Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/dZpnLjPXq073YC00amDwFaBhP2Q.roa
File: dZpnLjPXq073YC00amDwFaBhP2Q.roa (raw, json)
Hash identifier: mjX8iiKJOyDU642vC4KavpOGK3XYSd4Orc+JJYuA+YM=
Subject key identifier: 75:9A:67:2E:33:D7:AB:4E:F7:60:2D:34:6A:60:F0:15:A0:61:3F:64
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 01942827A530C767764C4CC2784ABE67CCDB
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/dZpnLjPXq073YC00amDwFaBhP2Q.roa
Signing time: Thu 02 Jan 2025 17:54:34 +0000
ROA not before: Thu 02 Jan 2025 17:54:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34002
IP address blocks: 81.88.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:a5:30:c7:67:76:4c:4c:c2:78:4a:be:67:cc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jan 2 17:54:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=759a672e33d7ab4ef7602d346a60f015a0613f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:6e:e0:ca:4a:f2:19:39:1c:ad:73:90:88:
83:b7:5e:63:a6:d3:19:5e:48:2b:4f:0c:da:39:2d:
5a:5f:65:47:6a:3f:89:10:b1:2b:e3:ce:9a:0c:6f:
13:a2:eb:3a:96:bb:20:54:df:4e:68:86:ce:c9:48:
f0:85:5a:51:eb:95:e3:e5:48:95:52:ea:1a:96:2f:
98:a9:d2:d4:67:8d:63:e6:db:f3:38:03:06:a2:23:
f5:63:6c:71:a9:ca:f8:2f:f4:ba:bb:b4:4e:87:69:
8e:bb:36:9b:4a:53:64:7a:c3:f8:fa:b4:77:b7:30:
5d:1b:93:bd:47:20:3d:6a:9b:d6:2d:ba:8d:e2:f5:
7d:8a:92:c3:4e:3f:c9:08:09:de:84:ee:05:42:a2:
40:bb:ce:ff:33:89:7f:15:b1:c0:e4:80:b6:3b:33:
41:85:2f:d8:b8:81:d5:43:13:b3:25:1d:ee:f4:fd:
7a:1c:18:e3:9f:84:9e:a8:94:50:ca:f4:9c:7c:ff:
f5:c8:a9:5c:be:a7:66:57:f4:66:03:93:79:9c:df:
93:a1:ee:db:72:20:21:c8:6e:7d:f5:e9:7a:7b:24:
cc:4d:90:1f:2f:96:67:17:dc:4c:7a:53:55:6c:63:
ff:67:57:0f:c5:d1:87:99:25:13:3b:85:e8:d8:27:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9A:67:2E:33:D7:AB:4E:F7:60:2D:34:6A:60:F0:15:A0:61:3F:64
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/dZpnLjPXq073YC00amDwFaBhP2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9b:07:49:2f:0e:e6:e2:67:22:f1:d9:3c:b9:99:4d:8d:aa:
24:35:3f:70:07:76:64:a5:99:f6:90:e4:31:dc:bd:3a:c6:fd:
a5:26:2c:9e:60:91:42:40:cd:74:4e:88:54:c5:11:71:8d:cd:
56:c4:d1:af:2a:ea:66:c3:d7:bf:ce:d3:b9:4a:1b:b8:15:e3:
45:4c:5b:cf:21:2f:50:91:8f:1e:96:35:d4:7a:0b:53:80:3e:
72:21:da:ce:f5:da:a5:33:5b:23:99:a6:a0:df:9a:89:72:5a:
83:d3:8e:85:9c:d0:ba:f2:7e:31:d0:00:b9:b5:74:a9:7c:44:
7e:21:f3:09:85:09:55:21:33:a7:ba:67:d2:ec:b1:b0:4e:8e:
6e:bc:4d:a6:ac:ca:b1:a3:c4:44:05:95:25:50:f3:0d:f6:fd:
e8:61:67:e6:52:86:0d:7c:5e:ff:6c:3a:0c:4e:7e:0f:02:04:
34:f2:16:c1:87:42:2a:19:36:46:6b:bf:47:99:78:45:d3:91:
9d:44:a9:cc:04:c9:9a:74:24:9f:1e:8b:fa:e3:24:c5:0e:3f:
70:09:8e:d9:3e:a3:8d:b4:c6:95:b6:12:c0:1d:70:77:9d:17:
c0:d9:a5:2e:10:d4:24:9c:f6:97:34:e5:7c:22:93:03:95:31:
ac:40:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:06 2025 by rpki-client