Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa
File: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (raw, json)
Hash identifier: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=
Subject key identifier: 3F:7F:A7:3E:82:DF:E8:72:ED:18:E2:57:1E:99:EB:1E:20:7C:27:3D
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 0194228DE1590CDFC36172EC4EE28053DDBE
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215025
IP address blocks: 185.226.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:59:0c:df:c3:61:72:ec:4e:e2:80:53:dd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f7fa73e82dfe872ed18e2571e99eb1e207c273d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:94:60:31:79:e3:10:70:05:e9:f0:89:2b:
db:87:44:c4:94:6c:39:c4:98:94:cf:6c:c7:39:c5:
ba:b9:1d:9c:d1:0e:56:2c:1e:7e:a9:11:0d:c7:8e:
0c:06:21:7e:39:20:12:ca:3c:ad:26:38:c9:b9:99:
a0:01:6f:f5:cb:8a:39:a4:53:f1:8e:4e:ab:67:02:
b7:16:9b:b1:f0:d5:ad:63:46:d9:ee:cc:69:65:17:
5b:71:1a:1a:be:48:f3:9e:70:21:6c:2b:b7:58:f8:
e7:45:a1:f3:03:6c:bc:87:ba:32:a9:6c:03:b6:a5:
76:23:d4:a3:0f:f4:9a:83:7b:69:e7:a5:3e:06:60:
f3:31:58:e2:10:51:4a:9e:ef:7d:d5:03:93:cf:7c:
c7:a9:3a:67:91:c3:6f:99:a1:e2:72:5f:dd:b0:57:
32:12:bd:ab:62:d5:31:bf:cb:9b:cb:cc:3c:fb:1c:
2f:8f:1e:64:7c:36:0e:bf:8e:f5:73:92:da:3a:f6:
04:7e:4c:8e:b5:e1:f6:e4:36:7e:64:87:e4:97:3d:
95:e1:5c:b1:42:41:7a:1a:3c:db:4f:e1:1b:71:b2:
b1:ba:53:c2:0c:5a:b8:d4:94:45:ce:19:c4:ef:d7:
b2:4f:a4:88:b0:a2:fb:26:56:63:fc:fc:56:6a:7a:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7F:A7:3E:82:DF:E8:72:ED:18:E2:57:1E:99:EB:1E:20:7C:27:3D
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.89.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d2:33:9b:82:e8:66:d2:ff:0b:8d:89:a4:af:52:30:d9:48:
0c:5a:02:13:a0:53:6b:c8:27:bd:86:fa:33:e0:1e:bb:d3:dc:
7c:e6:42:d1:cd:1d:b6:a2:cd:fc:e1:21:4f:05:01:f5:1e:48:
d5:e5:48:92:35:f5:77:f0:da:ad:fe:33:1f:46:a0:b2:92:f1:
49:17:5a:06:8e:9e:bd:fe:3e:1e:7a:d5:9d:7e:19:a6:1a:86:
2d:02:35:fa:3e:61:d1:92:7d:1b:ae:f5:c8:6e:54:68:39:a8:
62:5e:4f:85:b7:98:7e:df:a9:cc:0f:fb:ab:ab:0f:69:f8:31:
33:f8:06:93:e2:41:13:04:46:7b:a8:03:e4:62:a8:82:4c:41:
0b:32:d0:98:6d:53:c2:5d:d9:a0:2e:29:eb:24:88:5c:9b:a9:
19:c1:bc:0e:b5:cc:ce:1a:7f:77:3b:43:8d:b4:bb:da:7f:7f:
fe:06:74:77:ca:ab:31:56:16:d8:b4:9e:17:56:95:c7:0f:e1:
93:5a:0e:09:ca:9c:43:d2:f0:a5:b8:98:cf:c9:65:0e:a2:cf:
1d:ee:50:b7:34:38:4b:70:e0:26:cb:02:e5:25:03:e3:66:b2:
0e:af:e1:35:5d:31:2e:31:7d:2e:8e:9e:63:39:47:4a:70:4d:
79:7c:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:55 2025 by rpki-client