Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa
File: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (raw, json)
Hash identifier: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=
Subject key identifier: DC:38:09:7F:C0:7A:80:79:FA:FA:1E:E6:B4:BA:4C:EE:E8:93:F7:3B
Certificate issuer: /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial: 019420D6174994E6D6C27BAFB2D3F72F29A8
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201160
IP address blocks: 91.235.64.0/24 maxlen: 24
185.11.212.0/24 maxlen: 24
185.11.213.0/24 maxlen: 24
185.11.214.0/24 maxlen: 24
185.11.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:17:49:94:e6:d6:c2:7b:af:b2:d3:f7:2f:29:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc38097fc07a8079fafa1ee6b4ba4ceee893f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:4a:ff:28:48:21:af:e7:c6:25:c2:7b:f9:
97:4f:73:d5:00:3b:a6:14:7c:bb:9e:3a:7e:17:1b:
39:5e:3c:04:92:d9:8d:53:52:39:d8:14:5c:81:73:
76:ed:db:a9:15:1f:28:70:7b:fc:10:f3:8d:14:26:
f3:0a:9e:1f:0d:74:dc:88:38:04:81:e6:b0:2f:4c:
aa:47:64:34:46:c7:f3:29:0a:3b:1c:1d:3c:89:46:
ff:c0:c7:17:b6:d1:6e:bf:21:11:c8:4b:a5:18:c1:
de:8b:62:0f:25:53:68:f7:56:74:26:c2:f1:53:90:
93:5e:bf:14:5a:5d:44:5f:f6:37:72:42:79:e0:72:
73:c7:e3:26:d9:10:ed:1c:ad:d5:78:bc:3d:2b:7a:
11:46:d2:b1:38:99:c7:df:85:fc:a5:fa:6e:38:ae:
e2:02:a7:e3:b5:9d:49:c5:3b:7b:7c:79:ef:10:14:
e5:ca:a4:3e:a8:07:fb:bf:14:27:01:28:bd:21:e3:
24:d6:5d:bc:1a:75:07:48:b9:bf:14:f2:3e:f1:db:
08:10:73:6d:c1:f9:22:97:69:cf:ff:83:c3:86:fd:
75:40:6f:26:15:76:bb:63:2b:77:52:89:ea:ab:05:
e3:dd:46:d7:0e:a9:b9:dd:d3:f2:eb:35:cf:15:3d:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:09:7F:C0:7A:80:79:FA:FA:1E:E6:B4:BA:4C:EE:E8:93:F7:3B
X509v3 Authority Key Identifier:
keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.64.0/24
185.11.212.0/22
Signature Algorithm: sha256WithRSAEncryption
14:92:8a:c1:81:38:58:46:46:52:5a:35:da:ed:d3:9a:70:f8:
95:b5:77:52:ff:15:1d:85:02:0b:17:c2:4b:54:cb:a9:dd:14:
e9:83:b0:a6:e4:1b:03:4f:8a:7c:bf:ed:c0:35:04:a3:9d:31:
9d:87:98:20:b2:cf:d4:5c:c2:f2:ed:29:f6:c5:a9:41:55:07:
65:7a:60:e7:f7:c4:f2:4d:d6:48:95:40:e6:9f:77:79:de:98:
31:4d:71:c6:95:f3:ff:47:de:02:e4:67:b7:ee:42:c4:06:6f:
90:2d:f5:18:81:76:62:36:70:47:05:15:3b:8f:56:65:04:4c:
6a:78:b2:00:8b:10:1e:9b:f3:da:00:3b:44:fa:a4:76:d5:6d:
e1:86:ff:3a:b2:07:5e:fe:3a:38:5a:27:cc:ae:eb:10:d0:b2:
24:13:4c:10:02:60:2f:ea:d0:77:b4:7e:09:24:de:42:a1:00:
7f:12:fd:5e:71:f0:f7:da:46:dc:b5:a7:d1:ef:f9:39:49:3b:
37:18:ff:2b:12:b1:c6:bf:cb:80:b0:d4:a9:70:32:ca:bc:ff:
74:35:a2:aa:3f:8a:82:a5:14:64:38:a0:5a:42:5e:4f:fa:c5:
fe:77:64:1b:a2:e1:eb:7b:0c:37:8d:e3:5e:68:9f:de:01:6c:
44:c4:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:02 2025 by rpki-client