Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/3DXXEnpw8Kq8exXKbL27_UtPX4M.roa
File: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (raw, json)
Hash identifier: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=
Subject key identifier: DC:35:D7:12:7A:70:F0:AA:BC:7B:15:CA:6C:BD:BB:FD:4B:4F:5F:83
Certificate issuer: /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial: 01942827F7F42537209C97CB4A673BF0383E
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/3DXXEnpw8Kq8exXKbL27_UtPX4M.roa
Signing time: Thu 02 Jan 2025 17:54:55 +0000
ROA not before: Thu 02 Jan 2025 17:54:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41690
IP address blocks: 185.223.156.0/22 maxlen: 24
188.65.120.0/21 maxlen: 24
195.8.214.0/23 maxlen: 24
2a03:d1c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f7:f4:25:37:20:9c:97:cb:4a:67:3b:f0:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
Validity
Not Before: Jan 2 17:54:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc35d7127a70f0aabc7b15ca6cbdbbfd4b4f5f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:3b:f7:5f:82:6a:65:7c:a6:78:76:32:4c:
64:2c:47:bf:f0:03:82:80:a7:29:e4:40:28:8a:88:
e0:72:59:f8:83:e5:31:57:4c:88:b9:d4:38:f0:ae:
47:69:0f:b5:e8:1e:64:bb:62:be:1d:55:8b:55:58:
ee:ee:22:34:c3:98:c5:d9:83:e5:aa:3a:50:7a:22:
8c:01:7c:96:f0:60:df:2f:5e:fd:00:c8:37:ec:cb:
fb:5e:20:96:ad:e2:6b:aa:00:3f:07:e9:57:f6:16:
38:37:af:43:9d:6b:52:36:e3:34:33:2d:6c:85:c8:
ac:16:e6:91:b1:87:4d:7a:a4:54:1a:0e:bf:2f:cc:
b5:6d:02:13:e8:a8:61:fc:51:80:f8:12:ff:07:da:
6e:ca:b9:f8:ac:fa:67:f6:96:c4:e4:d8:0e:ca:9e:
ee:2d:d7:68:52:3b:91:43:c5:b6:17:0c:79:0e:bc:
bb:8b:30:70:75:26:a6:3a:76:c1:5c:78:24:e5:ee:
a3:33:1b:5d:da:7a:5c:bc:9f:60:53:e0:ed:56:66:
98:5b:cc:47:fa:d0:b7:6f:12:35:a9:03:48:f1:48:
2f:f7:e3:18:9b:a4:07:be:24:18:66:fb:a2:a5:84:
ae:a1:ad:89:d2:c4:af:2d:e2:00:a1:19:d8:93:6c:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:35:D7:12:7A:70:F0:AA:BC:7B:15:CA:6C:BD:BB:FD:4B:4F:5F:83
X509v3 Authority Key Identifier:
keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/3DXXEnpw8Kq8exXKbL27_UtPX4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.156.0/22
188.65.120.0/21
195.8.214.0/23
IPv6:
2a03:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:a6:7b:75:f5:35:de:00:af:f1:d0:a6:7a:2f:27:36:1c:eb:
9a:2f:29:dd:a9:6e:b2:f9:92:03:d8:c4:17:a7:10:d2:fa:e7:
d2:ba:ad:31:1d:cb:87:94:15:a3:85:71:27:e3:b8:30:87:19:
66:48:06:b2:c4:70:9a:5a:8e:1b:e5:c1:45:6e:ea:cb:01:07:
d1:30:9b:49:5a:b4:a4:45:86:d7:35:26:1e:e3:ff:a6:f4:d2:
33:7c:78:59:e6:1c:65:55:ba:62:ef:2b:87:97:4e:5a:91:31:
8f:2f:c1:cf:37:e5:c3:4b:2d:31:c5:58:c8:70:39:d6:56:34:
bd:a4:3c:ea:50:56:95:52:62:d8:81:88:33:d8:87:1e:85:e1:
2e:da:45:0b:91:75:ee:5f:7e:9d:a1:fa:a4:50:b7:8f:8f:b3:
a4:8e:29:8e:50:64:e6:94:76:05:f3:5f:3b:db:af:fb:20:4e:
da:c7:5f:f4:e9:8b:61:cd:d0:ad:ff:30:cb:af:ba:89:70:9c:
21:12:73:ea:08:84:d0:63:03:91:d5:68:b2:c5:23:90:07:d5:
ba:df:28:ff:86:9a:f6:56:a8:4c:32:e0:e6:92:08:5d:33:d5:
26:29:df:c2:d3:a8:19:05:15:5e:a0:50:43:2f:c8:ae:90:53:
69:c6:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:38:26 2025 by rpki-client