Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/12DEo049-dygFnTNWaEZeFhwaPQ.roa
File: 12DEo049-dygFnTNWaEZeFhwaPQ.roa (raw, json)
Hash identifier: pUtggCsv7aGZGwHgzaqSEBAwc/3R7nEC+Yya7Ux9LpE=
Subject key identifier: D7:60:C4:A3:4E:3D:F9:DC:A0:16:74:CD:59:A1:19:78:58:70:68:F4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483425E8C0830BEE57F389F08BF0F0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/12DEo049-dygFnTNWaEZeFhwaPQ.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 194.71.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:34:25:e8:c0:83:0b:ee:57:f3:89:f0:8b:f0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d760c4a34e3df9dca01674cd59a11978587068f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:96:de:39:54:ff:cf:e0:a2:0c:85:ae:a6:
5d:18:4e:54:48:66:f8:c5:de:b7:cc:41:fa:e3:2b:
e2:17:e0:51:c9:af:f8:b8:bf:07:5b:06:b7:b2:57:
2a:0f:49:4a:8a:59:ee:81:04:95:0a:49:2a:f9:23:
b7:ee:5b:3d:52:42:c7:3d:5e:0c:df:8f:92:92:bc:
c8:61:c2:e8:aa:2f:58:59:87:0a:8a:8a:5e:2e:c6:
9a:8c:0e:63:ae:d5:5f:6e:71:42:c9:43:b2:b7:39:
e6:43:28:5c:38:09:da:45:95:c4:32:16:8a:42:09:
8f:63:46:46:4b:b6:12:7f:2a:f2:07:dd:38:ed:3a:
e8:2a:dd:48:dc:a2:61:b7:72:6a:3f:91:07:7b:8b:
c2:48:95:55:e3:dc:8f:5d:3d:8d:a4:7e:78:eb:0e:
4e:36:f4:00:00:e2:cc:97:8d:c2:b1:96:09:76:b3:
72:1a:7a:f5:73:87:03:40:79:36:e5:fe:4b:20:45:
e0:fa:4f:74:bb:78:79:5b:e3:a7:4d:6f:e6:7b:34:
48:6c:bd:96:1c:44:2d:9c:39:34:57:e7:24:80:62:
c3:92:29:f2:ad:01:47:a2:a6:e4:87:2d:e4:13:4e:
17:99:07:a5:5d:90:0d:03:f1:7d:4d:34:be:68:12:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:C4:A3:4E:3D:F9:DC:A0:16:74:CD:59:A1:19:78:58:70:68:F4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/12DEo049-dygFnTNWaEZeFhwaPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.87.0/24
Signature Algorithm: sha256WithRSAEncryption
70:08:0b:53:3e:71:86:09:19:e3:ea:3d:44:b8:e3:b0:a3:be:
76:b8:3e:3e:0c:29:4f:0c:a7:15:a8:6c:82:c2:db:8f:a3:c9:
46:72:c0:47:3b:27:93:ae:1e:5d:c2:e7:6d:4f:c1:08:d3:17:
2e:40:16:26:4b:c2:81:58:46:16:a8:eb:4c:84:be:1a:ef:b5:
4e:ee:7f:56:46:0f:7c:27:32:3f:0f:66:bb:ee:0c:9f:11:a6:
d4:7b:bb:c7:85:fb:b3:97:0d:22:a7:c3:ea:4d:99:75:ce:6e:
a0:12:b9:40:19:88:17:68:9e:38:fa:4a:27:4d:2e:76:0d:81:
cf:e7:e1:4c:13:22:c0:86:83:94:d1:5c:db:64:67:07:25:5a:
32:b4:d6:1e:0f:62:33:3c:cd:91:f7:f0:d6:c1:cd:e8:ad:79:
e6:63:12:05:1f:98:a7:73:2c:35:3d:a5:56:e7:67:86:b3:7c:
cd:5f:03:a3:92:8f:10:ee:e2:9a:f6:41:de:a0:72:35:8f:1b:
d1:eb:df:70:82:ea:ed:42:4d:f5:7a:9b:35:a3:67:34:66:00:
59:80:81:3b:be:a3:16:ad:3a:1b:10:f8:9b:38:4e:e6:7a:19:
e4:29:2e:17:9d:96:9c:37:b4:b2:f8:e6:e2:cc:d2:5d:95:11:
62:d0:84:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:40 2025 by rpki-client