Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/3oDS-BBZKnv-an4cOWHT8DILnNM.roa
File: 3oDS-BBZKnv-an4cOWHT8DILnNM.roa (raw, json)
Hash identifier: LCHeE1Gb399QPdCTt19rMocwE3sl2dNvF+/PoOd8HnQ=
Subject key identifier: DE:80:D2:F8:10:59:2A:7B:FE:6A:7E:1C:39:61:D3:F0:32:0B:9C:D3
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 019363285E998DCE0F44FA56C330CDDC53FE
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/3oDS-BBZKnv-an4cOWHT8DILnNM.roa
Signing time: Mon 25 Nov 2024 11:50:10 +0000
ROA not before: Mon 25 Nov 2024 11:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15440
IP address blocks: 193.187.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:28:5e:99:8d:ce:0f:44:fa:56:c3:30:cd:dc:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Nov 25 11:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de80d2f810592a7bfe6a7e1c3961d3f0320b9cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:b7:a1:6f:1d:2e:79:6a:97:52:47:55:bb:
da:5d:4f:bd:7b:fe:4b:5b:5e:16:7c:ec:d0:7b:16:
5f:7d:f9:68:ba:32:13:e8:c6:82:90:c5:05:e0:68:
de:44:2b:7d:8c:64:70:40:45:e0:8e:89:1b:aa:ef:
43:25:26:03:5c:2f:74:24:b1:07:b8:e4:f2:a4:ad:
54:7d:9b:fa:34:89:50:76:37:14:3b:cb:5e:c1:74:
ec:81:b3:26:21:79:f2:08:50:31:15:fc:62:af:93:
a3:92:b3:f0:dc:ca:79:dc:b3:e7:68:9e:13:3f:be:
95:27:97:39:ff:96:66:f8:d1:70:b9:8f:78:8b:fe:
3e:6e:06:5c:07:c0:29:12:a1:ac:c9:0a:47:c9:91:
02:4b:82:46:11:38:1e:76:3e:a9:99:6b:79:df:ab:
14:6a:ea:61:16:b8:6c:f6:46:4e:ec:e1:d2:48:93:
a0:0e:5f:9f:99:f7:01:1f:3f:68:a5:4c:83:a0:63:
57:ec:56:69:88:f9:7f:72:4a:28:ad:d0:c7:a9:b3:
18:00:76:a4:f9:99:dc:98:bb:ae:5e:71:ac:ef:8e:
5a:21:9b:8a:5a:3b:2f:f5:1e:8a:19:d1:10:73:4a:
23:5d:7b:34:f6:4a:06:67:6f:a1:92:dd:48:49:c1:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:D2:F8:10:59:2A:7B:FE:6A:7E:1C:39:61:D3:F0:32:0B:9C:D3
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/3oDS-BBZKnv-an4cOWHT8DILnNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ed:f4:08:0b:29:91:a6:0b:43:94:9b:55:f7:8a:e7:67:9f:
93:94:f3:80:58:ca:37:5f:4e:8a:42:c1:70:e6:7b:f7:bd:5c:
9c:85:78:56:30:28:74:18:c5:1c:a3:98:eb:2b:92:ea:4e:42:
20:57:43:ca:99:e2:d3:b1:0e:bc:10:e2:6f:12:ac:a9:23:cf:
6c:f5:c6:b6:24:90:a4:55:9e:b4:96:31:f4:da:4f:ad:31:92:
ed:06:76:2b:f9:1f:eb:b4:f4:0e:61:57:5a:2b:e8:30:c8:2d:
bf:29:89:42:a4:86:1e:46:b4:2b:83:50:9c:60:07:ca:1c:56:
09:70:7c:9d:75:c4:ae:ea:95:3a:bf:78:06:14:23:fb:ab:08:
08:f1:9a:fc:72:35:9c:7b:8d:bb:bd:7c:b1:aa:0f:55:0f:92:
97:23:88:eb:63:9f:5d:d9:a2:9c:de:aa:7b:1d:e3:4f:17:0f:
8c:72:eb:74:cb:5d:e8:1c:8c:96:b1:e3:50:a6:e9:68:01:9c:
a0:4a:54:d6:83:96:47:66:69:57:6a:fb:be:fa:6d:4b:52:c6:
ab:c0:1d:86:d6:60:28:ae:b5:be:2e:f8:9b:9b:08:42:74:23:
73:02:3c:15:19:b3:cc:10:46:c5:7e:06:bc:0c:4c:bb:80:71:
95:8c:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:54:40 2025 by rpki-client