Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/OwIv7U97sC9dks6Rl4mlkK2f8GI.roa
File: OwIv7U97sC9dks6Rl4mlkK2f8GI.roa (raw, json)
Hash identifier: 8n+wp+UnJSkfB2nwEoGtaJ5dvj8q4nuluWU6IFbCLc8=
Subject key identifier: 3B:02:2F:ED:4F:7B:B0:2F:5D:92:CE:91:97:89:A5:90:AD:9F:F0:62
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019422FC0B459ED2449F1B39D307B4CDBF28
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/OwIv7U97sC9dks6Rl4mlkK2f8GI.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9104
IP address blocks: 185.161.220.0/22 maxlen: 24
195.60.128.0/19 maxlen: 24
212.3.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0b:45:9e:d2:44:9f:1b:39:d3:07:b4:cd:bf:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b022fed4f7bb02f5d92ce919789a590ad9ff062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:63:1e:48:a7:b4:de:35:d2:d2:ba:e7:db:
42:5c:aa:19:34:83:70:08:21:af:86:c9:b1:57:2a:
1f:bc:d1:08:a4:0b:fb:27:63:29:b6:32:f0:b8:da:
91:e9:a3:0b:fd:b8:5e:82:bb:9c:cf:ac:88:fc:97:
69:47:d3:cf:a7:fb:26:61:8a:5d:71:f8:38:e9:2e:
65:e5:5d:77:d2:39:e1:b2:b8:cc:60:96:26:2d:64:
b4:cf:f9:7e:1e:af:ce:58:1d:db:20:2c:4e:21:26:
2b:33:f5:5c:ba:c3:48:ee:ed:79:2c:3e:5f:3b:a3:
11:52:9f:8a:2f:e9:99:ec:a3:2e:75:14:40:29:4b:
e0:39:04:c0:f9:ee:d9:d8:da:36:bc:2c:15:15:a5:
c2:be:96:61:99:40:48:f2:f5:e6:2e:25:80:39:c8:
4d:eb:b6:75:41:98:d6:ed:54:b3:4b:b5:ab:0c:f9:
e9:d2:01:67:d4:f4:82:68:23:60:25:2c:4c:90:9f:
93:23:31:59:12:85:c4:c1:21:60:cd:42:e7:49:87:
21:2d:19:20:ea:8a:71:17:af:64:98:fb:89:2b:1f:
dd:6f:f9:eb:34:e0:26:70:8c:76:ee:ae:c6:e9:6f:
0d:10:46:1f:08:79:05:67:d1:db:28:94:89:c8:99:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:2F:ED:4F:7B:B0:2F:5D:92:CE:91:97:89:A5:90:AD:9F:F0:62
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/OwIv7U97sC9dks6Rl4mlkK2f8GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.220.0/22
195.60.128.0/19
212.3.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:d0:5a:08:b1:ae:3e:5f:73:aa:22:f1:1b:22:a8:08:d8:25:
27:4a:7f:9e:71:31:a6:ea:d8:33:2a:87:bd:90:50:97:0b:ba:
2c:7b:f2:1c:c6:35:33:81:f5:4e:d4:44:b8:68:12:bb:ca:04:
a2:57:bc:b5:4b:cb:16:e8:7b:8e:a3:fe:4d:be:f5:c3:cc:43:
47:a1:79:7a:84:5c:74:90:bd:c6:fc:78:58:1e:70:e7:71:c0:
95:af:9d:cc:be:45:71:99:2b:0e:24:d2:71:20:87:81:da:72:
87:c8:21:40:61:83:b9:29:f9:3b:0f:a6:d3:e5:96:d9:a6:d5:
ef:f9:0b:31:9e:39:61:3e:b2:06:8b:4b:c5:5b:0a:55:d4:b5:
6e:38:79:e1:8b:cf:de:92:f1:0a:d3:39:32:d5:f4:b3:ef:d6:
e6:73:a9:38:92:54:70:df:ed:66:8f:ad:6a:5d:6f:f7:6c:a4:
80:d3:b0:71:ce:da:95:5a:70:5b:d7:9e:2b:72:ff:f0:ee:2f:
5d:1d:ac:5e:f2:3c:26:53:2b:39:0e:4c:1d:4a:d7:9b:33:0d:
dd:43:40:a5:4a:18:a4:b9:de:8e:55:29:b1:83:59:17:36:a0:
e9:0d:b3:66:d5:54:44:4e:0a:f6:e1:88:9b:90:78:86:1d:f4:
cb:45:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:16 2025 by rpki-client