Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/DcGW9RVJN1HDfDOegRPFfnj3g48.roa
File: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (raw, json)
Hash identifier: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=
Subject key identifier: 0D:C1:96:F5:15:49:37:51:C3:7C:33:9E:81:13:C5:7E:78:F7:83:8F
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 01941FFA1505723BBA21A77CE7625A612310
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/DcGW9RVJN1HDfDOegRPFfnj3g48.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24953
IP address blocks: 194.59.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:15:05:72:3b:ba:21:a7:7c:e7:62:5a:61:23:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dc196f515493751c37c339e8113c57e78f7838f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:43:37:3f:72:65:f1:cc:21:1f:0d:6f:0e:
2e:a7:18:53:b1:c9:bc:e3:1a:bd:9f:15:b0:af:99:
83:12:8c:57:c0:a1:4a:25:00:71:13:6b:7b:86:ba:
96:b0:a6:8d:2b:4b:79:e2:04:b7:d0:6d:35:6d:3e:
2e:17:df:2a:fa:a9:73:f0:c8:81:b7:c2:e4:14:c8:
ac:d6:e9:91:d8:cc:33:4d:6f:ff:97:d1:b7:17:b6:
d3:16:f1:52:61:0b:a0:24:76:e6:ae:99:e9:6c:ce:
71:fd:a3:e0:37:7c:56:24:56:99:20:31:2a:b9:f5:
c0:d5:4b:79:c9:41:e6:36:43:3f:75:0e:61:78:4d:
bb:c8:40:8c:f1:cf:80:45:48:42:bc:53:e1:e4:30:
b4:8d:78:23:6e:dd:74:0d:d1:af:7c:82:ab:73:32:
b2:f8:e9:2c:d1:f7:8f:ae:33:a9:d7:d3:de:6b:8e:
2b:8b:de:73:11:f9:16:ba:f7:e8:ad:e1:11:2f:93:
45:fd:21:5d:45:cc:ec:44:bc:a3:11:1c:28:a4:a3:
e3:b4:f4:89:ea:85:9c:cd:4a:8e:ff:6c:c3:24:cc:
cf:1f:22:8f:a6:e8:08:ca:e4:89:1f:76:58:ff:b6:
42:39:fb:ee:ea:f7:c0:67:13:4a:84:f5:d4:eb:d2:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:96:F5:15:49:37:51:C3:7C:33:9E:81:13:C5:7E:78:F7:83:8F
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/DcGW9RVJN1HDfDOegRPFfnj3g48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.178.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:b9:cc:ef:fc:11:75:a4:34:f6:31:c5:02:68:13:fd:58:72:
c7:27:a4:11:43:ce:19:0d:82:f3:77:41:7b:4f:47:41:04:d7:
86:98:2b:d8:c4:42:e1:dd:a4:55:c2:69:6c:63:5c:54:b0:9b:
49:34:f9:31:42:21:6b:8c:9e:1f:89:b0:0d:05:36:9a:e4:8b:
02:6b:52:56:7b:39:3b:95:2d:4d:5f:3b:1a:19:5c:11:96:4b:
82:5a:10:fa:c1:bb:e2:61:7f:c3:0a:4b:35:58:28:26:14:7e:
c8:e2:ed:7a:82:c8:30:6c:85:b8:e0:d7:07:8d:58:5e:a6:d7:
08:5a:90:3b:61:21:82:87:1b:f6:1d:2b:04:7c:4e:e6:e7:ab:
bf:9c:4b:24:98:ff:4c:57:f9:91:57:69:1c:62:dc:53:16:6b:
df:cf:d2:7f:3e:22:0b:33:80:e2:cc:dd:fb:e7:51:11:69:b9:
3b:bc:a6:80:71:77:d4:bf:bf:c7:dd:f2:b2:cc:40:06:2e:66:
d7:ad:26:b6:14:12:59:de:73:87:fd:04:f8:be:13:55:9d:5d:
1f:52:c4:b1:32:ea:64:d2:a4:4b:da:ae:a1:6a:a9:e0:89:7f:
4b:c4:94:99:73:c8:bc:68:ce:7a:35:e3:65:78:2d:f0:a4:a9:
46:61:67:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+hUFcju6Iad852JaYSMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTA1ZGYyNDcxNzRjZDM1MGIxYWYzNzgzMzMyN2M3NzAy
YjhmZmYwHhcNMjUwMTAxMDM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGMxOTZmNTE1NDkzNzUxYzM3YzMzOWU4MTEzYzU3ZTc4Zjc4MzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh9DNz9yZfHMIR8Nbw4upxhTscm8
4xq9nxWwr5mDEoxXwKFKJQBxE2t7hrqWsKaNK0t54gS30G01bT4uF98q+qlz8MiB
t8LkFMis1umR2MwzTW//l9G3F7bTFvFSYQugJHbmrpnpbM5x/aPgN3xWJFaZIDEq
ufXA1Ut5yUHmNkM/dQ5heE27yECM8c+ARUhCvFPh5DC0jXgjbt10DdGvfIKrczKy
+Oks0fePrjOp19Pea44ri95zEfkWuvforeERL5NF/SFdRczsRLyjERwopKPjtPSJ
6oWczUqO/2zDJMzPHyKPpugIyuSJH3ZY/7ZCOfvu6vfAZxNKhPXU69IZdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3BlvUVSTdRw3wznoETxX5494OPMB8GA1UdIwQY
MBaAFEfgXfJHF0zTULGvN4MzJ8dwK4//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMt
YWVjOTZmNDMxMDE4LzEvRGNHVzlSVkpOMUhEZkRPZWdSUEZmbmozZzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMtYWVjOTZmNDMxMDE4
LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjuyMA0G
CSqGSIb3DQEBCwUAA4IBAQDAuczv/BF1pDT2McUCaBP9WHLHJ6QRQ84ZDYLzd0F7
T0dBBNeGmCvYxELh3aRVwmlsY1xUsJtJNPkxQiFrjJ4fibANBTaa5IsCa1JWezk7
lS1NXzsaGVwRlkuCWhD6wbviYX/DCks1WCgmFH7I4u16gsgwbIW44NcHjVheptcI
WpA7YSGChxv2HSsEfE7m56u/nEskmP9MV/mRV2kcYtxTFmvfz9J/PiILM4DizN37
51ERabk7vKaAcXfUv7/H3fKyzEAGLmbXrSa2FBJZ3nOH/QT4vhNVnV0fUsSxMupk
0qRL2q6haqngiX9LxJSZc8i8aM56NeNleC3wpKlGYWdp
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:23 2025 by rpki-client