Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/3GfV3-LELKfnUeTQu576_MbUd9E.roa
File: 3GfV3-LELKfnUeTQu576_MbUd9E.roa (raw, json)
Hash identifier: BFBAfHBwGYmTouYuYf2GmULoSMGxaogtjP30rWRQKUI=
Subject key identifier: DC:67:D5:DF:E2:C4:2C:A7:E7:51:E4:D0:BB:9E:FA:FC:C6:D4:77:D1
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D6117F3630F12BFB81D7B56724B14C
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/3GfV3-LELKfnUeTQu576_MbUd9E.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35267
IP address blocks: 86.105.253.0/24 maxlen: 24
89.35.38.0/24 maxlen: 24
89.36.150.0/23 maxlen: 24
93.114.232.0/23 maxlen: 24
188.212.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:11:7f:36:30:f1:2b:fb:81:d7:b5:67:24:b1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc67d5dfe2c42ca7e751e4d0bb9efafcc6d477d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:73:dd:86:d2:e0:c2:2e:42:05:bf:67:c8:
90:6a:39:ea:ee:eb:e6:8d:8f:29:94:9d:53:c7:d4:
56:a3:d1:77:e5:3f:aa:f6:b4:b7:f2:94:4e:fa:67:
ad:9e:61:a7:82:b6:07:17:67:26:97:d6:2c:96:6d:
b4:78:61:60:aa:c8:27:eb:d0:7e:01:6d:8d:d5:91:
03:c0:0b:9d:d1:6a:40:a8:da:77:86:ee:0c:21:50:
52:47:8a:0d:a0:e1:bf:0d:cf:22:78:61:a0:58:9d:
e0:3e:a5:73:1b:83:9a:ab:6d:2f:d9:57:26:17:3c:
25:27:c3:15:43:2a:38:d7:9d:1e:6d:13:02:90:7c:
59:33:a8:eb:89:6e:ee:43:43:8a:9b:51:e8:9b:54:
bb:ad:4b:e9:e0:69:5b:cf:7c:fc:03:b3:d7:bb:81:
64:e6:1e:5b:d3:c4:12:de:68:97:46:9d:87:23:7c:
46:2f:62:b1:d7:99:45:71:59:51:3c:60:df:09:e7:
3e:28:19:d2:21:dc:d7:d2:3c:d3:e8:19:9c:18:64:
3d:63:64:ac:57:0b:d8:0a:e6:c8:8b:25:ee:8d:97:
9e:10:6c:50:42:fc:68:32:7d:99:6a:36:75:64:00:
8c:4a:cf:08:d0:49:7e:3a:50:0a:f8:49:67:63:bd:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:D5:DF:E2:C4:2C:A7:E7:51:E4:D0:BB:9E:FA:FC:C6:D4:77:D1
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/3GfV3-LELKfnUeTQu576_MbUd9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.253.0/24
89.35.38.0/24
89.36.150.0/23
93.114.232.0/23
188.212.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:b8:76:7c:f8:e0:ab:e1:2a:1a:7e:a2:35:c2:fa:37:2f:4a:
74:78:9e:9e:60:57:8a:fb:cb:77:47:00:a1:8c:40:43:a3:e5:
d3:b2:18:dd:b9:bc:ff:dc:82:c8:b0:05:33:27:ba:4e:df:c3:
61:a5:97:7d:0d:b3:48:4a:2e:c8:69:74:28:df:9c:16:23:18:
56:5c:f2:0e:fc:75:8b:f9:94:93:69:60:b4:13:65:3d:9a:b8:
c2:c6:d1:50:33:8c:e2:fe:ba:ff:8c:6e:b2:7e:43:3c:82:3a:
ca:ca:b6:e0:27:4f:21:bd:71:39:c5:bf:4a:07:b5:d3:8a:d1:
3e:bc:d8:e4:85:10:f7:57:62:69:d5:8f:20:8b:a1:c5:8f:96:
82:dd:3f:2b:57:8f:03:69:ab:ec:c0:bf:0c:ce:a5:ac:3c:9b:
19:35:9b:62:38:53:75:9f:8e:1e:d7:1d:88:04:42:05:af:2d:
c7:d5:43:be:ac:81:44:4f:eb:5f:2a:02:14:0f:5e:90:c8:86:
21:d5:a0:a1:d4:b4:d7:f2:19:a3:b7:49:4d:ea:9f:f9:a7:be:
fe:cf:ea:0e:33:80:3f:ce:84:a1:b4:47:df:f6:2f:12:2a:c2:
6b:19:51:d4:1b:70:ec:55:30:81:1d:2e:65:9a:89:c1:ff:8f:
a1:37:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:06:32 2025 by rpki-client