Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/03P3aZZo0whPKQLGHY3sk9uIz9Y.roa
File: 03P3aZZo0whPKQLGHY3sk9uIz9Y.roa (raw, json)
Hash identifier: kZj4YCKODzX9l6EpTaMEC+b7ANd4agGaGWV+TUt0IQ8=
Subject key identifier: D3:73:F7:69:96:68:D3:08:4F:29:02:C6:1D:8D:EC:93:DB:88:CF:D6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194D1DBBE12C1ACBC4BB6AEE7FE62387923
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/03P3aZZo0whPKQLGHY3sk9uIz9Y.roa
Signing time: Tue 04 Feb 2025 16:47:06 +0000
ROA not before: Tue 04 Feb 2025 16:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197549
IP address blocks: 85.93.0.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.249.218.0/23 maxlen: 32
94.249.222.0/23 maxlen: 32
217.69.175.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:db:be:12:c1:ac:bc:4b:b6:ae:e7:fe:62:38:79:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 4 16:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d373f7699668d3084f2902c61d8dec93db88cfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:40:e2:d0:61:ba:7a:34:b6:34:b0:90:95:
a5:1a:3e:8d:74:8d:46:f3:ce:9a:b9:83:05:f7:e9:
fc:8f:e8:32:db:07:25:4f:16:a8:7b:c8:d2:15:ee:
e4:0a:ad:bf:92:6e:2f:9f:09:df:41:77:3c:72:fe:
12:f5:4a:a2:6a:3c:36:3a:f0:50:aa:a3:af:56:99:
7a:97:bb:89:17:74:54:08:14:6d:56:24:4c:15:61:
ed:84:61:73:d9:fe:14:5b:6b:cc:34:89:45:86:44:
5e:03:ce:04:a2:fc:b9:bc:f2:41:16:cf:65:dc:c2:
d8:05:1d:17:6b:32:33:23:fe:c4:af:75:40:e7:fe:
27:75:97:c7:dd:fe:ff:ce:3f:38:59:07:76:6d:34:
e3:0f:ee:95:ac:40:6e:49:2d:74:1b:f3:90:89:6b:
e4:7c:90:44:25:ec:e8:b7:09:f4:a2:87:bf:fa:59:
c6:d8:f6:bd:73:51:ba:83:be:14:af:6f:89:35:a9:
17:ca:aa:c9:5b:7f:50:16:44:93:c8:88:7a:75:22:
87:d8:a3:16:5f:44:62:94:fa:f1:1f:be:aa:46:a7:
3e:c9:56:7f:09:c2:5f:9a:ac:05:32:cb:36:f6:8e:
b2:78:fc:bb:08:ff:9a:84:2b:39:10:15:b5:9b:36:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:73:F7:69:96:68:D3:08:4F:29:02:C6:1D:8D:EC:93:DB:88:CF:D6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/03P3aZZo0whPKQLGHY3sk9uIz9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.0.0/19
89.144.0.0/18
94.249.218.0/23
94.249.222.0/23
217.69.175.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6b:e4:a1:ae:88:b5:2f:81:88:06:34:04:4d:51:f0:d8:14:
8b:ab:4d:65:bc:1f:5e:29:09:af:82:77:f7:57:41:cf:fa:f1:
08:a5:12:a6:51:d7:c3:56:9e:1c:3b:e2:36:74:b1:56:79:89:
ed:e8:22:0b:78:47:9c:9e:67:6b:ac:3d:47:6f:4e:27:af:34:
32:72:43:69:a6:ce:1c:89:65:ed:c0:ff:76:87:02:b7:a1:5f:
e9:09:cd:96:99:bb:09:07:9f:1b:a7:75:71:1d:44:e6:b9:40:
c8:b8:12:50:63:f7:e4:b9:3e:13:80:e9:6e:53:5a:af:ad:55:
7c:33:91:7c:29:3d:93:17:dd:c3:0c:f0:cf:fc:df:8e:96:01:
22:b4:b3:6d:d0:7f:19:f8:11:29:00:8c:3d:27:51:16:33:1a:
9c:7f:85:a2:08:db:59:fc:07:77:7c:c5:5f:66:86:40:a2:9f:
98:e5:89:72:6d:38:8c:2b:84:d7:0a:a9:df:2d:13:c6:d4:7e:
c4:09:f2:6f:82:7d:b6:42:de:da:08:e8:7b:83:6c:b5:59:9a:
1c:2b:7c:2a:4c:6a:84:41:d9:f3:ff:58:39:a1:15:20:e1:2d:
17:7c:e0:d3:7f:41:47:90:e5:13:ce:a4:2a:6c:44:f8:b3:0a:
bf:aa:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:59 2025 by rpki-client