Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/3sW1LIAP4OPUbWoGQVrBqUkBPNE.roa
File: 3sW1LIAP4OPUbWoGQVrBqUkBPNE.roa (raw, json)
Hash identifier: kCWjkhC1QbkOCUii1x7Bgqm2WuhU/cK7rFHITNpg92M=
Subject key identifier: DE:C5:B5:2C:80:0F:E0:E3:D4:6D:6A:06:41:5A:C1:A9:49:01:3C:D1
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 019421B23E86C70BC12C8B29E319A9E8ED8E
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/3sW1LIAP4OPUbWoGQVrBqUkBPNE.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2865
IP address blocks: 195.138.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3e:86:c7:0b:c1:2c:8b:29:e3:19:a9:e8:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dec5b52c800fe0e3d46d6a06415ac1a949013cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:72:52:65:3e:95:02:28:2f:cc:76:56:e4:
a8:b2:74:ce:cb:a6:f4:79:6b:63:74:2f:25:51:3c:
e3:95:01:a0:9c:a6:4e:e1:c8:38:4e:20:68:28:ef:
10:20:1b:07:e7:37:c4:b6:78:f1:60:15:32:fd:ff:
d2:3f:f8:ea:97:bb:2c:e7:dc:40:bf:01:6e:62:c9:
35:04:5b:34:f8:c3:5a:af:67:ce:9d:19:be:1a:91:
da:73:09:6b:06:fd:35:89:cd:05:a4:91:24:20:f7:
32:fb:9c:de:82:67:74:2f:c0:d3:61:93:1a:a7:12:
17:db:e4:63:e2:d9:0a:73:bd:69:95:f5:01:9c:b9:
e0:aa:6f:5f:a4:c0:17:1c:d3:49:73:c7:9b:5e:b2:
f5:3a:98:d1:12:b3:25:9b:8c:0e:f4:eb:d9:c0:11:
2a:14:0c:de:60:dc:84:4f:76:ad:52:3a:1d:0c:0c:
e0:1a:78:b4:fb:33:11:f2:31:67:9d:23:2f:bc:95:
4c:7b:a7:a6:19:ff:40:32:14:d8:59:32:97:c4:64:
a9:64:7a:2d:fd:b2:54:11:4d:1b:1d:65:d0:fd:dc:
b7:28:af:8f:f4:8f:90:7d:c8:02:cd:3e:8d:98:76:
2d:e2:36:64:50:ff:30:c7:0f:95:c1:a0:d9:c6:f2:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:B5:2C:80:0F:E0:E3:D4:6D:6A:06:41:5A:C1:A9:49:01:3C:D1
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/3sW1LIAP4OPUbWoGQVrBqUkBPNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.221.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5d:cf:ee:f8:86:bf:87:e5:f5:27:d1:98:ef:ce:4e:e1:05:
c9:11:88:f1:98:28:ae:38:96:13:df:21:3b:3d:b5:b2:34:8f:
ec:76:50:a2:56:13:31:0d:4f:25:03:c6:b0:c3:89:07:ae:20:
64:d3:7b:ac:21:6e:79:d7:78:bf:25:e5:e9:be:bc:bd:c7:29:
c0:01:7f:67:99:10:0e:95:01:c4:c1:32:d5:1a:50:c4:b4:46:
58:85:be:e8:91:cb:c0:6e:cc:31:22:3f:10:86:f3:ed:59:b2:
79:55:84:55:09:a1:dd:e2:20:ed:a1:7b:2e:64:33:46:d6:88:
48:e9:7b:45:b5:1d:28:d4:8b:0b:0c:2d:e6:4d:c4:62:b1:e1:
9e:31:bd:ea:f7:3e:be:0b:50:47:40:53:c4:03:98:d6:35:76:
ba:38:6d:95:be:0e:f0:7d:0e:6e:7d:39:00:2f:44:cc:c2:59:
5d:ce:71:2c:47:a9:28:c9:84:03:24:72:7e:3b:2b:fe:57:2a:
de:67:50:03:65:50:b4:60:12:e1:64:cd:c6:55:bf:9a:7b:b9:
92:28:d9:66:0f:80:60:88:5d:9f:3e:4b:84:26:2a:a5:8a:76:
23:bc:12:b3:a1:9e:c2:03:f8:74:80:8a:1a:ee:b2:32:1d:c6:
23:af:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:01 2025 by rpki-client