Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DbP7K2VtNw3kapyPyuFvQE7JBSM.roa
File: DbP7K2VtNw3kapyPyuFvQE7JBSM.roa (raw, json)
Hash identifier: 2fzeTpuJWnP6/gv4fT9R5JKUn/1ALgN/OCuPkiMy+VY=
Subject key identifier: 0D:B3:FB:2B:65:6D:37:0D:E4:6A:9C:8F:CA:E1:6F:40:4E:C9:05:23
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAF03EC1E1BBA9577B4808EB1BE5CA
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DbP7K2VtNw3kapyPyuFvQE7JBSM.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50691
IP address blocks: 109.236.249.0/24 maxlen: 24
213.128.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f0:3e:c1:e1:bb:a9:57:7b:48:08:eb:1b:e5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0db3fb2b656d370de46a9c8fcae16f404ec90523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:ad:48:e2:13:0e:c0:3f:71:d8:16:7f:d6:
9d:36:2d:26:ea:63:47:8a:a4:4e:7e:0a:5a:4b:37:
00:d3:85:11:4b:59:b2:e4:f6:ff:71:dc:0b:a5:a0:
ee:5c:b7:c9:b0:95:87:3e:57:d3:1c:40:53:5d:65:
2b:85:1f:74:90:b0:77:32:27:dd:68:0f:29:8c:a9:
d5:a2:1d:55:b1:34:f8:26:5f:b1:1e:03:35:77:0a:
b2:94:4c:2e:b1:0e:fa:9a:2c:2b:a9:ba:2e:e2:04:
4a:42:8c:fa:d5:8a:fd:44:c8:5e:59:e9:9c:f1:b9:
d4:f2:87:76:6d:0c:d6:c4:f9:2e:f0:58:68:76:f4:
aa:99:f6:36:0e:9a:cc:dd:83:a2:d2:2f:a0:db:65:
50:05:16:70:74:0f:5a:9f:7b:8d:48:d7:03:82:11:
1d:8a:ab:ce:00:a9:e3:cc:1e:b8:78:57:12:41:37:
ae:d0:cb:75:1a:1b:4b:93:fd:fb:f0:eb:2d:be:14:
d3:5a:56:f0:bd:e1:c6:af:16:15:72:46:83:b5:9d:
c3:ad:c4:ed:49:68:07:74:0a:d4:9b:71:60:ac:94:
63:fe:40:a3:e3:44:5c:89:73:30:49:f4:3d:b6:ad:
9d:35:58:ff:27:e4:2f:bf:c8:51:03:88:1d:f4:e6:
5d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:FB:2B:65:6D:37:0D:E4:6A:9C:8F:CA:E1:6F:40:4E:C9:05:23
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DbP7K2VtNw3kapyPyuFvQE7JBSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.249.0/24
213.128.220.0/22
Signature Algorithm: sha256WithRSAEncryption
13:99:77:69:ad:2c:ce:43:bf:50:71:c5:0c:b7:fd:e8:17:48:
4c:c3:73:af:d2:f6:37:e3:7c:b4:4a:eb:a1:3f:bb:75:ce:af:
64:19:8d:07:95:f8:a1:d6:75:12:24:72:ba:3d:f1:d4:90:dc:
a6:0d:75:40:72:d1:92:8f:52:40:65:c3:2f:0d:0d:a7:14:2c:
50:be:50:f2:95:94:1f:78:c1:70:ea:b7:87:14:9d:d8:93:47:
d0:db:8f:ee:e2:de:97:ef:5f:6d:bc:51:10:57:d8:d3:69:6c:
2e:7d:55:17:fa:52:a1:2d:f4:be:0c:5f:6e:28:d2:e9:5e:52:
aa:bb:80:79:e0:67:e6:83:da:eb:25:62:6b:7b:e4:b0:e8:07:
a2:5a:7e:c5:4a:72:23:5c:f8:58:a2:60:0b:d3:e2:8f:22:0c:
09:6b:f0:8d:ed:2f:63:31:c6:77:b7:6b:44:96:b4:c6:fa:8c:
33:c9:90:1a:cb:d7:ad:a8:44:8f:7d:9a:2e:ad:45:a4:c2:63:
22:2d:0a:13:7a:4d:1a:16:29:1f:72:48:ae:73:c1:14:1c:d3:
f8:67:9c:74:76:81:82:c6:ae:00:48:dd:93:3f:ab:47:23:d2:
17:03:dd:ed:de:4e:14:f4:69:f7:6b:8a:da:94:9a:0e:5a:74:
8b:13:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:49 2025 by rpki-client