Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/N4CwZRnLnlumD-RJFVgkbIUrCBc.roa
File: N4CwZRnLnlumD-RJFVgkbIUrCBc.roa (raw, json)
Hash identifier: EtoC/NIHh5NhO9jyQ35IICnYchDtP+NYLu/Fs0pjNjc=
Subject key identifier: 37:80:B0:65:19:CB:9E:5B:A6:0F:E4:49:15:58:24:6C:85:2B:08:17
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: 01942521411A707F3D8DCF90509F1004146F
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/N4CwZRnLnlumD-RJFVgkbIUrCBc.roa
Signing time: Thu 02 Jan 2025 03:48:43 +0000
ROA not before: Thu 02 Jan 2025 03:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208263
IP address blocks: 185.146.100.0/22 maxlen: 22
2a03:ab60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:41:1a:70:7f:3d:8d:cf:90:50:9f:10:04:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Jan 2 03:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3780b06519cb9e5ba60fe4491558246c852b0817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:0b:6a:c9:1b:38:eb:41:f5:a8:df:01:5c:
d4:2d:2a:ba:cf:22:0d:85:85:ad:05:e1:98:b3:61:
6c:51:e6:d7:5e:c7:05:b9:90:65:fc:4c:31:58:1f:
c8:86:e1:07:21:ca:fc:52:d3:54:54:5f:e3:2c:17:
ba:f4:bc:20:d1:ab:94:a4:85:46:03:3c:a0:0d:b3:
88:cc:b1:ce:c8:6b:6d:31:11:70:7b:2e:93:31:42:
a9:f3:b8:5c:23:57:99:d1:ec:9f:ec:f0:59:fd:33:
2e:f1:80:91:89:20:cb:96:74:b9:bf:d4:9b:78:9d:
86:70:14:b3:f2:67:ba:d9:b9:a0:dc:5a:90:82:4f:
09:d7:35:08:33:30:08:da:cb:79:da:35:3a:67:76:
39:31:0b:89:f3:b9:a6:7d:a0:10:7f:35:34:da:09:
40:3f:48:a1:49:b0:ce:a9:49:02:a9:ce:c1:14:fb:
5f:27:4e:a9:8e:0b:2f:e6:0d:ab:51:d9:e8:56:ea:
ba:c2:20:c1:01:f3:00:9d:57:c9:f8:d2:8d:84:cb:
f6:05:fd:69:49:b1:8e:bd:44:db:94:c3:52:22:c2:
c0:8a:d3:05:be:4a:e8:89:c4:61:5c:09:f8:ca:4e:
8f:8c:3f:cd:79:5e:7a:de:6d:ce:88:b7:0d:14:0e:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:80:B0:65:19:CB:9E:5B:A6:0F:E4:49:15:58:24:6C:85:2B:08:17
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/N4CwZRnLnlumD-RJFVgkbIUrCBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.100.0/22
IPv6:
2a03:ab60::/32
Signature Algorithm: sha256WithRSAEncryption
93:ee:8b:cd:6e:11:86:a0:29:4b:2d:8b:a3:76:47:ed:61:12:
74:47:63:72:93:b6:ac:67:89:8a:91:6a:5f:06:6c:b2:a6:ef:
cc:73:55:e1:e2:68:e5:1a:90:64:9f:f6:b3:78:a7:97:50:dc:
98:7c:83:ea:4f:7f:93:c2:5e:db:5c:51:e4:54:7a:26:7e:cf:
74:ef:e1:28:83:3f:52:74:0f:62:23:f9:cb:33:81:3b:58:02:
58:e2:a1:be:f6:86:d1:0d:71:80:8f:82:d2:28:02:aa:45:05:
2b:70:91:ef:7f:63:0e:5d:7a:78:68:f9:8f:03:63:8b:ef:e0:
08:8b:8e:ba:14:de:76:17:dc:dd:67:9e:07:b2:cd:70:6a:6e:
10:9c:ea:e3:48:81:b5:38:a6:b1:57:bf:b5:07:01:24:6e:a9:
4f:29:0c:b5:41:7a:c0:b4:6d:b6:9b:a1:ec:1d:b9:a2:b9:d8:
45:db:a8:18:5b:f7:b7:31:f5:34:82:fd:68:1e:52:94:66:16:
c7:15:f9:b4:ec:c9:26:b8:69:6a:61:28:53:9d:db:62:95:0a:
5b:f9:f2:77:e1:7e:7d:95:5a:dd:f1:fa:81:59:b8:1f:20:1c:
73:11:d4:80:47:ce:3a:70:02:9c:a7:96:d9:df:07:14:41:01:
3c:7b:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:27 2025 by rpki-client