Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/dc1575_CPynJfqSa-Ypn826PKUQ.roa
File: dc1575_CPynJfqSa-Ypn826PKUQ.roa (raw, json)
Hash identifier: 2/guOvEH0tRb/GtKMuhbCouIiIldpZn6RRaA4Jccq9s=
Subject key identifier: 75:CD:79:EF:9F:C2:3F:29:C9:7E:A4:9A:F9:8A:67:F3:6E:8F:29:44
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0194A71D5BD769AFE4F90AB891391C909DA6
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/dc1575_CPynJfqSa-Ypn826PKUQ.roa
Signing time: Mon 27 Jan 2025 09:35:06 +0000
ROA not before: Mon 27 Jan 2025 09:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 89.184.0.0/21 maxlen: 21
89.184.8.0/23 maxlen: 23
89.184.14.0/23 maxlen: 23
89.184.16.0/21 maxlen: 24
89.184.24.0/21 maxlen: 24
193.223.103.0/24 maxlen: 24
193.223.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:1d:5b:d7:69:af:e4:f9:0a:b8:91:39:1c:90:9d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Jan 27 09:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75cd79ef9fc23f29c97ea49af98a67f36e8f2944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:6e:2c:2d:12:99:80:eb:43:6c:03:c0:08:
45:2a:9e:8e:90:02:71:e4:52:42:37:9e:3f:1e:fc:
2c:32:7a:ac:dc:1a:56:be:91:8e:84:d0:a0:6e:fc:
b4:24:9a:a5:e4:cd:54:4c:3d:e1:52:22:16:8b:bc:
8d:61:f2:b9:9f:05:78:45:90:a1:97:4a:f7:e4:b8:
c6:2a:80:f4:d4:86:d8:08:bc:9f:09:a5:3a:61:b3:
45:5e:bb:84:9c:f9:48:75:47:89:be:85:bf:e1:c9:
8c:79:88:e0:c8:f4:62:07:88:08:0c:8f:e1:6d:64:
16:88:dd:28:b7:b7:6f:6c:f0:e3:71:b9:54:6c:aa:
4e:fe:28:ba:63:d7:03:c6:2d:17:f8:b0:29:32:e0:
15:4f:f5:04:17:80:31:6e:95:69:96:e1:42:2b:9f:
ca:cf:47:c1:a9:34:3d:a6:07:a8:c0:82:ac:e6:d4:
b2:99:21:06:98:26:9f:3f:52:aa:a4:0d:4d:ec:73:
0b:48:2a:0d:94:fb:87:7e:93:51:c5:1e:f1:c6:36:
56:9b:ca:ee:21:47:dc:87:7f:92:7b:23:af:3d:c5:
89:67:b8:13:34:43:b4:ae:32:97:93:a2:67:31:c1:
c7:e0:c9:62:f8:4b:c9:06:95:02:e7:48:03:f9:8d:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:79:EF:9F:C2:3F:29:C9:7E:A4:9A:F9:8A:67:F3:6E:8F:29:44
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/dc1575_CPynJfqSa-Ypn826PKUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.0.0-89.184.9.255
89.184.14.0-89.184.31.255
193.223.103.0/24
193.223.108.0/24
Signature Algorithm: sha256WithRSAEncryption
39:67:e8:02:33:a7:6a:7e:c3:62:c0:49:b6:d6:86:97:4c:d9:
86:36:db:ca:9b:af:4c:e3:bc:35:61:0f:f7:79:46:6c:6c:5f:
8d:4e:f4:cc:0e:be:47:32:fd:c8:78:d1:f7:7e:b2:e5:ee:4c:
fb:a5:3a:0c:2b:77:ca:20:47:41:18:10:b7:f1:68:52:e3:47:
80:58:3a:eb:01:8c:bd:e4:51:70:66:8a:94:54:eb:98:21:a7:
73:ed:9b:8d:ac:64:ea:c0:63:16:76:be:e8:24:84:34:8e:85:
73:69:11:08:c7:7d:3c:88:46:b7:4d:40:21:0f:8f:00:22:92:
fb:25:02:e0:49:93:d4:0e:5f:dc:46:79:0d:23:24:50:f1:e3:
eb:6d:b3:59:7c:32:30:df:26:2d:74:79:ed:89:ed:0f:7c:dc:
14:1c:9b:e9:e7:7a:b8:36:ab:3b:c1:47:ff:ee:d9:15:e5:67:
41:27:ab:d9:60:6b:f6:7e:68:18:23:a5:24:47:80:eb:bd:7e:
ab:7c:9d:fe:39:47:2c:2a:0e:5f:f0:f9:60:e2:6f:b0:a9:50:
04:9c:6f:f0:92:28:82:83:bf:1f:3f:41:f7:a9:7f:3b:b6:88:
18:9b:2a:c7:40:a4:c6:29:8a:28:fd:53:08:02:59:18:e8:43:
64:63:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:46 2025 by rpki-client