Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/DkmUUaZoynIEdlR9hMmyYSS3NfA.roa
File: DkmUUaZoynIEdlR9hMmyYSS3NfA.roa (raw, json)
Hash identifier: JaWDKrMwIijsWs6TG8arC0MUQjJ3dz0V76FJO19Gqec=
Subject key identifier: 0E:49:94:51:A6:68:CA:72:04:76:54:7D:84:C9:B2:61:24:B7:35:F0
Certificate issuer: /CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Certificate serial: 019426D94D5AB5CEC5B19D14A5A4CAAF9440
Authority key identifier: 51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/DkmUUaZoynIEdlR9hMmyYSS3NfA.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47928
IP address blocks: 195.182.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4d:5a:b5:ce:c5:b1:9d:14:a5:a4:ca:af:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e499451a668ca720476547d84c9b26124b735f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:1f:cc:ad:55:69:6c:e9:a6:8c:be:cf:03:
32:40:0b:9c:76:ab:de:1c:88:cd:00:20:e2:37:ba:
62:96:c5:66:93:23:79:54:1d:c4:1d:05:36:9a:1a:
d5:3e:1b:b4:e7:03:3d:51:99:82:d4:3f:44:f0:e1:
67:2b:65:6f:a2:b7:43:8e:23:97:61:05:9a:f8:6b:
b3:05:c4:ff:cf:4b:94:2d:f1:c9:47:61:7e:8c:cf:
6e:3d:39:57:8a:b3:e6:4b:08:3d:3e:de:47:6b:a5:
59:7c:3f:ed:a8:bb:c2:e6:ec:af:cd:97:fc:df:9b:
b3:d3:b3:d7:7f:e5:42:49:41:28:bd:00:f2:90:50:
8c:47:2f:87:08:86:93:69:fe:f3:2e:52:89:1a:ac:
7c:41:1d:01:da:a9:22:9f:53:49:43:5f:48:90:c7:
f8:54:c3:e0:18:a2:32:c0:f4:6b:e7:90:1b:1e:9a:
25:da:41:ea:67:ef:78:98:7b:d2:27:21:56:a2:60:
33:7d:e9:d4:b5:0c:41:4f:eb:ba:b1:ff:7f:f7:dd:
08:98:5e:a0:c8:42:d3:59:e5:d2:e1:5f:9c:60:53:
47:10:77:7a:5d:46:bc:50:0e:94:1c:4c:36:2a:c8:
d9:8d:26:c4:27:52:e6:89:b8:57:15:8e:0c:77:34:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:94:51:A6:68:CA:72:04:76:54:7D:84:C9:B2:61:24:B7:35:F0
X509v3 Authority Key Identifier:
keyid:51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/DkmUUaZoynIEdlR9hMmyYSS3NfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.44.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a6:e1:2a:87:d8:2b:5c:51:7c:20:3d:d4:7d:f0:b4:b0:87:
14:31:bb:92:96:8f:70:83:e9:27:c0:e2:9c:f2:3a:0a:1a:7d:
98:21:85:fd:8b:cb:1e:cc:3a:46:7f:b6:4f:73:a3:51:da:f3:
c6:56:9f:ea:b9:c7:cc:cb:2e:39:7f:63:d0:35:3c:41:8d:d5:
4b:db:13:4c:1d:b9:c7:82:79:51:73:bf:3f:ec:82:d1:47:8a:
77:9d:79:e5:ed:d6:7a:ad:5d:3c:c1:35:8e:27:b6:52:7e:82:
fd:08:53:8c:a8:10:77:75:2d:b5:9c:fb:6f:28:86:b7:76:51:
32:71:90:31:ce:f8:a8:f2:8e:6c:f5:de:3b:9b:c5:81:74:6e:
ba:d4:94:d1:26:35:7b:1d:d3:e6:8d:63:d5:4b:80:28:b4:47:
89:0f:ce:36:64:c2:7f:52:3d:88:c9:5e:ac:81:08:09:02:07:
6c:88:7a:25:07:67:61:17:26:73:3f:49:51:f2:fb:1b:a0:c7:
86:23:1e:e1:ba:ad:cf:65:d4:42:8f:8b:10:d3:06:34:ca:92:
e5:3c:45:f8:5c:f4:06:41:fe:e9:ba:cf:d6:a6:69:1f:b2:36:
27:01:39:40:40:28:21:92:3f:d2:aa:eb:6c:39:5f:af:3f:c1:
94:7a:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:24 2025 by rpki-client