Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa
File: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (raw, json)
Hash identifier: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=
Subject key identifier: 3C:76:B5:6F:08:34:8E:55:BD:C1:4F:99:C4:CA:E0:E0:A9:86:E1:97
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 01941FFA621FAC7E9D8A9D8C117FD7E51F83
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39430
IP address blocks: 185.236.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:62:1f:ac:7e:9d:8a:9d:8c:11:7f:d7:e5:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c76b56f08348e55bdc14f99c4cae0e0a986e197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:18:8e:6f:c9:b2:b7:57:54:f1:9d:5e:f7:
3a:98:3b:c2:4c:80:55:f5:19:60:de:cc:57:b2:a1:
0e:68:ad:f2:aa:dc:45:41:c6:eb:fb:31:e3:a0:a8:
f6:fb:0b:11:0b:0d:dc:dd:9b:33:ea:30:21:c2:10:
fd:c4:04:81:4e:9e:5e:58:08:5a:b1:d6:91:32:b9:
c2:3b:f3:a5:6b:9b:6b:13:a8:6a:50:49:98:17:93:
67:53:63:0e:65:c1:e3:25:6e:60:9e:df:ea:5d:11:
68:f4:79:51:97:ed:58:5a:29:ab:18:ff:f0:eb:59:
9f:30:67:71:50:8a:97:2e:28:dd:92:6e:7a:75:a4:
a4:07:b4:75:d9:7e:cd:e5:47:9e:d8:66:56:d8:b5:
d7:a5:02:9d:1c:78:f0:21:3f:19:25:90:64:8b:35:
b6:a9:4a:8d:76:76:a6:81:3f:7b:89:27:80:11:dd:
26:57:57:73:e1:57:df:74:49:62:ec:73:4d:57:93:
33:c4:82:6b:78:0f:4e:ad:da:77:77:20:04:50:1f:
0e:48:88:29:a7:99:56:7a:65:92:e7:27:c1:6a:70:
80:a4:73:fb:46:9f:b0:4b:8a:e4:64:b9:3e:8e:94:
f6:38:e8:49:0c:e0:b1:8e:6a:96:eb:11:6f:58:57:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:76:B5:6F:08:34:8E:55:BD:C1:4F:99:C4:CA:E0:E0:A9:86:E1:97
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.220.0/22
Signature Algorithm: sha256WithRSAEncryption
32:c8:b2:73:76:ef:43:95:49:ce:c1:97:2c:a0:24:37:e5:8a:
be:2c:dd:13:3b:e3:19:e3:3f:6d:0a:d0:bb:73:6d:53:2f:89:
37:ca:72:17:39:96:03:47:50:b8:82:c2:7f:a0:5f:46:68:fe:
e9:85:00:81:c4:3c:a3:5f:db:7d:21:9c:e1:bb:ec:d2:c7:d1:
06:6b:39:ba:87:d9:f6:ac:aa:2e:ed:1a:60:a2:8e:28:c6:55:
a8:2e:0b:c3:58:96:58:5f:d7:7f:d2:9a:16:c3:3d:94:4f:8e:
fb:8e:03:9d:9a:fb:d2:89:81:ea:60:a1:2b:e8:b8:98:3e:69:
f4:08:6d:11:69:84:7e:81:be:a2:57:36:6a:f0:ae:a5:9f:e5:
e8:fe:bd:02:0f:9e:2f:c5:2b:80:82:77:12:bd:de:be:d8:f1:
41:e8:a1:b0:7c:cb:97:1d:b9:d0:82:76:a1:f1:43:43:f7:50:
60:db:33:4b:58:34:7a:e9:93:28:53:45:22:5b:48:e6:a0:b8:
f4:d1:c4:5e:4a:e5:3c:76:1c:e2:75:99:08:0e:47:4f:c5:8c:
4a:89:93:68:5f:b2:07:a0:6d:dc:31:69:8e:46:16:2c:5d:59:
75:35:43:c9:76:fa:4e:06:46:3b:d4:71:fd:8c:4e:97:89:01:
f6:d9:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:42 2025 by rpki-client