Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/0D0scE_NIz1RAO_5cCYzYL7wwV0.roa
File: 0D0scE_NIz1RAO_5cCYzYL7wwV0.roa (raw, json)
Hash identifier: hgn/zcBj613tWbLWkc+mdf+gauTh1eXBiQJGE4ew4y0=
Subject key identifier: D0:3D:2C:70:4F:CD:23:3D:51:00:EF:F9:70:26:33:60:BE:F0:C1:5D
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 0194B1EEF04E43FC423BFDE0C913075734A9
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/0D0scE_NIz1RAO_5cCYzYL7wwV0.roa
Signing time: Wed 29 Jan 2025 12:00:13 +0000
ROA not before: Wed 29 Jan 2025 12:00:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61423
IP address blocks: 185.161.120.0/24 maxlen: 24
185.202.132.0/24 maxlen: 24
193.200.196.0/24 maxlen: 24
212.32.64.0/23 maxlen: 23
2a0a:d6c0::/48 maxlen: 48
2a0a:d6c0:2::/48 maxlen: 48
2a0a:d6c0:3::/48 maxlen: 48
2a0a:d6c0:4::/48 maxlen: 48
2a0a:d6c0:5::/48 maxlen: 48
2a0a:d6c0:6::/48 maxlen: 48
2a0a:d6c0:7::/48 maxlen: 48
2a0a:d6c0:8::/48 maxlen: 48
2a0a:d6c0:9::/48 maxlen: 48
2a0a:d6c0:10::/48 maxlen: 48
2a0a:d6c0:11::/48 maxlen: 48
2a0a:d6c0:13::/48 maxlen: 48
2a0a:d6c0:208::/45 maxlen: 45
2a0a:d6c0:208::/48 maxlen: 48
2a0a:d6c0:efef::/48 maxlen: 48
2a0a:d6c0:eff0::/48 maxlen: 48
2a0a:d6c0:eff1::/48 maxlen: 48
2a0a:d6c0:eff2::/48 maxlen: 48
2a0a:d6c0:eff3::/48 maxlen: 48
2a0a:d6c0:efff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:ee:f0:4e:43:fc:42:3b:fd:e0:c9:13:07:57:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 29 12:00:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d03d2c704fcd233d5100eff970263360bef0c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:88:41:0f:a5:1b:fa:bd:8c:65:a0:b5:f1:
04:d7:3f:25:a7:51:50:2b:2f:fa:ad:91:ac:97:27:
6a:de:79:07:65:c5:c4:bf:b7:a2:24:88:f0:0c:66:
5e:6d:37:15:1d:b6:e6:78:ba:95:35:52:6d:30:4c:
00:62:98:8f:45:da:f4:c6:5c:4d:23:b0:69:a8:0a:
d1:53:7b:57:c1:f5:a7:73:be:df:1e:b5:e7:07:87:
1e:b9:ca:12:c2:80:89:e7:26:c9:46:fe:cc:63:31:
80:84:36:1b:4b:2c:7b:d2:79:91:60:06:c1:4e:4b:
d7:de:7b:a0:0c:5d:a3:85:47:07:a4:81:99:b3:94:
66:0a:64:2a:bb:a6:87:53:c6:f9:be:1f:39:58:fe:
99:55:47:24:22:d2:71:44:98:39:f3:1f:b6:99:b0:
f8:ed:8f:82:f2:f6:f4:95:48:f9:a4:ee:e9:9e:0f:
59:69:5c:80:15:e7:6d:f9:d4:93:ce:91:c4:a7:90:
50:19:bb:f4:80:af:75:ff:3b:a1:32:8e:47:43:32:
6d:a1:18:73:49:9d:c4:5a:12:f2:2d:3d:55:35:87:
a9:61:5c:dd:e4:bf:35:d8:c2:8e:52:06:06:df:c9:
87:09:13:c4:8e:64:f8:8f:1e:21:de:eb:b2:b4:12:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:2C:70:4F:CD:23:3D:51:00:EF:F9:70:26:33:60:BE:F0:C1:5D
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/0D0scE_NIz1RAO_5cCYzYL7wwV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.120.0/24
185.202.132.0/24
193.200.196.0/24
212.32.64.0/23
IPv6:
2a0a:d6c0::/48
2a0a:d6c0:2::-2a0a:d6c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:10::/47
2a0a:d6c0:13::/48
2a0a:d6c0:208::/45
2a0a:d6c0:efef::-2a0a:d6c0:eff3:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:efff::/48
Signature Algorithm: sha256WithRSAEncryption
01:49:b6:8a:82:ac:3c:9d:2a:cc:ec:31:8d:f2:f8:c0:d8:61:
ed:ba:c7:5c:19:63:fc:58:6b:72:fb:f7:75:39:63:fa:41:0d:
ef:a1:33:9b:86:a8:67:9d:ce:c5:ad:3a:f1:e5:dc:01:42:5c:
43:92:97:22:20:24:58:ac:e2:96:6f:25:f6:68:d0:45:ea:fa:
2c:e8:44:53:f7:a8:f7:0d:0b:ab:24:39:3f:45:05:55:36:2b:
d4:8b:1d:49:f7:36:15:be:58:7b:69:75:74:13:45:05:1d:52:
4a:bd:8b:78:31:5a:f1:60:d2:6c:de:c0:17:ef:9f:57:48:6a:
de:ef:c6:ad:c3:ad:9a:7a:78:8e:6a:0d:07:b9:f9:4e:33:b0:
82:39:55:76:21:1b:39:0a:cf:a5:3a:b7:7d:32:c0:b4:34:eb:
eb:7b:39:26:28:d6:66:a2:34:a6:2d:55:f1:e2:02:ce:6f:d5:
63:a6:3f:30:99:ec:c9:8d:41:23:9a:be:02:72:a3:f4:c6:e2:
bb:d6:9f:a8:40:26:93:ac:4c:10:c0:4e:f9:9b:ee:c8:e8:a6:
c2:f9:77:4d:68:a6:67:81:eb:fe:4c:b4:8a:ef:89:95:7f:70:
de:7a:50:d8:54:40:d9:4e:6c:c1:ae:6a:f7:3f:dc:13:5f:00:
a1:8b:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:07 2025 by rpki-client