Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa
File: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (raw, json)
Hash identifier: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=
Subject key identifier: 3D:DD:D3:6F:69:AE:5C:20:81:81:2F:96:F0:2B:BF:94:1A:49:DB:1F
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019424B2B395774B6B560E0A740FD9E9633C
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa
Signing time: Thu 02 Jan 2025 01:47:58 +0000
ROA not before: Thu 02 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209252
IP address blocks: 85.208.28.0/24 maxlen: 24
85.208.29.0/24 maxlen: 24
85.208.30.0/24 maxlen: 24
85.208.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b3:95:77:4b:6b:56:0e:0a:74:0f:d9:e9:63:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Jan 2 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dddd36f69ae5c2081812f96f02bbf941a49db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:6f:d6:b1:e9:8e:6d:b8:4c:9f:82:05:4e:
ec:0a:22:d5:87:03:b2:c0:64:76:64:03:5a:e4:fb:
16:88:dd:75:48:92:f8:70:2b:81:d9:df:82:b2:c3:
dc:97:4b:c5:d9:6f:90:4b:61:4f:15:ad:47:8c:6e:
eb:a8:d7:b1:63:18:84:2d:44:bd:49:1c:5c:6f:52:
22:2a:f2:e5:94:bc:10:c5:d8:32:3a:64:01:f1:e0:
ed:9a:0b:86:79:07:3f:f3:54:3f:47:ec:af:93:c6:
e9:cd:94:e3:8a:8d:e8:1f:66:0d:a7:f1:d1:20:61:
d8:8e:a8:47:56:f0:b5:c7:8e:78:1f:8b:bd:e9:10:
be:31:9e:c1:ed:4c:ad:86:09:3f:1e:c3:6a:ad:c3:
c4:80:e9:b4:45:2f:ca:d6:92:f5:71:40:ff:b3:5d:
79:87:43:b3:70:20:ad:c9:4b:e2:df:7c:cb:71:af:
00:71:90:6d:58:f1:b3:19:28:53:e8:04:8a:e2:d9:
74:a4:b4:c1:84:29:3c:31:0c:72:6d:06:6b:7d:d4:
9b:9c:92:59:4e:68:a8:9a:c5:90:1e:f6:0a:de:83:
f5:81:a0:70:d7:fa:2f:84:6a:a9:58:4e:5b:d3:98:
0e:ee:46:71:53:b3:aa:46:52:eb:e3:75:0e:0d:a1:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:D3:6F:69:AE:5C:20:81:81:2F:96:F0:2B:BF:94:1A:49:DB:1F
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.28.0/22
Signature Algorithm: sha256WithRSAEncryption
89:38:a2:7f:fa:ce:af:3c:f0:74:9b:51:54:59:4a:d4:05:b0:
25:80:eb:4c:af:87:03:0d:97:8a:f1:c1:62:4e:47:05:ee:6c:
25:53:c6:a1:c1:c4:0c:d8:f9:5c:0b:8d:73:28:05:4d:06:02:
68:15:5b:b5:7f:de:c7:6d:35:5c:3e:db:e0:d3:0c:47:b1:36:
44:bf:ab:12:a6:96:50:7c:47:80:12:55:02:b3:3d:ad:8f:2d:
48:69:a0:0d:23:e3:a5:97:0d:f0:01:9e:e6:2e:91:04:c5:b2:
fc:7d:4f:82:af:4d:66:3b:ea:30:c0:c8:22:c3:21:2e:c7:2c:
4d:bb:39:5f:50:54:59:e3:13:c1:79:15:40:50:3e:22:70:f7:
b9:73:f0:fc:7c:3b:7e:fd:d4:3f:8c:08:74:c7:bf:48:e8:10:
c1:fa:42:47:08:2a:f3:6b:91:28:ff:d9:97:3f:33:61:3e:36:
49:95:6a:cc:aa:5c:7b:c6:ef:3f:2d:44:51:bc:70:16:95:2b:
01:8d:26:01:68:04:ec:d9:89:ee:63:28:c9:ee:d1:d7:2b:50:
d9:a1:e7:63:54:3a:47:9f:6a:ef:3e:05:0d:d2:fd:07:08:41:
57:5c:8d:2e:0a:95:e9:23:e0:58:c0:b0:38:e0:63:5c:1d:6f:
c1:9c:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:34:19 2025 by rpki-client