Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/rk3ppAboxW06rE2L20ZKn9egqD8.roa
File: rk3ppAboxW06rE2L20ZKn9egqD8.roa (raw, json)
Hash identifier: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=
Subject key identifier: AE:4D:E9:A4:06:E8:C5:6D:3A:AC:4D:8B:DB:46:4A:9F:D7:A0:A8:3F
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 0194258E64AFD4B7EA4F66255E114C6C8B03
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/rk3ppAboxW06rE2L20ZKn9egqD8.roa
Signing time: Thu 02 Jan 2025 05:47:56 +0000
ROA not before: Thu 02 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208555
IP address blocks: 185.3.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:64:af:d4:b7:ea:4f:66:25:5e:11:4c:6c:8b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Jan 2 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae4de9a406e8c56d3aac4d8bdb464a9fd7a0a83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:49:34:6e:33:7e:69:ce:cd:ea:d6:8e:0e:
51:4e:f1:16:29:67:21:e7:5d:6e:f1:4c:62:af:86:
75:c4:87:e6:ca:11:b9:94:c7:aa:e9:32:a6:08:05:
7b:8f:8f:55:4b:6f:0b:8e:ff:68:d5:a8:a7:18:11:
9d:81:2b:4f:96:e8:ff:d5:d4:46:12:0f:4e:78:6c:
66:31:c6:29:e5:03:de:fd:6c:0f:a5:4a:44:0a:51:
df:88:e7:8e:cc:de:9b:a9:b5:51:3e:f2:fc:24:04:
0a:c5:a4:cf:00:8b:71:36:87:65:f0:31:26:69:34:
bc:1e:b2:a0:88:d7:ec:14:69:79:8a:36:21:51:98:
a9:8f:e7:9d:f7:3c:1e:cf:43:74:88:28:92:77:46:
9e:ea:2c:0b:9d:29:da:1c:c2:d1:7a:15:cf:85:ba:
16:59:09:7a:69:43:33:41:49:97:92:3a:2d:d4:0c:
68:8d:fc:fd:ac:d7:b5:7d:56:fa:e0:1d:1b:5d:67:
fe:85:10:5b:07:db:cb:77:a0:27:76:c6:52:e9:01:
f7:5a:1c:42:08:38:55:1a:4a:32:a5:e4:13:3e:75:
50:99:ff:1e:ee:10:b4:1c:98:d3:b2:6f:71:7c:63:
6c:ec:b8:52:7c:99:fb:4e:88:7e:e1:15:4d:12:0b:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:E9:A4:06:E8:C5:6D:3A:AC:4D:8B:DB:46:4A:9F:D7:A0:A8:3F
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/rk3ppAboxW06rE2L20ZKn9egqD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.124.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8c:b0:16:21:08:9b:33:bb:04:36:39:a6:3c:da:53:d5:c7:
c4:ef:18:63:63:3e:c5:00:7b:c7:92:15:7e:70:51:ab:8d:2d:
07:9f:3c:87:ed:79:1e:a1:d1:ca:46:27:62:1b:5c:58:bd:ba:
c4:c4:9f:f5:ef:c0:78:22:a1:28:b0:14:e4:26:bd:fe:81:ba:
13:99:be:e4:b2:8b:b6:79:e7:03:2b:69:05:4f:ea:9b:a2:41:
b5:ac:f1:a6:77:1f:7d:aa:34:98:35:8b:8f:b4:d1:47:bc:86:
ed:b8:fd:61:da:b9:1d:d4:f9:c3:a6:cc:cc:c0:a4:f5:e2:5c:
a2:29:15:59:c4:ad:42:fa:03:25:92:e3:96:1f:66:4d:02:38:
99:eb:ef:71:72:1e:84:6c:58:f9:65:46:ae:d4:d1:32:24:53:
bb:51:7d:05:f9:34:29:c6:ce:97:7d:db:5c:56:06:28:20:28:
89:ac:2c:e0:ff:cb:24:6e:03:8a:b7:7c:eb:f5:56:0d:2f:f7:
61:b0:a2:f2:01:9a:96:5b:eb:1e:c0:f1:20:be:c9:32:af:7d:
be:ec:42:f0:0b:ff:46:af:9a:a9:a1:8d:6b:b8:57:e3:99:4e:
d9:43:5b:24:bd:36:cb:e8:09:9f:ae:92:af:34:2c:d8:d4:8b:
70:97:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:30:06 2025 by rpki-client