Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/3cGSK8NVA9eNtztBrAr51UavoEk.roa
File: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (raw, json)
Hash identifier: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=
Subject key identifier: DD:C1:92:2B:C3:55:03:D7:8D:B7:3B:41:AC:0A:F9:D5:46:AF:A0:49
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 019425223C5D2EE7FCD011AA16F429DDAC89
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/3cGSK8NVA9eNtztBrAr51UavoEk.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199378
IP address blocks: 185.151.116.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3c:5d:2e:e7:fc:d0:11:aa:16:f4:29:dd:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc1922bc35503d78db73b41ac0af9d546afa049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:e7:c6:a1:7f:cd:0d:dd:99:07:7a:ab:e5:
33:80:2c:62:62:f1:0b:f0:a2:64:d3:a7:2c:d2:85:
0b:56:53:ec:e2:1a:0d:0f:52:7c:a1:72:da:4c:1f:
0f:1e:ea:25:5d:85:f5:41:3d:b2:20:87:95:80:f7:
5e:38:42:36:a1:04:f6:c8:8e:b5:07:9a:07:2c:3f:
e5:a2:01:69:aa:97:fc:9f:00:2a:2c:c5:c9:83:c1:
08:1e:17:25:78:7e:e0:ab:47:8f:22:08:68:17:fd:
36:cc:0a:91:8c:78:41:1a:ad:8b:72:5b:d0:fa:b8:
a6:93:ff:6d:c5:f0:53:64:61:8c:1e:06:65:1e:9b:
ea:86:c0:14:bb:70:5a:59:8a:d1:48:71:ce:e7:d1:
dd:02:76:a7:28:c0:b5:39:8b:73:ba:20:95:60:73:
ad:1f:38:df:76:80:ba:88:d7:e9:e4:3c:d6:51:ce:
7b:ef:0e:fd:36:57:f1:66:84:f9:c3:c3:20:07:bb:
b7:44:99:ae:a3:95:b5:80:d3:46:47:e3:62:9b:19:
d0:78:0e:d6:25:86:35:c5:32:57:c0:cb:1c:dc:25:
ec:b0:6d:d7:36:5e:46:9c:fe:22:be:6d:7e:ac:15:
74:a5:a5:e6:60:2d:80:18:8e:c1:6d:d0:1f:e1:18:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:92:2B:C3:55:03:D7:8D:B7:3B:41:AC:0A:F9:D5:46:AF:A0:49
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/3cGSK8NVA9eNtztBrAr51UavoEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.116.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:0c:c6:f0:db:10:48:2e:11:3f:c9:47:5f:f1:05:74:dd:d3:
e5:99:d8:08:7d:19:68:b3:44:08:9d:7d:6e:f1:58:e0:f8:1f:
83:bc:c3:b3:96:d1:cc:41:18:c0:63:67:3a:0d:e0:12:6e:8f:
cd:ee:18:62:6d:ff:ab:1a:22:48:a0:74:09:95:e2:7b:8d:e5:
df:54:f9:4a:af:01:4a:cb:6a:37:03:88:65:52:e5:0e:0b:e5:
dc:85:9b:1e:29:67:c7:d6:80:e0:ce:fe:c0:7a:5a:55:76:d2:
a7:8f:4f:4e:99:60:a1:c3:a0:91:c5:91:d9:9b:5e:c7:9a:72:
f5:fd:f8:8c:55:e2:b2:59:27:bf:26:46:c3:7e:f1:4f:83:5d:
b6:1d:b4:db:38:7a:74:29:0f:c3:7b:91:6b:8b:ec:fe:ed:dd:
e0:34:c2:11:f5:07:0c:cc:b2:70:92:7d:0b:3c:b8:01:16:60:
49:e3:50:cd:57:c9:73:e3:35:8a:19:5c:c5:c9:78:f5:ec:12:
59:d8:c2:36:67:cb:fe:88:21:8f:e7:a6:42:d3:fb:0d:89:3c:
aa:37:15:22:42:81:e0:01:d4:f8:79:54:43:86:3e:bc:7a:a5:
54:57:d1:f9:88:c1:29:70:a5:8e:c1:58:eb:9d:56:89:86:ad:
62:3b:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:50 2025 by rpki-client