Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/3aNd9eZsJolPAPy2WUcnIA679FQ.roa
File: 3aNd9eZsJolPAPy2WUcnIA679FQ.roa (raw, json)
Hash identifier: eblt98UAYSnzgUqaK1ZwDyinlKt8BByqD/nttuJnoYY=
Subject key identifier: DD:A3:5D:F5:E6:6C:26:89:4F:00:FC:B6:59:47:27:20:0E:BB:F4:54
Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial: 019426D9999355DAC31CEC0974A56342C246
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/3aNd9eZsJolPAPy2WUcnIA679FQ.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41828
IP address blocks: 185.53.12.0/23 maxlen: 23
185.53.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:99:93:55:da:c3:1c:ec:09:74:a5:63:42:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda35df5e66c26894f00fcb6594727200ebbf454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:fd:98:32:e0:25:8b:92:21:80:c9:f2:78:
b5:e5:8e:fe:4e:a8:bc:6d:84:b8:ed:43:0e:ec:74:
fa:cb:0c:39:c2:29:49:6f:0d:0e:04:04:a5:c0:69:
34:8f:43:ab:24:ce:64:4f:ec:64:50:d9:eb:62:03:
a7:56:b4:be:a7:d9:a0:a6:ab:d7:b4:83:05:a7:ea:
5a:f4:bd:f2:5e:b9:54:1a:f3:eb:29:0c:09:ae:65:
fd:f8:72:ae:19:ac:1b:56:c3:6d:15:13:b2:f3:b4:
b9:bd:71:e1:f7:83:10:37:bb:39:bf:2c:5e:8b:b4:
73:3a:78:34:0c:a8:1a:c7:18:15:9f:a2:35:e4:9c:
cb:a1:61:9c:1b:05:ff:ee:2b:0a:0c:df:c9:2a:5d:
47:76:f2:e6:b2:5d:24:4a:12:d1:da:5f:90:1f:16:
a5:1b:ce:d8:95:38:fe:a1:90:52:c3:a8:10:89:d4:
b6:d6:ae:82:2d:a2:d1:28:40:cf:b1:ac:03:ed:e2:
8d:97:6a:28:9a:42:8d:00:19:53:e1:65:46:87:6f:
67:17:86:88:88:e5:5b:9c:b5:fc:82:76:a1:22:90:
62:f5:51:90:cb:5c:0e:05:4d:90:0c:db:a7:cb:02:
d5:a1:af:6b:8b:ea:aa:cf:6b:29:2d:6d:b9:96:5b:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:5D:F5:E6:6C:26:89:4F:00:FC:B6:59:47:27:20:0E:BB:F4:54
X509v3 Authority Key Identifier:
keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/3aNd9eZsJolPAPy2WUcnIA679FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.12.0/23
Signature Algorithm: sha256WithRSAEncryption
38:02:3b:63:d2:29:b6:4d:41:b7:82:53:f7:01:04:ab:5e:8f:
65:b4:c4:00:bd:f5:a1:fa:89:8f:bd:1a:e1:bf:03:12:d5:45:
53:2a:b0:ba:f2:69:a3:46:86:ef:4c:ec:fa:06:23:48:0f:f2:
0f:84:cd:5e:8f:f0:03:3f:b8:30:7b:ec:48:46:28:7e:58:e4:
82:98:90:3d:c4:e0:8b:17:93:9f:85:1b:96:a9:18:91:66:26:
58:23:4d:15:29:ba:ac:58:31:02:0c:d3:21:8c:3b:31:2b:cd:
e6:14:90:25:43:05:8b:fe:7e:cb:a6:5c:9f:fc:a3:3a:70:ea:
93:27:82:58:a2:14:14:86:db:11:70:f7:c6:fa:00:1f:52:eb:
81:54:ad:14:4c:ff:0b:bd:c5:8d:09:f9:47:61:e4:7c:95:88:
dc:4e:c8:9e:02:2a:5d:e4:ee:95:40:66:c5:fb:c8:46:38:10:
70:db:c8:04:fa:2f:d9:c1:59:60:3b:1f:ea:42:92:83:d8:8c:
b4:c1:af:c5:ab:7a:8b:e6:1d:1d:bc:18:27:f2:10:97:dd:a3:
2f:9b:53:b7:58:3a:92:76:64:ed:3a:c4:97:c5:5e:c0:29:c4:
78:d8:a8:86:82:82:8d:24:dd:c5:f4:96:f5:ea:cf:3d:ae:1b:
1c:15:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:28 2025 by rpki-client