Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/s3By1xAgm0Piz-TUrYDBrs1WoXU.roa
File: s3By1xAgm0Piz-TUrYDBrs1WoXU.roa (raw, json)
Hash identifier: BgzNGbdXko+tn+sFUWTRIfviR0vd7FxJVj54FcWlz/E=
Subject key identifier: B3:70:72:D7:10:20:9B:43:E2:CF:E4:D4:AD:80:C1:AE:CD:56:A1:75
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0194266C3CB1F95291CC3E16BBB87D377EDF
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/s3By1xAgm0Piz-TUrYDBrs1WoXU.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15596
IP address blocks: 85.153.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3c:b1:f9:52:91:cc:3e:16:bb:b8:7d:37:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b37072d710209b43e2cfe4d4ad80c1aecd56a175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:c2:62:72:c0:1d:27:9e:6f:19:5a:15:3a:
a2:ef:25:90:eb:9f:99:7b:b9:2f:0a:99:c0:07:5d:
b4:50:7b:a1:ca:3c:40:82:59:b9:57:82:3c:f4:7d:
74:98:c4:bd:52:dd:a1:4b:94:d1:b7:a0:76:aa:d7:
9f:22:b2:42:db:ff:c1:34:43:cc:35:a5:32:09:25:
a2:28:85:9f:57:0b:3c:cc:40:4d:66:5a:f9:07:82:
6d:c9:b0:d1:53:ba:d7:48:75:06:51:ad:00:fa:c7:
b4:80:e2:62:4c:3f:7d:8a:dc:ec:2b:d4:fa:e4:af:
19:6e:e0:dd:9a:c8:3f:d3:14:d7:00:3f:4e:b1:31:
a4:31:fa:f2:16:1e:2f:79:a7:cb:ac:10:fd:91:08:
f8:35:4e:6c:4d:27:e7:18:88:03:cd:dc:f9:50:8a:
ac:95:06:6c:60:5c:d9:ef:5c:26:9d:1b:53:00:1d:
d4:de:3e:ee:a0:f8:0e:83:ca:65:f2:96:b2:15:a6:
7a:c4:a3:bf:c2:96:93:34:4e:fb:c6:80:0b:e9:79:
de:13:2f:74:b6:dd:43:44:34:6e:88:df:bd:2f:5b:
dd:b0:28:28:11:95:79:7c:ed:cb:e6:61:2c:4e:20:
d7:9a:77:2f:3f:8d:94:34:c6:03:f9:8b:65:e0:c2:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:70:72:D7:10:20:9B:43:E2:CF:E4:D4:AD:80:C1:AE:CD:56:A1:75
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/s3By1xAgm0Piz-TUrYDBrs1WoXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.76.0/22
Signature Algorithm: sha256WithRSAEncryption
29:bc:b5:11:12:2d:3e:9c:4d:f2:45:46:8d:b9:dd:f4:93:ac:
ad:0b:0e:f0:b0:c7:df:90:98:f5:60:d5:51:c9:8b:dc:e6:6e:
9e:f1:18:cd:ca:a2:b2:ef:43:e8:4f:5e:19:18:30:4e:eb:33:
1d:f5:d8:4a:1a:fb:2e:70:bf:a9:28:27:b7:03:dd:57:8b:45:
fb:27:28:9e:d3:f8:97:43:df:b2:97:04:c2:5f:b4:3a:4e:52:
41:6c:a3:5b:1f:fb:c0:b0:4f:57:b1:92:cf:e0:cc:69:4f:f9:
f1:f5:8b:af:78:b6:57:c2:e0:b7:36:af:30:ee:49:1d:6d:38:
a9:41:58:95:22:60:7f:c9:0e:53:98:0c:59:94:c5:3b:a8:e4:
43:d0:ea:b1:91:93:90:d9:17:70:ae:73:eb:fb:0e:cc:8e:2a:
17:51:50:92:8a:a0:2f:04:79:ca:31:45:d7:11:df:e1:79:0a:
86:a9:11:76:82:94:6b:0c:db:13:b0:91:02:3c:1f:5e:67:e4:
80:17:8f:90:1a:bc:7a:61:bd:d5:5f:43:f4:14:6b:f1:5b:66:
a8:be:f2:a9:a0:4a:f2:24:86:4c:98:8d:9b:37:93:9b:5b:a6:
75:7e:65:89:47:94:b7:72:30:8a:57:b0:79:2e:ec:f8:ec:2d:
f2:d2:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:33 2025 by rpki-client