Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/3sPU2X2zzDRvsMfK94CkKzBQsU4.roa
File: 3sPU2X2zzDRvsMfK94CkKzBQsU4.roa (raw, json)
Hash identifier: R00sfB2denxS/OHNxg4q8pRCPm0SOYbizoeUhKRjq4k=
Subject key identifier: DE:C3:D4:D9:7D:B3:CC:34:6F:B0:C7:CA:F7:80:A4:2B:30:50:B1:4E
Certificate issuer: /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial: 0194274823E3CCB88A2FDB68E2C3D6671BD7
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/3sPU2X2zzDRvsMfK94CkKzBQsU4.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.122.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:23:e3:cc:b8:8a:2f:db:68:e2:c3:d6:67:1b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dec3d4d97db3cc346fb0c7caf780a42b3050b14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:a7:c6:6a:e9:93:04:e7:20:1f:c4:4c:6a:
94:e1:06:3f:7d:46:fa:3d:0f:3e:04:78:25:c4:81:
a4:e9:59:1b:69:74:97:87:9f:88:d6:d8:89:23:02:
83:72:bf:8d:57:5f:f8:f2:2e:ea:8d:21:34:c0:25:
9b:10:a6:c4:87:c9:fa:da:57:25:88:68:f3:83:8e:
de:a0:15:3a:d9:92:37:68:a9:e3:cc:82:04:b6:fa:
64:25:53:76:22:8b:ed:35:09:e2:e6:8f:72:81:04:
59:31:66:fb:01:82:6b:8e:92:10:80:9b:cf:2d:6d:
da:ba:43:97:48:69:a8:26:69:99:f7:a6:43:bd:6d:
d3:8f:67:78:c6:d2:52:13:b8:41:a6:c6:16:7f:0b:
64:e5:18:58:c5:f6:b7:b7:86:b4:dc:f6:eb:2a:42:
07:79:8a:0e:71:6d:cb:d1:da:e2:35:d7:e6:db:c3:
8a:3a:dd:38:1c:e2:d3:28:7f:0b:ad:37:be:32:59:
ab:94:21:5e:5d:b3:6e:f8:7e:bc:5f:12:e1:aa:8b:
63:61:05:84:ce:72:e4:3c:34:a9:3f:a7:e7:12:b9:
c6:0c:28:de:e5:8f:ce:00:38:ed:9d:40:5c:31:2c:
9c:82:a8:c0:4f:36:c5:7d:81:65:25:69:73:12:4b:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:D4:D9:7D:B3:CC:34:6F:B0:C7:CA:F7:80:A4:2B:30:50:B1:4E
X509v3 Authority Key Identifier:
keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/3sPU2X2zzDRvsMfK94CkKzBQsU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.214.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4a:0b:eb:f3:3d:20:4d:2b:ac:80:2a:2b:f9:6a:e0:ea:ed:
eb:38:ff:9b:6f:e8:8a:53:e1:10:45:2a:cb:07:3f:8a:5b:36:
7d:ee:c2:19:bf:fc:00:a0:64:47:cb:9b:6e:3f:a7:8c:6b:9b:
f1:12:e7:78:30:11:bc:d9:56:06:ff:eb:6a:a2:a1:e1:03:a0:
57:d9:c6:4b:a6:01:b7:39:d9:2b:0c:aa:24:67:0c:e3:8b:af:
8a:55:84:1d:7d:9f:e5:6f:52:12:42:e1:b2:cb:6a:c5:25:0f:
8c:42:29:d5:a4:d2:32:8a:f8:80:b2:27:ae:50:c7:cb:2a:76:
2f:4c:84:e2:cb:34:4d:07:de:54:22:cc:7e:0d:95:b4:19:b2:
8f:70:c1:aa:76:26:af:dc:6a:38:9e:d0:df:3d:ca:0b:dd:a7:
a3:06:d0:0f:51:c7:1e:3e:6e:43:53:9f:ca:34:e1:25:69:5a:
0f:35:56:1f:c2:06:30:8a:06:77:c7:88:53:0f:da:d2:67:a4:
16:98:2d:8d:83:86:28:cd:1e:84:48:10:4e:a0:91:d5:ff:86:
69:fc:ad:74:eb:b9:a4:de:61:33:01:2a:9c:f9:47:7c:ca:89:
58:05:0b:4b:af:bc:8f:93:66:a7:c7:f4:1a:13:78:c6:44:cc:
a0:b7:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:25 2025 by rpki-client