Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ddJdWwJ-x_kxknxp8wqmg5-PURw.roa
File: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (raw, json)
Hash identifier: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=
Subject key identifier: 75:D2:5D:5B:02:7E:C7:F9:31:92:7C:69:F3:0A:A6:83:9F:8F:51:1C
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 0194221F54168F2F3B20EDA758BF48AAE14C
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ddJdWwJ-x_kxknxp8wqmg5-PURw.roa
Signing time: Wed 01 Jan 2025 13:47:45 +0000
ROA not before: Wed 01 Jan 2025 13:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61429
IP address blocks: 81.23.240.0/23 maxlen: 23
185.6.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:54:16:8f:2f:3b:20:ed:a7:58:bf:48:aa:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Jan 1 13:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75d25d5b027ec7f931927c69f30aa6839f8f511c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:20:20:e8:78:c2:09:77:62:c5:1a:77:c9:
d9:4f:bf:dd:d5:fb:60:df:f0:9d:12:ba:d1:f2:5e:
9f:5b:9d:93:55:5f:f6:e7:9a:96:bd:9b:6f:af:40:
96:25:fe:4d:5b:06:df:4d:10:48:9f:09:bf:91:93:
49:f4:e8:34:df:c2:07:a0:3f:fa:e3:bb:68:7f:15:
09:26:d2:29:76:72:39:9a:b6:0f:45:f7:77:8a:12:
3b:13:c7:8e:12:7d:3e:14:53:36:21:93:7f:0a:56:
c5:7b:be:69:79:25:b7:94:9a:40:49:a6:b6:fd:5e:
c0:3a:9c:17:35:09:68:17:f7:11:f9:55:c1:3c:d9:
a3:01:1f:a6:21:fa:d1:ca:40:1d:46:58:19:25:21:
bf:bc:cb:d5:02:66:6c:3b:f5:7f:e5:66:2d:41:86:
ef:4f:dd:7b:7f:e1:e9:47:4b:9d:fb:e2:c0:b4:61:
50:46:fa:fb:37:af:20:9d:57:58:9e:80:f6:a5:47:
e9:59:48:b5:06:9e:ad:39:cc:21:8d:12:10:6a:ec:
ec:76:61:9f:1d:fd:4a:b8:57:fb:8f:20:49:40:22:
75:ee:4a:36:53:19:73:d1:b8:a9:a0:06:f1:68:45:
22:6a:21:7b:3d:4a:d6:98:93:f8:0d:9c:a9:87:09:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:5D:5B:02:7E:C7:F9:31:92:7C:69:F3:0A:A6:83:9F:8F:51:1C
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ddJdWwJ-x_kxknxp8wqmg5-PURw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.240.0/23
185.6.108.0/22
Signature Algorithm: sha256WithRSAEncryption
80:07:ed:db:79:b2:3c:e5:1e:de:c9:31:66:e3:1d:73:9d:92:
e3:30:cd:88:78:04:9f:89:29:5a:df:cf:78:97:42:d0:70:5f:
0a:3a:48:17:fa:cd:ea:da:fc:52:41:3f:af:84:8b:d4:c0:1b:
fa:e5:b7:0f:5e:aa:58:d3:7d:d0:a2:2e:97:63:82:04:e4:f9:
2d:9a:0e:81:86:82:ef:e7:0d:aa:e4:07:ea:c1:b6:a3:5c:59:
5b:f7:f9:3d:5f:fc:26:82:af:f4:2b:19:d4:0b:59:04:fb:16:
16:1d:2d:02:2f:7e:dd:18:09:d6:8b:3b:48:75:1f:4a:79:96:
b8:bc:b3:7e:41:06:61:ab:66:76:5d:75:a5:e4:f4:d0:27:cb:
6f:e3:23:2d:fb:84:fc:95:ce:85:b8:34:2f:49:5e:22:c9:d2:
58:cf:08:e6:7d:2b:b6:e0:5d:ad:c9:f1:4f:b6:e8:94:b5:2c:
b9:00:de:6b:27:c1:4b:ae:5b:a6:6b:57:c2:09:60:6a:d1:a4:
f4:58:05:f4:22:49:e2:de:cf:11:a1:61:1e:8e:27:ad:7b:ed:
29:9a:53:6c:e0:3d:86:0e:87:b2:9f:40:96:1d:28:97:3f:42:
c2:39:a7:63:e3:80:9b:d0:17:cf:8a:04:38:0d:42:f7:2a:84:
5f:41:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:11 2025 by rpki-client