Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa
File: k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa (raw, json)
Hash identifier: wlxEmhfh10lsvP/Vr0aaNNA3fnG6+QPuVB7G+98rWuk=
Subject key identifier: 93:84:AE:4D:35:AD:74:15:50:FC:B2:99:43:52:80:EA:50:CE:35:EC
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0194266C39512767A67FD4E4CF26ADC97D81
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211531
IP address blocks: 80.245.87.0/24 maxlen: 24
149.3.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:39:51:27:67:a6:7f:d4:e4:cf:26:ad:c9:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9384ae4d35ad741550fcb299435280ea50ce35ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:ca:e4:02:4d:fa:93:2e:64:65:e9:d1:d5:
2e:74:98:42:29:5c:b5:32:1c:5f:87:7f:13:10:a7:
f7:a1:0b:5d:35:e1:61:92:2e:52:93:54:d0:bd:8b:
16:1c:24:9b:f5:a7:ab:26:33:20:c0:e8:c3:f5:25:
be:a2:c2:8d:9d:ee:5b:6d:24:2b:73:97:d1:94:7d:
82:43:95:41:3b:db:f0:e6:b2:37:b3:90:1c:73:38:
8a:2a:61:23:46:26:b5:b8:5a:0a:db:7f:11:33:45:
c1:55:d2:73:7c:c4:3c:f9:76:1b:d5:ac:de:a6:48:
62:f8:b3:68:23:9e:a4:7a:a1:17:37:80:e6:a5:31:
a2:ac:8f:8c:32:6c:49:f9:7c:d5:ff:1b:29:60:58:
e5:92:a6:73:ae:e6:42:8e:7b:2f:79:b6:f2:de:68:
0b:0e:63:de:d6:cf:bf:a1:f1:8b:b7:b7:56:5d:78:
98:53:ca:0a:61:a7:38:7e:9d:bf:0e:ee:dc:63:1b:
5c:04:f8:10:a6:0e:41:ef:1d:5a:ce:76:35:2c:fa:
d9:f6:5d:19:14:10:83:55:06:7c:f7:9d:a2:5c:96:
b7:b9:22:32:f8:ce:7b:92:e5:fb:c9:65:29:9b:92:
02:c9:93:dd:d9:98:0d:ee:47:5c:d0:eb:2a:65:7c:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:84:AE:4D:35:AD:74:15:50:FC:B2:99:43:52:80:EA:50:CE:35:EC
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/k4SuTTWtdBVQ_LKZQ1KA6lDONew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.87.0/24
149.3.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d8:e1:ef:9e:2f:8e:c9:26:c1:0d:f6:ee:4d:24:e5:d4:bb:
81:1b:54:50:40:81:83:5c:0d:d5:92:62:df:c1:fe:3a:53:e0:
d6:f4:fe:7a:63:4a:50:8f:7f:4f:b6:a9:77:fb:f7:dd:d3:c9:
14:90:15:e5:fe:bd:be:11:43:81:31:e0:5c:14:14:b2:5f:bf:
78:d3:38:a0:ca:b5:11:f2:9a:ee:be:ec:ce:75:43:1c:b6:c2:
46:67:d5:1e:0b:5a:57:20:34:b6:f3:68:33:4e:f8:73:28:8b:
81:b5:ef:e1:a1:2d:19:8e:e1:c1:d9:94:6c:22:b5:cb:6c:8f:
a6:56:5e:ba:86:40:01:f8:d3:4c:10:08:5b:85:e4:f0:de:61:
57:3f:9a:f0:15:7f:e7:3c:23:31:d0:28:f9:05:63:1f:b0:9e:
2f:d2:97:b8:5a:5a:e3:05:fe:49:41:be:93:f2:b0:5a:f3:8f:
31:73:8c:ea:b3:17:f5:d7:e2:5b:1a:0b:c0:0f:76:18:4c:1c:
3a:2f:0f:6c:b6:62:86:cc:a1:ab:04:8c:34:71:1a:46:fd:f4:
dd:39:de:fa:e6:c9:b9:cb:2e:18:47:e9:ce:f3:38:6d:f4:c2:
f7:02:e8:00:56:38:90:02:82:6b:dd:70:7c:d8:62:66:00:69:
69:7b:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:22 2025 by rpki-client