Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/DLhr9KfIwlyvtn8BdrI8qpAA55E.roa
File: DLhr9KfIwlyvtn8BdrI8qpAA55E.roa (raw, json)
Hash identifier: eJXgFYzDwYu/AVJFRlLxNZ3mj78cD/ZmcSP3FUXg6AY=
Subject key identifier: 0C:B8:6B:F4:A7:C8:C2:5C:AF:B6:7F:01:76:B2:3C:AA:90:00:E7:91
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0194258EF186AB6426FF6F89C6E4EAC42121
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/DLhr9KfIwlyvtn8BdrI8qpAA55E.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198518
IP address blocks: 185.238.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f1:86:ab:64:26:ff:6f:89:c6:e4:ea:c4:21:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cb86bf4a7c8c25cafb67f0176b23caa9000e791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:23:b5:7c:03:0e:38:6d:9a:63:10:fe:53:
13:25:57:2a:19:31:4c:af:88:a0:21:48:d0:e1:f2:
cd:94:32:7b:c8:1a:9e:d6:ea:a1:a8:70:dd:d0:91:
bc:f5:22:1e:e7:2b:c8:17:4e:cb:6d:1f:70:1c:28:
57:4f:f8:6c:bd:e8:6f:0b:76:11:5c:d3:4e:30:21:
fd:cc:ad:c4:69:09:df:5c:00:3c:ac:b5:7a:e5:5a:
de:e0:5c:64:7a:7a:f3:1e:13:0d:29:df:97:68:d4:
ee:0a:ea:ed:c8:9c:86:05:ac:27:48:fd:3e:0d:1c:
c2:fe:57:0d:b3:e7:7d:31:4a:e0:0d:c8:b5:1d:bd:
ba:86:ce:ae:d9:71:5a:a3:2b:17:b8:05:03:0c:1f:
31:36:57:85:fa:f6:db:b0:35:39:ea:fe:59:06:3d:
5e:eb:33:57:f3:e2:b4:d6:4f:d8:10:ad:64:66:b6:
57:67:00:b6:e0:70:97:04:50:77:d8:af:44:e8:72:
42:e7:d7:27:a2:17:eb:b4:67:63:f6:6b:d3:8f:3d:
5f:97:0a:be:44:21:30:ff:6b:21:2d:07:86:f1:e7:
ad:1f:2d:14:bf:f1:30:d7:29:d4:6c:42:53:d8:45:
ce:b4:0d:1a:57:78:8e:c4:1c:81:df:40:62:2f:d1:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:6B:F4:A7:C8:C2:5C:AF:B6:7F:01:76:B2:3C:AA:90:00:E7:91
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/DLhr9KfIwlyvtn8BdrI8qpAA55E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3e:7c:aa:9b:8d:6b:d7:ea:17:5e:f9:c3:56:ac:f8:55:ba:
04:89:ed:08:37:eb:90:68:aa:a5:f3:ee:b7:26:43:d0:1b:3d:
ab:4e:e5:b9:e4:21:1b:dc:d1:58:ad:5f:37:1c:39:0e:4e:db:
77:b1:f8:84:6b:05:82:be:60:ee:2d:fe:fc:ba:c9:46:be:01:
04:91:68:62:30:43:c4:0e:cb:f1:80:9c:61:80:8d:e7:f8:b8:
39:28:ba:b2:fa:65:f7:3a:fe:b3:12:e1:61:4c:3c:19:2b:ec:
69:8a:0c:a5:23:86:08:b4:12:84:3a:9f:63:c0:79:c6:70:72:
2c:0e:5e:bf:1f:51:24:ce:9f:de:2c:17:8a:ae:f5:95:c9:ff:
7f:35:4b:40:4e:4b:04:21:c2:d5:df:f8:71:e4:59:a5:8a:08:
6e:18:ec:75:29:a4:f1:59:5c:1e:45:4d:ea:57:7e:d7:c0:d0:
db:5b:6f:a2:10:7f:0a:49:8f:96:f0:03:d6:9f:d9:84:2b:eb:
07:81:83:43:fa:37:bf:62:d5:df:83:71:07:e6:19:c8:73:c0:
b5:d2:b8:f9:86:cc:23:1d:9a:f0:01:0b:3d:ad:11:bb:c9:00:
db:be:3b:5d:fd:72:97:e4:a2:73:68:60:ff:b5:a8:33:d4:fa:
26:96:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:35 2025 by rpki-client