Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/3P59Feb1jpoB_hwUGftROdmja6Q.roa
File: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (raw, json)
Hash identifier: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=
Subject key identifier: DC:FE:7D:15:E6:F5:8E:9A:01:FE:1C:14:19:FB:51:39:D9:A3:6B:A4
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 019425FC89BFA6E64D98084F210D3187DCD0
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/3P59Feb1jpoB_hwUGftROdmja6Q.roa
Signing time: Thu 02 Jan 2025 07:48:14 +0000
ROA not before: Thu 02 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34636
IP address blocks: 185.238.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:89:bf:a6:e6:4d:98:08:4f:21:0d:31:87:dc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Jan 2 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfe7d15e6f58e9a01fe1c1419fb5139d9a36ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:e8:70:02:13:21:e3:ef:dc:2c:cd:3a:1c:
5c:f2:38:a1:30:e2:8f:23:2c:7f:44:23:f1:98:be:
8c:ed:d2:85:84:d8:56:2c:1b:18:37:5c:51:7a:6b:
57:26:ac:76:93:2a:a3:5f:59:53:de:d7:e0:15:ad:
80:07:32:4d:77:8c:0e:73:75:c6:3a:b1:4c:6d:49:
a2:9b:f8:cb:28:fc:ae:5d:fa:10:61:31:e5:16:0f:
82:7e:d6:64:59:39:bc:6b:b6:ac:2d:9b:27:cf:82:
32:26:9f:b1:57:f1:7a:9d:1e:d9:93:a2:b5:b2:d2:
51:c8:14:86:bf:af:c9:4f:c4:b6:76:d8:a7:5c:7f:
5f:9c:1c:76:49:03:6c:83:ca:f0:60:de:1f:33:57:
92:65:7b:f0:48:6d:b0:38:88:67:b7:58:25:23:bd:
4f:1e:72:65:78:81:be:ca:e2:69:b4:da:f4:c0:16:
c6:ab:3e:9d:e0:8f:5f:65:3b:ca:87:3c:49:e1:97:
ba:41:8f:15:c8:6c:19:a4:0b:a5:68:e4:6c:16:94:
ca:5b:de:a9:a7:8c:3a:6e:72:44:da:85:65:7a:d3:
14:b8:66:d4:93:dc:45:40:c6:10:f0:f9:9a:0e:39:
04:4b:80:61:ea:6c:d6:9c:dc:70:2b:28:44:83:9d:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:7D:15:E6:F5:8E:9A:01:FE:1C:14:19:FB:51:39:D9:A3:6B:A4
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/3P59Feb1jpoB_hwUGftROdmja6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.140.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ad:c3:3a:dc:b6:b2:bb:cf:c5:14:f5:14:4b:35:5a:ba:d0:
86:60:e4:b3:9f:a2:ca:8c:d8:97:79:0f:0c:cd:f7:b7:0d:8b:
24:2a:30:9c:e9:f9:bc:63:2a:08:4d:3c:e6:0c:55:24:c1:4e:
de:b5:23:77:77:7a:84:16:61:bc:a2:8c:f6:f6:10:26:48:58:
3a:77:be:00:54:de:85:3d:1b:55:58:dd:d3:a9:6f:00:67:e8:
97:cc:33:df:4a:70:94:ec:c4:e8:41:b2:d9:89:7d:a9:c4:2d:
1f:d5:ed:d0:64:33:2a:08:1e:b4:ef:15:7e:8a:14:f2:5a:1c:
7b:2f:fe:47:af:e9:42:7e:cf:a5:c0:77:5f:57:f7:e6:3d:bd:
fb:58:70:06:f1:6a:25:02:64:f1:8c:1e:f1:19:2f:8a:2f:00:
56:71:bc:07:07:61:5d:ff:a4:d6:53:a3:c7:bd:ec:54:dc:2c:
a3:91:3d:b1:7c:c7:b7:ea:93:0c:57:79:c8:12:dc:da:14:7b:
c5:ed:64:9a:0e:7f:88:9a:b8:f0:53:00:35:84:50:0d:ef:7d:
e7:af:72:0f:c7:60:8f:f0:4c:ca:75:d1:07:ba:f7:7b:dc:29:
9c:f1:ec:61:06:54:ea:0c:26:5c:44:80:23:e6:03:a3:ca:88:
d5:09:3e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:35 2025 by rpki-client