Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/3H05rdAgVKWjnmulxpd_QVny7EM.roa
File: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (raw, json)
Hash identifier: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=
Subject key identifier: DC:7D:39:AD:D0:20:54:A5:A3:9E:6B:A5:C6:97:7F:41:59:F2:EC:43
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0194221F944D5CE0B32A5A1CC7D815340E28
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/3H05rdAgVKWjnmulxpd_QVny7EM.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207125
IP address blocks: 185.165.116.0/23 maxlen: 23
185.165.116.0/24 maxlen: 24
185.165.117.0/24 maxlen: 24
185.165.118.0/23 maxlen: 23
185.165.118.0/24 maxlen: 24
185.165.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:94:4d:5c:e0:b3:2a:5a:1c:c7:d8:15:34:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc7d39add02054a5a39e6ba5c6977f4159f2ec43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:c3:87:d3:0c:12:77:33:bc:f2:7f:89:93:
44:1e:2a:1a:2a:88:83:7d:42:bc:57:d1:c0:35:79:
d1:31:4f:d1:20:eb:95:5d:15:80:a9:68:99:15:12:
16:71:d5:63:73:f3:a5:8e:14:93:1d:94:08:f4:b2:
06:1a:e0:09:7b:0e:08:95:86:ae:fd:8b:a0:ad:f1:
32:a6:35:51:5a:f7:a6:cf:a5:27:57:16:33:10:fe:
08:74:82:bb:83:36:29:c3:26:3d:80:e2:90:4d:2b:
e3:57:6e:86:27:1f:4c:f2:4f:e8:6e:43:1f:b2:01:
da:37:96:64:79:ca:4d:5e:10:d5:b2:98:fd:e4:63:
81:7a:f7:6f:a6:7f:92:da:a2:9a:6b:e2:b7:a0:88:
37:17:46:fe:09:14:12:3f:a7:c1:75:f5:e7:8e:cb:
3f:11:41:85:42:25:fe:08:66:8e:7b:e0:ee:78:10:
66:b7:3c:00:19:ae:44:52:df:8b:dc:14:b3:0b:05:
9e:da:35:69:2a:28:40:94:bf:82:e4:a2:41:c5:cd:
53:e0:13:d7:d1:99:dc:8e:1a:02:c1:2f:b9:90:ea:
de:85:3d:39:f8:ea:1c:ad:85:46:db:d3:55:cd:ba:
6f:c8:c8:ca:d8:8a:47:85:5f:07:f1:a6:5a:22:a4:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:39:AD:D0:20:54:A5:A3:9E:6B:A5:C6:97:7F:41:59:F2:EC:43
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/3H05rdAgVKWjnmulxpd_QVny7EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.116.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d8:05:0e:f5:fc:fe:90:6b:35:0c:34:ec:9a:a1:f3:c4:62:
77:23:04:c6:18:fd:f2:31:b4:15:75:0e:a6:43:bc:d4:6f:9e:
1f:b5:d7:a2:d3:cf:54:58:6f:5c:09:ba:c1:32:30:f5:67:6b:
d5:5f:3b:4b:58:55:79:4b:d0:e1:aa:51:31:76:1d:e3:6b:cb:
02:22:d9:4f:47:bf:ec:dd:a2:53:e1:1e:2a:85:eb:de:a6:8f:
64:fe:d5:dc:d3:40:30:c0:93:6b:b2:cd:93:7a:b3:64:ab:22:
5c:86:be:04:e0:b3:7a:a6:da:c2:54:56:ef:ea:03:81:b3:f4:
28:13:d8:d6:25:24:9b:9b:00:d6:86:83:57:89:00:76:f5:1e:
1d:08:e7:3f:31:3c:bd:c5:56:14:c4:0a:14:3f:ad:a3:51:3e:
ca:84:a0:51:5f:17:0c:5d:90:d8:ba:6f:31:dc:fe:74:69:ce:
2a:06:25:7b:1e:ca:7e:44:77:bf:f8:9f:ef:cf:3c:3a:2c:5c:
49:c7:0f:3d:ef:5e:da:94:2c:1d:cc:d1:5c:4d:7e:34:93:0f:
3b:5d:46:63:6b:ba:e2:30:c0:fe:fb:31:5a:07:5a:22:df:a2:
c6:34:be:11:b9:e4:d4:86:ba:17:e5:dc:9a:3a:7c:86:6d:ff:
94:62:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:46 2025 by rpki-client