Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/d5p44SeL41Vv8U9LRNaQSIJeXfY.roa
File: d5p44SeL41Vv8U9LRNaQSIJeXfY.roa (raw, json)
Hash identifier: tK/nEBw1HGQWPtkPKGf1rTHF1XrAXssUZrXXRf8dXMs=
Subject key identifier: 77:9A:78:E1:27:8B:E3:55:6F:F1:4F:4B:44:D6:90:48:82:5E:5D:F6
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 0194266C3C99B858BD55F53FC509833062C3
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/d5p44SeL41Vv8U9LRNaQSIJeXfY.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 188.119.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3c:99:b8:58:bd:55:f5:3f:c5:09:83:30:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=779a78e1278be3556ff14f4b44d69048825e5df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:46:35:7b:6d:1b:5f:aa:2a:98:88:64:1f:
d5:7f:5a:2d:ef:8f:fb:58:9b:ea:f5:67:53:e9:55:
e3:54:54:69:11:b7:dd:d9:83:36:6d:93:10:4c:22:
cd:95:9e:8a:d3:e3:ac:aa:01:19:04:74:2e:08:b1:
c5:fa:10:aa:a7:c4:e5:7f:12:97:89:d4:c7:97:7a:
8b:d0:ad:d0:ff:fe:87:d4:8f:d8:36:7b:1f:e8:d8:
ce:c5:71:38:d2:e2:cc:9e:d1:aa:4f:cb:fb:d6:b8:
4e:c8:07:24:31:ca:07:a7:5a:46:3c:72:5b:ef:a1:
8d:d8:8e:00:40:66:60:d2:25:f1:76:7d:6a:fb:79:
c1:89:22:0b:f2:45:c2:0e:38:76:c2:6d:3a:7a:fc:
17:15:9a:35:51:e6:17:8b:ac:0f:19:7d:f6:eb:dc:
f8:46:cf:97:6c:52:c1:0b:8b:0f:a1:92:04:2e:a1:
cb:08:cb:21:76:7f:de:d0:f6:d9:f8:14:03:7c:bb:
19:42:fb:0f:b9:ef:03:cc:5f:c6:59:43:be:7a:a8:
6b:96:08:23:db:4e:02:56:26:62:0a:5a:b2:e2:e6:
c7:ad:c5:8f:b7:99:a8:22:5e:c6:97:81:2b:d7:2a:
55:0f:b7:50:a2:ba:6f:33:41:65:13:37:fd:af:ca:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9A:78:E1:27:8B:E3:55:6F:F1:4F:4B:44:D6:90:48:82:5E:5D:F6
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/d5p44SeL41Vv8U9LRNaQSIJeXfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
56:42:3b:c1:1a:8c:7a:bc:27:7f:ac:c4:01:1f:90:ba:2c:2e:
30:0f:8d:e6:66:11:57:f7:16:66:02:5c:23:6b:9c:fe:a7:02:
8c:04:ad:e7:73:f3:e2:a7:d7:0f:25:1a:ea:6e:c6:e8:8a:37:
88:9c:b0:ef:4f:40:49:17:a8:0b:f4:30:aa:e7:4b:26:ba:43:
9b:9a:44:a4:93:3c:f9:1a:dd:cd:b4:39:08:4c:73:15:96:f7:
a9:5d:9a:a9:94:ec:f8:48:70:1f:d9:92:af:28:57:a1:0a:fb:
4e:21:04:6b:d2:46:6a:3e:53:40:58:3c:6c:34:53:01:e4:c7:
ac:08:5f:97:df:b9:23:da:91:f8:7e:52:06:3c:0a:a1:37:2a:
58:6c:f6:36:e6:90:ce:0f:c1:a2:11:46:4a:7a:41:12:4e:9d:
03:ae:dc:2c:1d:84:c9:a0:c3:d2:c8:a4:6a:80:6e:18:4a:8b:
6f:1c:b5:83:2b:00:9e:16:62:a9:74:58:8e:19:f9:93:1a:b2:
a6:57:71:c7:5d:ee:25:e5:50:55:c4:67:d8:3d:81:2c:2f:78:
8a:b7:db:de:5b:18:3a:99:e1:19:1d:96:4f:c4:3e:3e:97:e9:
53:ca:77:34:b5:79:a1:86:75:fa:3d:f1:42:bd:57:a1:03:f8:
ae:f7:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:56 2025 by rpki-client