Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/iLnTG4KE8dlv3U1b1zLTb14pMfs.roa
File: iLnTG4KE8dlv3U1b1zLTb14pMfs.roa (raw, json)
Hash identifier: umNqCdl7NmuDT1iFaPafaeRzRV1NstNTawuuz+ySb2o=
Subject key identifier: 88:B9:D3:1B:82:84:F1:D9:6F:DD:4D:5B:D7:32:D3:6F:5E:29:31:FB
Certificate issuer: /CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Certificate serial: 0194266B298463100F9BB1F912EC9A2C9C79
Authority key identifier: 3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/iLnTG4KE8dlv3U1b1zLTb14pMfs.roa
Signing time: Thu 02 Jan 2025 09:49:04 +0000
ROA not before: Thu 02 Jan 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60049
IP address blocks: 185.57.232.0/22 maxlen: 24
2a02:46e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:29:84:63:10:0f:9b:b1:f9:12:ec:9a:2c:9c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8dd43928edfb1200efbc62c441f9cd29048585
Validity
Not Before: Jan 2 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88b9d31b8284f1d96fdd4d5bd732d36f5e2931fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:87:7c:97:6c:dd:cf:4e:05:e1:9e:55:fa:
6d:0e:26:71:08:29:51:80:0d:18:3a:d8:ad:7b:ca:
f5:e6:4b:52:37:f7:8d:bc:2c:b2:b3:5c:51:b9:d4:
81:2e:81:33:c5:97:4e:c5:0d:da:9c:15:ff:fd:6e:
c2:25:8d:85:ee:94:cf:9a:9d:af:cb:b3:96:aa:1b:
b6:1a:b3:5b:b7:26:90:39:92:49:63:b8:83:51:94:
f7:94:01:c8:c4:a0:33:2c:05:da:fe:06:4c:3d:02:
51:21:0b:9f:75:82:50:8a:10:7d:2c:06:8f:9d:83:
bd:d5:3b:2a:c9:8c:36:2b:49:1a:fe:ea:b4:ba:ec:
c4:53:28:a0:29:08:83:1a:d0:a8:b4:a4:6e:2a:4a:
95:90:8b:2e:0b:bd:01:85:36:ee:2b:a5:a2:64:9f:
42:ef:3a:49:99:79:0e:70:75:28:0b:02:7c:f6:ba:
6e:f5:7a:94:f5:70:49:3d:c2:66:94:32:b4:dc:2e:
d0:b8:9a:28:0d:ed:df:dc:a1:db:52:9c:83:34:82:
3d:28:92:d4:1a:78:a2:70:09:73:e5:c5:51:8c:95:
67:51:87:84:e0:50:d7:05:a9:5b:1d:9f:89:2c:48:
91:33:c5:b9:5d:4c:05:bc:a2:7a:73:61:c9:69:ce:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:D3:1B:82:84:F1:D9:6F:DD:4D:5B:D7:32:D3:6F:5E:29:31:FB
X509v3 Authority Key Identifier:
keyid:3E:8D:D4:39:28:ED:FB:12:00:EF:BC:62:C4:41:F9:CD:29:04:85:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Po3UOSjt-xIA77xixEH5zSkEhYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/iLnTG4KE8dlv3U1b1zLTb14pMfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/Po3UOSjt-xIA77xixEH5zSkEhYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.232.0/22
IPv6:
2a02:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:f2:da:ec:38:20:d6:da:62:bd:d8:a1:9c:23:9b:55:d2:ba:
7e:80:8c:b9:6d:d8:9c:56:36:5f:28:79:2a:69:52:a5:13:79:
0d:a9:e2:42:61:d8:f0:0c:db:88:39:a3:f6:e1:78:fa:1f:7d:
66:ff:7b:fe:be:77:9d:af:40:83:05:7d:1c:38:bc:43:61:fb:
61:9c:21:f5:79:2a:c6:f6:09:64:5e:13:c1:65:36:af:09:95:
6e:1a:99:bb:d7:57:e8:15:e1:77:55:ae:d6:e3:a8:43:6c:8a:
8e:de:3b:e5:ba:07:d8:62:06:56:8f:ad:cc:2a:ab:37:89:e3:
31:ac:74:07:c1:04:6c:13:a5:e9:9e:e4:2a:83:b6:7f:bb:4e:
c5:88:b9:98:47:10:b4:cb:a7:ee:cd:6e:4c:9c:bd:c9:53:d5:
c9:4a:9a:79:6f:54:53:05:aa:6b:7a:03:9d:46:ca:6b:a7:32:
d5:fa:63:47:53:ec:10:9e:d7:da:a4:f4:69:36:9c:00:33:3d:
73:cd:98:14:96:40:12:29:57:21:1a:04:42:c0:90:97:bd:44:
ac:99:a1:51:5b:8b:54:5c:ba:2d:69:ad:44:d0:59:c2:6e:ba:
25:01:93:5d:46:2d:e2:23:a5:dc:b1:d8:64:f1:d1:22:19:46:
4c:a1:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:00 2025 by rpki-client