Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/dqzUrFY323Ep8f9_EznYPf-FHbk.roa
File: dqzUrFY323Ep8f9_EznYPf-FHbk.roa (raw, json)
Hash identifier: tHn5PdWDaptFE9kcckqjz78Qa974P1HY2yrHA0Adm4E=
Subject key identifier: 76:AC:D4:AC:56:37:DB:71:29:F1:FF:7F:13:39:D8:3D:FF:85:1D:B9
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 0194258F793761EF81ACC8C42FF9CD74C966
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/dqzUrFY323Ep8f9_EznYPf-FHbk.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41095
IP address blocks: 87.239.184.0/21 maxlen: 24
91.194.116.0/23 maxlen: 24
176.56.160.0/19 maxlen: 24
185.65.172.0/22 maxlen: 24
193.33.70.0/23 maxlen: 24
195.189.120.0/22 maxlen: 24
2a03:9d40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:79:37:61:ef:81:ac:c8:c4:2f:f9:cd:74:c9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76acd4ac5637db7129f1ff7f1339d83dff851db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:ff:56:9b:61:93:54:58:c2:33:b3:ee:b0:
cf:33:7a:22:85:e0:c0:7f:fc:68:e7:cc:f5:9e:63:
e4:70:22:da:81:14:fd:d8:d4:55:51:94:ff:ca:fb:
ef:c1:c9:92:87:e3:e7:08:08:f4:e5:39:bc:11:ce:
d3:be:f1:f2:10:16:a9:64:23:83:c6:a6:ed:c1:25:
ac:7a:8e:3b:aa:df:35:07:81:86:7f:ae:50:e3:80:
fb:ed:20:8a:b1:63:40:f7:b8:0b:00:1f:3c:ff:df:
dc:b7:d8:35:6d:ef:35:d5:86:4b:5e:c2:4a:28:6b:
5d:4d:f2:ac:c8:75:e2:8e:f6:94:b0:77:7a:03:88:
49:58:a8:2d:89:96:5f:b6:97:b9:cb:7e:4d:f4:63:
b7:36:b2:fc:f7:7b:56:2d:54:05:46:4b:2b:e6:43:
f4:85:1b:c0:17:87:b5:16:87:22:20:a8:24:0e:79:
25:76:6e:a9:1b:6f:26:c8:c2:c5:7a:32:26:06:5f:
a6:f9:7a:ac:d0:cd:a9:99:9c:e9:f4:4c:26:cc:93:
fb:cd:1f:37:fb:7b:9d:73:37:21:a0:9f:2a:a6:31:
21:1d:76:64:f6:df:4e:28:05:9c:df:aa:8c:6f:77:
a9:e1:5d:88:36:f1:c6:1e:b9:86:ed:e2:96:6a:86:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AC:D4:AC:56:37:DB:71:29:F1:FF:7F:13:39:D8:3D:FF:85:1D:B9
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/dqzUrFY323Ep8f9_EznYPf-FHbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.184.0/21
91.194.116.0/23
176.56.160.0/19
185.65.172.0/22
193.33.70.0/23
195.189.120.0/22
IPv6:
2a03:9d40::/32
Signature Algorithm: sha256WithRSAEncryption
5f:d5:43:fd:0f:54:37:7c:4d:47:89:f8:2f:04:35:a4:bc:0d:
ba:fe:33:3e:f5:94:29:8e:45:39:09:7a:fc:36:04:d9:38:fc:
a0:7a:28:5e:b1:7e:6c:0a:3b:25:5f:37:be:4b:34:12:f0:00:
b4:98:f5:b6:b7:6a:c8:72:c7:d2:e6:49:da:6a:0e:a6:67:fa:
be:df:15:80:13:c5:ea:7e:53:3a:f5:f4:91:c1:15:95:6f:00:
0b:67:2b:51:a8:6e:af:78:58:c4:3a:e8:f9:0c:bb:47:5d:92:
0e:11:b7:d3:87:63:7e:28:05:9e:8d:0e:58:4d:16:5b:f1:7e:
20:01:3e:58:d9:cf:b4:40:49:94:72:6b:09:6a:81:73:ff:db:
7f:58:ae:f6:0d:e5:23:fe:44:6a:ed:a6:bb:05:02:8e:76:af:
47:8d:3c:d6:32:a9:ff:c0:87:2f:89:10:3b:be:a4:8b:af:54:
83:52:80:86:a9:b6:b1:cc:c8:c6:ba:46:ca:e4:9c:3f:fe:4b:
4b:6b:bc:48:68:0d:61:94:18:a5:9b:72:ce:ea:23:c8:d3:1b:
1e:c6:2f:ce:4f:fd:c5:f8:e7:b9:93:08:dc:20:39:fd:d1:ac:
e5:5a:3b:a2:87:c1:65:20:e3:d2:46:14:6a:e9:d7:f8:0d:d3:
e9:f0:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:06 2025 by rpki-client