:88:ea:0d:42:95:7f:b4:6d:c8:b8:75:e5:aa:
d2:f3:90:ef:41:35:7c:0b:7b:f4:dc:f6:34:8b:f6:
4e:ee:d0:01:21:cd:83:b9:ed:cd:e6:4c:66:27:b9:
f7:73:16:c6:f4:aa:b8:4f:ce:15:a2:53:aa:c2:d8:
8f:4a:cd:1f:4f:2b:11:5a:fe:76:72:9b:91:b5:32:
83:f1:7c:b8:2a:32:bd:5b:9d:82:2e:16:75:82:fe:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:12:B6:9F:AB:2A:26:70:02:73:A9:CD:50:10:F8:61:C3:09:CB:73
X509v3 Authority Key Identifier:
keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/dBK2n6sqJnACc6nNUBD4YcMJy3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.212.0/24
IPv6:
2001:678:8ec::/48
Signature Algorithm: sha256WithRSAEncryption
a8:27:bd:da:c7:85:5c:4a:89:75:0b:1f:ff:a3:dd:ae:d3:f0:
9c:04:ba:4a:b9:1f:13:fd:02:0a:fe:fa:e0:7f:72:0d:b9:33:
14:fc:38:aa:ab:47:75:63:de:87:67:0e:c4:f1:ee:97:5c:17:
5b:cd:b3:60:e5:4d:06:43:67:8b:39:c1:92:6b:f3:26:58:15:
f6:6c:e1:fb:a8:0e:11:0e:94:1a:66:9e:56:a6:61:60:11:cf:
e2:2c:23:e3:57:40:6f:9d:43:65:2a:2d:79:e8:ba:1a:d1:3f:
fc:4b:66:51:a1:09:2f:a6:68:32:49:3c:8f:5b:46:dd:c7:0b:
54:c4:53:51:b5:c0:55:40:6e:d1:b9:81:4a:d8:d2:87:c5:d1:
7c:44:db:db:1b:08:fb:48:f1:e4:58:c5:a2:00:fa:67:67:cb:
5a:99:47:46:d9:20:1d:fa:e2:f4:1a:56:2c:48:65:89:1c:3c:
11:b6:88:58:67:4f:02:5d:3e:5d:53:2e:83:99:b7:e8:ec:55:
69:6f:88:ee:2c:45:b4:67:a1:60:97:4a:87:57:9c:33:74:65:
49:79:c1:67:1b:9b:8e:4e:fd:c5:95:80:5a:4d:34:c6:79:e5:
e1:62:07:d4:7d:88:a8:26:2a:8e:5e:df:96:30:e6:a1:2a:96:
f2:34:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:07 2025 by rpki-client