Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/3AR-VMpBzAccZOXuS0Wv2igI9_8.roa
File: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (raw, json)
Hash identifier: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=
Subject key identifier: DC:04:7E:54:CA:41:CC:07:1C:64:E5:EE:4B:45:AF:DA:28:08:F7:FF
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019424447FB138817FB8C348D42260908CFF
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/3AR-VMpBzAccZOXuS0Wv2igI9_8.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21233
IP address blocks: 85.113.80.0/24 maxlen: 24
85.113.81.0/24 maxlen: 24
85.113.82.0/24 maxlen: 24
85.113.83.0/24 maxlen: 24
85.113.85.0/24 maxlen: 24
85.113.89.0/24 maxlen: 24
2001:be7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7f:b1:38:81:7f:b8:c3:48:d4:22:60:90:8c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc047e54ca41cc071c64e5ee4b45afda2808f7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:58:aa:92:3a:46:39:00:9c:cc:90:61:3b:
c5:cf:71:7e:37:ef:b3:74:61:26:4b:f1:57:e9:c7:
5c:e1:b5:47:61:d0:bc:47:67:45:4c:46:b3:1e:45:
a5:bd:de:2c:b3:a5:71:10:48:50:fd:aa:4e:f6:57:
c5:41:86:22:1e:2d:4f:3a:be:83:1e:dd:86:11:b3:
36:46:50:4d:36:45:8b:52:52:df:10:99:5f:ff:b0:
ea:61:fd:e4:d2:47:54:6a:6d:ac:1f:24:d8:ab:ce:
78:e0:fe:60:8e:6c:a2:77:ca:10:2a:48:a3:37:41:
a8:6d:24:58:f3:01:39:bf:c1:ab:84:1c:8f:3b:7c:
8b:1b:f7:cd:11:71:d1:4d:07:80:36:a3:73:b3:74:
bd:27:f3:34:ef:db:ef:36:4e:06:c4:b0:8e:b8:a2:
ac:5c:0c:ec:11:d2:78:66:31:32:19:35:8e:41:8a:
1a:8d:d7:b1:01:3f:ee:05:f4:b1:1f:88:b6:06:fe:
94:ab:53:9e:73:94:ce:94:55:d6:c8:27:4f:ba:ab:
46:60:3d:91:60:39:ea:b1:6c:bb:00:33:ff:7c:6f:
fe:1b:fa:15:c7:ce:5a:03:f0:e5:cd:8d:13:95:c2:
56:db:0f:45:4b:13:03:dc:fc:14:75:ec:34:f8:87:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:7E:54:CA:41:CC:07:1C:64:E5:EE:4B:45:AF:DA:28:08:F7:FF
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/3AR-VMpBzAccZOXuS0Wv2igI9_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.113.80.0/22
85.113.85.0/24
85.113.89.0/24
IPv6:
2001:be7::/32
Signature Algorithm: sha256WithRSAEncryption
3d:e2:dc:d5:c8:99:2c:45:9e:0e:c8:f5:d6:3c:1d:02:fa:8d:
62:13:89:59:86:80:e6:cc:5f:07:af:48:17:e8:03:ee:70:33:
f2:ed:9d:b6:53:65:e7:f0:dd:07:11:2e:94:5c:15:87:82:43:
dd:71:b4:ba:1f:58:51:c7:3f:23:4f:a5:d0:be:3a:8a:bb:c2:
57:11:ab:40:47:05:65:c9:81:09:e0:e8:c9:1c:e0:9d:5a:34:
cb:fb:b5:04:55:13:98:56:b1:8e:de:87:56:99:0f:b5:fa:c0:
68:11:bc:ba:53:27:81:91:4b:17:ad:8e:5f:87:8b:c1:df:a8:
ae:d4:26:e8:9a:fa:8e:ba:07:ae:25:27:99:ce:b9:e3:13:3d:
dc:81:28:82:d3:28:53:92:bd:fd:d8:60:8f:53:4a:83:c6:87:
6d:94:85:9e:95:89:45:e4:81:9d:8c:bf:89:27:34:af:26:28:
a8:b6:07:8c:28:67:e9:89:87:e8:11:b0:6d:6f:c0:c7:fe:de:
aa:b1:69:f0:36:d6:fd:31:54:4c:0d:f4:af:06:2a:cc:3b:10:
ca:4a:71:15:bf:a2:c1:c8:df:ec:e3:a7:6f:cd:55:f3:34:64:
83:2f:54:66:53:c7:0c:e6:fe:14:26:04:12:41:31:cd:41:ec:
19:58:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:51 2025 by rpki-client