Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/3v8-AVmS3D60nr6oY5txeF-mNWE.roa
File: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (raw, json)
Hash identifier: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=
Subject key identifier: DE:FF:3E:01:59:92:DC:3E:B4:9E:BE:A8:63:9B:71:78:5F:A6:35:61
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019421B205EA841B4DD9D568216AFB130474
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/3v8-AVmS3D60nr6oY5txeF-mNWE.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 193.163.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:05:ea:84:1b:4d:d9:d5:68:21:6a:fb:13:04:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deff3e015992dc3eb49ebea8639b71785fa63561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:a3:c3:8c:a5:f5:97:40:11:7b:b7:39:69:
92:5e:90:a1:3e:22:09:90:1d:f0:a9:8c:7d:0a:3a:
b4:4f:ab:45:e8:6f:5f:52:c7:94:39:cf:f9:73:69:
e9:b5:50:2e:6c:1d:e6:ac:b2:f9:ad:80:36:2d:73:
20:ed:85:9e:78:91:a8:d6:41:18:91:56:26:fa:66:
29:57:2b:0f:be:aa:73:84:83:f1:2f:4d:b2:1f:f5:
2a:5e:04:fc:c4:ae:34:b6:a0:ee:1e:09:0c:79:50:
83:37:c9:6b:a1:02:ae:2f:c4:e7:ad:07:fd:f6:03:
ab:f4:94:a1:73:8e:62:ba:6e:e1:d9:9f:04:7b:0e:
7d:5a:ef:3c:f6:57:73:f9:47:9a:3d:b5:1b:45:94:
b2:b5:df:f7:7b:d8:bf:7a:01:06:c7:3f:d3:6a:38:
bb:0e:a9:d4:58:9b:f4:d6:13:44:5d:43:b0:18:cd:
4d:c2:21:5f:14:dc:1d:be:8f:c6:27:90:ea:51:ec:
90:ec:31:36:a0:c5:af:5d:07:ee:07:cc:e5:12:f7:
6e:9c:cd:03:76:39:24:17:48:e9:10:cd:2a:db:37:
ff:52:e2:eb:41:13:3b:65:f4:bf:63:1a:6c:ca:b6:
f8:56:00:91:ec:07:be:b7:b3:1c:6c:19:90:ae:b6:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FF:3E:01:59:92:DC:3E:B4:9E:BE:A8:63:9B:71:78:5F:A6:35:61
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/3v8-AVmS3D60nr6oY5txeF-mNWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:78:bb:54:d2:ef:ae:2e:56:85:4e:cb:50:55:44:39:47:c0:
a4:e2:c6:44:76:95:db:bc:ab:88:7d:b3:25:07:15:17:de:5f:
4f:02:f5:c9:d5:ec:ac:3c:e4:40:86:d9:9d:45:e8:a3:0c:c2:
9a:07:94:b7:25:54:15:6f:b0:6e:e2:70:6a:17:77:d6:03:c6:
6b:e0:b3:81:f1:30:6b:c2:71:9f:30:0e:1f:c4:11:67:81:75:
3b:79:fa:5e:07:56:91:b8:cc:1c:13:8e:f7:0e:85:b0:58:b6:
c2:8d:bc:d4:3c:28:60:e2:68:81:37:d9:07:dc:7e:8a:6b:2e:
3f:3f:22:f6:6e:82:f0:bc:28:ac:15:3d:1c:1a:18:38:cd:a2:
08:29:a3:bf:39:76:e9:41:04:ba:0a:3b:73:7a:17:d6:92:74:
1d:df:90:c7:32:4f:25:f2:95:cc:98:49:68:3c:7d:96:cc:77:
2e:53:65:16:45:55:1a:82:a9:2e:9d:b3:2a:d4:9b:36:f1:8f:
b8:53:47:53:37:1c:a8:9b:18:c2:43:53:fe:b9:7e:dd:53:77:
91:68:78:ee:4e:7c:3d:52:84:d7:2c:e8:63:38:38:72:d1:91:
66:a4:35:1f:e7:4c:d4:65:2b:b3:57:c3:44:ba:e4:ec:ae:07:
60:70:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:42 2025 by rpki-client