Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa
File: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (raw, json)
Hash identifier: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=
Subject key identifier: 31:2A:7A:B9:22:67:8B:04:75:B6:37:CF:8E:65:F0:F1:68:3F:D1:85
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 0194221F98C0AD2F9E91294A905EF5761CE2
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198288
IP address blocks: 185.208.252.0/22 maxlen: 22
2a0b:5dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:98:c0:ad:2f:9e:91:29:4a:90:5e:f5:76:1c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=312a7ab922678b0475b637cf8e65f0f1683fd185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:80:e1:23:40:c9:1e:c9:59:e4:07:b6:49:
d2:d9:07:b5:a0:c5:28:a3:48:06:76:fb:91:d9:21:
75:74:96:fa:1b:2b:79:f5:e8:f8:20:8c:6c:81:32:
af:f0:bd:7f:da:d8:c1:5b:be:43:79:32:97:47:5e:
bd:69:65:f2:90:1b:91:03:71:29:85:f9:be:b9:17:
f5:ea:26:55:27:f8:6f:9b:de:5b:5b:a4:0e:99:e1:
0f:02:ef:32:24:6a:23:71:a6:bf:dc:68:7c:73:7e:
41:b1:c0:1d:0e:89:e0:6c:b7:4c:74:3d:1f:9f:54:
73:60:64:87:09:0b:39:b3:1b:fd:c4:d7:1c:85:3c:
53:4a:90:14:60:29:ad:76:9b:64:e3:f5:84:02:2b:
5f:d8:01:f6:2f:6a:d2:30:23:66:24:74:70:75:ab:
03:17:1e:27:22:d7:d9:7d:85:2b:92:7c:0b:b8:09:
99:e5:c3:a4:0a:45:98:47:52:6e:ec:3a:82:f6:29:
d9:42:9a:0f:ab:23:d6:be:7f:c3:2d:7e:df:73:29:
ff:ae:b5:db:57:96:77:b3:55:3e:29:ef:ec:a0:ca:
e3:90:9c:41:5d:72:2e:69:5a:bd:e6:23:d7:b7:d7:
3b:e6:99:f3:83:b6:a3:bc:93:7f:dd:9e:46:e2:2c:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2A:7A:B9:22:67:8B:04:75:B6:37:CF:8E:65:F0:F1:68:3F:D1:85
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.252.0/22
IPv6:
2a0b:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:1b:25:fa:d6:de:fb:ea:5a:91:8f:01:b3:2a:f7:ab:33:71:
49:a3:20:38:f7:18:61:f6:f7:b6:0d:e6:4c:63:08:86:87:ad:
f5:e9:cd:6f:77:f9:86:f2:b3:b7:27:07:0c:6e:8a:93:0d:94:
8f:da:12:4c:0b:dc:8a:7c:7a:a9:ce:3b:b1:4d:25:cb:9e:2a:
88:a5:ef:74:5c:e8:df:7c:8d:f4:ad:a0:8d:8a:3d:6e:4e:c4:
aa:2e:ee:8a:1a:f4:b9:e8:93:a0:fd:38:61:ec:61:c8:ea:d9:
26:e2:56:f9:ae:9d:2c:ff:83:77:88:08:0f:25:f2:6c:43:d4:
67:02:bc:cd:00:2d:82:05:08:e6:03:f9:d7:d4:d7:55:5e:63:
f1:fa:5a:f5:cd:54:7c:bf:1a:ca:97:db:1d:a3:60:9d:d0:1b:
8e:8c:0e:87:bb:33:8d:10:26:aa:21:45:31:31:b1:50:e6:94:
54:9d:cf:4a:18:3a:87:f0:8d:28:8c:1c:14:7d:b4:14:f1:07:
c6:c2:31:64:ab:e9:f5:c8:5b:5b:ab:a7:55:2f:5a:c7:ed:6f:
bd:f3:7b:8c:81:c6:26:d0:fc:47:b5:4b:12:c1:a5:c8:2f:be:
8b:d3:57:44:5e:31:f3:09:73:19:25:2d:49:e9:df:3b:2e:ad:
07:44:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:47 2025 by rpki-client