Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa
File: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (raw, json)
Hash identifier: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=
Subject key identifier: DC:75:B3:70:E6:93:0E:B7:46:F7:88:B7:C6:31:3A:42:AF:AD:7E:79
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019424458C8E4E232471981237DA5D0181A4
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206656
IP address blocks: 185.179.192.0/22 maxlen: 22
2a0c:4140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8c:8e:4e:23:24:71:98:12:37:da:5d:01:81:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc75b370e6930eb746f788b7c6313a42afad7e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:b6:3f:af:bc:fd:7b:21:97:5f:d1:7b:7c:
c9:df:fb:6a:2d:ac:c9:36:45:a5:55:19:8b:d9:ef:
f5:c4:c6:92:df:05:55:9c:4d:ca:e2:1f:09:ac:d1:
63:76:05:cc:91:76:32:c5:dc:6c:cd:bf:9c:a6:3f:
9c:8c:44:2b:32:e9:98:55:11:8f:4f:47:32:00:8b:
7c:fb:2d:8e:52:4a:3e:af:ce:f3:c4:6f:36:67:39:
ee:b9:8f:03:c2:ae:0e:9d:b4:31:ec:a1:89:9d:7e:
4f:cc:f1:61:c3:f7:27:56:4a:27:85:85:e4:c7:c4:
b7:fc:fa:ff:f0:9d:95:41:47:51:2a:b1:ea:74:15:
4c:70:ba:4e:8c:58:c9:05:bd:59:af:bb:ca:34:ed:
e7:b2:2d:a8:1f:16:59:70:83:59:37:05:3e:f1:36:
67:29:e8:06:0a:ad:45:a2:4f:d0:fa:65:60:28:c0:
65:8a:13:61:33:00:a0:7a:76:cb:a1:1a:78:39:54:
fa:32:43:09:d9:d7:60:64:13:32:86:7b:5e:75:2c:
a8:0d:7c:d4:71:fe:9f:d7:2a:be:bb:cb:50:41:83:
08:62:0f:98:fe:88:c8:2a:44:b3:65:88:72:87:4f:
f1:46:0d:33:5a:e9:9c:9f:c1:00:6a:3f:46:23:5a:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:B3:70:E6:93:0E:B7:46:F7:88:B7:C6:31:3A:42:AF:AD:7E:79
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.192.0/22
IPv6:
2a0c:4140::/32
Signature Algorithm: sha256WithRSAEncryption
1c:db:7f:b8:16:12:82:61:2c:d9:32:ac:9f:95:9f:f1:46:c9:
0b:2e:91:a7:77:b9:cd:b8:ae:24:c6:1a:78:b7:b0:fb:56:66:
b1:55:50:c8:7e:c1:cd:db:cd:0b:46:13:c9:06:37:b9:ba:33:
62:39:82:06:af:64:2d:d4:01:3d:70:68:05:e9:4a:c3:ce:f3:
8a:01:2c:31:28:1f:bd:5e:bc:e5:c4:d4:e9:e6:92:64:7e:ef:
c8:df:a7:37:ca:a8:9b:23:a8:6c:40:ea:04:33:cc:fc:6b:5a:
12:a2:c7:4a:8b:fb:72:ba:8c:55:14:b1:b3:32:14:f0:98:98:
5e:84:d1:24:c9:5c:62:2d:05:cf:9a:57:20:2f:f6:ec:00:f3:
0a:98:87:2d:0b:ab:34:3d:18:24:2f:3d:a3:9c:57:1a:97:02:
d4:63:af:aa:b0:0d:21:2c:1a:f3:b8:0d:f3:e8:4b:06:56:ec:
63:66:df:71:15:bc:6f:67:2d:bb:71:11:28:e3:4d:57:a6:c1:
12:f9:b9:4d:f8:cc:b5:df:23:08:bb:94:8d:17:16:6d:46:c6:
6d:e9:11:40:a4:4b:1b:82:29:b5:0a:72:29:3c:22:ae:71:1d:
13:b8:4a:08:b0:1f:90:43:84:a7:a1:a2:e6:a2:6a:8f:10:0b:
c1:77:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:15 2025 by rpki-client