Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa
File: qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa (raw, json)
Hash identifier: 3oUc3w7eQj0W70nllC5MQS//X4mPSXNpxrBOqqqOaLU=
Subject key identifier: A8:4D:4C:0C:A6:46:45:9B:5A:5D:09:35:BE:DF:9C:2F:FE:96:B5:42
Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Certificate serial: 019421B2372AF737E14740C09E9D19ED1EB0
Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200802
IP address blocks: 185.95.104.0/24 maxlen: 24
185.95.105.0/24 maxlen: 24
185.95.106.0/24 maxlen: 24
185.95.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:2a:f7:37:e1:47:40:c0:9e:9d:19:ed:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a84d4c0ca646459b5a5d0935bedf9c2ffe96b542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:75:73:b9:26:0b:69:c9:ce:ad:26:e2:fa:
f2:42:7a:57:fb:f9:49:26:af:ba:c1:89:87:9b:20:
a9:43:cc:cb:b7:e8:a1:a3:7d:f8:cf:7f:59:79:4c:
86:53:3f:8b:71:9e:d8:8b:1b:5b:7c:b7:bd:ca:db:
3e:e3:8b:29:e5:c7:db:6f:7c:f0:d7:26:2b:9d:9e:
df:41:f3:3f:26:58:ce:0b:f6:8a:e7:49:f2:43:54:
6c:fe:00:15:fb:3a:19:6d:91:08:ec:69:76:30:d1:
f1:a7:a2:d2:79:db:8c:1e:b6:ec:73:92:b4:2d:29:
2c:a3:67:28:72:a4:d7:ea:5b:59:47:c6:df:6c:d6:
d7:97:bb:4e:20:2d:9b:b4:a7:b7:96:74:98:80:21:
be:0e:81:58:08:62:b3:e4:49:2f:e7:a5:f3:49:2f:
7a:6f:83:1e:57:c4:58:6f:58:6f:d4:85:34:15:d4:
69:4c:50:e1:a9:33:72:88:dc:b1:b5:e8:57:77:24:
d6:f9:00:5f:5b:40:30:61:c9:1c:de:0f:fb:ca:a5:
15:dc:a7:d8:41:ac:f0:5f:56:9c:1e:ce:b6:f6:0b:
f0:53:74:f2:46:a7:06:81:4f:a6:e7:5c:f6:59:63:
43:d4:11:08:45:68:48:53:5c:00:5a:d0:a4:fb:e6:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:4C:0C:A6:46:45:9B:5A:5D:09:35:BE:DF:9C:2F:FE:96:B5:42
X509v3 Authority Key Identifier:
keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/qE1MDKZGRZtaXQk1vt-cL_6WtUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:dd:42:f4:2d:2a:c1:f7:c8:fc:ea:38:e0:de:33:ab:72:53:
ee:bd:63:be:15:05:68:42:d3:b0:b9:9d:76:b9:38:68:1c:da:
a4:81:42:90:0c:ab:52:b8:70:fb:44:04:bc:4a:32:7d:fb:2d:
92:21:12:49:1a:18:58:dd:4c:5b:44:e5:8b:d8:fe:ce:49:ef:
16:6b:71:5a:de:06:20:c8:9a:27:7f:d2:28:80:22:83:fb:a0:
db:02:48:44:61:3f:3c:4d:1a:50:3c:5d:66:20:a0:87:44:11:
b5:8b:fd:ee:c2:a3:17:a5:36:b4:52:ce:2a:4f:97:f7:f9:68:
80:df:0a:c0:18:7b:c7:a5:90:fe:a2:e1:dc:97:a1:21:8d:0d:
8a:f1:38:84:62:6b:93:45:8c:2d:85:42:5d:6a:b6:cb:42:9c:
07:20:4d:06:b5:3a:16:c3:f0:42:a3:fe:8d:b2:97:73:99:3a:
ce:1c:2e:0e:2e:f4:b3:a5:48:67:5b:fc:74:00:ea:39:ac:70:
54:fc:4d:fe:73:63:e8:05:8c:67:65:bb:42:e9:c4:68:b2:55:
6e:47:83:c4:7d:e5:9b:94:30:5e:61:71:85:0b:66:6e:85:63:
db:24:d9:60:0c:e1:b3:99:f9:b4:78:80:a8:41:cb:6d:cd:85:
8f:52:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:44 2025 by rpki-client