Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/PKCcLn7gw6Ub1teeDxDVaIyuinc.roa
File: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (raw, json)
Hash identifier: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=
Subject key identifier: 3C:A0:9C:2E:7E:E0:C3:A5:1B:D6:D7:9E:0F:10:D5:68:8C:AE:8A:77
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 019426D91333397EB73BE6FE375D42F6C1AC
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/PKCcLn7gw6Ub1teeDxDVaIyuinc.roa
Signing time: Thu 02 Jan 2025 11:49:07 +0000
ROA not before: Thu 02 Jan 2025 11:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 185.45.194.0/24 maxlen: 24
212.8.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:13:33:39:7e:b7:3b:e6:fe:37:5d:42:f6:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Jan 2 11:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ca09c2e7ee0c3a51bd6d79e0f10d5688cae8a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:a9:02:2f:3c:a8:68:25:7c:89:57:1d:7a:
f9:f1:e5:45:12:5c:29:8f:b1:24:63:ec:17:d4:7a:
5f:c8:c4:fc:b6:15:56:e4:c5:3f:2c:b2:7a:be:75:
8e:62:d7:45:94:10:c4:ed:31:2d:2e:bd:2f:5f:c9:
6a:8f:dd:c5:34:77:fb:2b:dd:1f:07:23:87:dc:2d:
e1:cc:a3:9e:f8:30:c2:2d:dd:1f:54:15:66:c8:e1:
35:29:2b:9d:ea:9d:92:d6:a2:37:4e:8e:68:fd:ce:
66:29:13:11:f6:05:19:29:e9:2b:13:e6:04:6c:47:
57:52:03:6c:72:e4:12:a4:06:1f:e5:e1:0d:c9:55:
f4:17:db:1a:27:ad:38:8d:71:91:3e:c1:f5:00:e5:
16:c3:68:96:ea:f4:52:90:96:cc:74:29:42:2c:0b:
14:9f:f3:59:84:65:92:8c:63:ea:dd:77:22:30:3a:
78:c9:da:d0:fd:12:5b:f9:fc:90:43:da:c9:c8:fe:
5e:e3:f5:3a:e2:b9:5a:aa:86:6e:2b:31:13:6e:4b:
c9:ef:81:1e:68:73:f5:b7:65:46:49:03:81:85:84:
b4:3c:1a:b6:5b:3b:ce:90:ee:38:07:5c:0d:9a:e2:
04:86:20:8b:59:f0:4e:c2:c8:bb:2c:47:a9:7d:51:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:9C:2E:7E:E0:C3:A5:1B:D6:D7:9E:0F:10:D5:68:8C:AE:8A:77
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/PKCcLn7gw6Ub1teeDxDVaIyuinc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.194.0/24
212.8.251.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a1:06:c7:b0:48:5d:a0:4d:c0:da:c9:dd:e2:3a:5e:71:0a:
f7:ca:7d:68:5a:73:d3:46:c1:99:5b:79:93:17:8c:96:27:13:
3c:5c:b1:25:dd:2c:a5:5f:ea:7c:f2:fd:98:68:1d:b8:58:22:
3f:32:46:45:54:d7:4a:84:8d:75:a6:03:d7:ed:28:ea:09:fc:
af:ce:ab:e5:1f:eb:5d:41:f8:50:5a:d5:d7:e7:fc:2a:42:e5:
74:3c:88:cd:88:c9:f5:97:6d:13:42:f6:af:73:6c:99:7a:c1:
2c:c8:4c:33:73:d8:f0:45:e8:4c:e7:8a:8e:c6:26:91:8c:48:
cf:90:fd:ec:6a:d1:b5:56:8d:dd:ae:92:20:12:d8:30:84:e0:
eb:a7:81:4e:b8:2d:66:b7:91:00:1e:e5:81:5b:0b:44:30:2e:
91:f6:02:c9:18:21:04:a5:35:aa:15:19:f8:8d:12:b4:04:72:
f8:a5:5b:e2:ee:61:fd:b9:53:36:0d:b9:8f:bc:a4:e4:11:45:
15:4b:56:cf:9d:23:36:20:a5:ff:67:93:ee:69:98:d3:2e:50:
59:0b:07:f5:06:c9:22:a3:51:88:e8:c4:44:53:e0:57:c6:10:
92:8d:c6:32:31:67:09:7e:46:e1:86:0a:83:6d:1e:7f:72:0a:
0e:96:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:05 2025 by rpki-client