Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XTdFhmnmwG-rnbHb6YM012lDMoI.roa
File: XTdFhmnmwG-rnbHb6YM012lDMoI.roa (raw, json)
Hash identifier: +uvjhI8XgQl/8MZy68ve3WPnM4a8gVOi2+YaVZNYVp8=
Subject key identifier: 5D:37:45:86:69:E6:C0:6F:AB:9D:B1:DB:E9:83:34:D7:69:43:32:82
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195A63B296A966B7F310B50318B89760678
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XTdFhmnmwG-rnbHb6YM012lDMoI.roa
Signing time: Mon 17 Mar 2025 22:30:49 +0000
ROA not before: Mon 17 Mar 2025 22:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 94.103.166.0/24 maxlen: 24
185.47.142.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a6:3b:29:6a:96:6b:7f:31:0b:50:31:8b:89:76:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 17 22:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d37458669e6c06fab9db1dbe98334d769433282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:4e:b3:02:d4:ae:7c:69:e5:bb:4a:6c:13:
1b:f4:ff:e9:9f:75:4a:9e:59:8d:54:5e:92:a6:ae:
89:31:4f:66:33:92:39:81:d5:7a:6c:b6:78:4d:23:
ec:d4:e8:37:90:3f:91:32:18:02:05:ac:57:29:4f:
83:0b:eb:61:0e:82:47:de:23:41:08:3e:d7:e0:10:
42:1d:b5:39:6c:fb:b9:00:15:5e:77:33:22:6d:ea:
50:8a:9a:62:52:4b:24:db:6e:00:ab:89:92:96:a9:
3f:97:cd:3b:ec:7d:fa:40:4c:a7:f2:bb:ce:2b:89:
30:24:cc:69:37:82:6c:0f:50:95:54:2f:7b:fb:5b:
b1:bd:95:d9:0c:b6:25:70:3c:ee:9a:b6:d2:a6:42:
da:95:e2:c3:3b:23:5c:78:09:df:64:1b:21:1d:97:
01:5f:75:27:d1:29:91:d0:f1:21:0d:6e:81:35:21:
3f:ef:44:17:6b:e3:15:96:bd:3d:f8:61:88:fa:54:
6f:76:52:7d:a7:c8:40:53:d7:52:4d:bd:45:03:38:
54:de:16:36:3c:aa:ff:e1:59:79:71:b1:ee:5a:35:
80:27:04:49:b2:5b:59:d1:33:15:22:42:ff:b8:17:
d1:53:85:c5:4c:d0:10:32:ed:c0:1b:d5:fb:2a:38:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:37:45:86:69:E6:C0:6F:AB:9D:B1:DB:E9:83:34:D7:69:43:32:82
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XTdFhmnmwG-rnbHb6YM012lDMoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
185.47.142.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
db:46:0e:a1:cf:f0:ab:9a:62:cf:14:91:ac:eb:28:68:cf:33:
f1:79:39:8a:d9:57:6d:4a:55:34:a7:46:f1:d9:96:27:90:1b:
0a:02:2f:38:70:5e:67:76:c3:39:02:fc:82:fe:06:7e:5a:fe:
e3:9f:ae:0c:73:eb:61:96:62:d6:da:e8:81:bc:9a:e0:be:54:
4a:a6:71:0d:92:c4:09:f6:c8:63:94:00:b7:c4:7c:87:57:df:
f9:15:55:cf:cc:f1:63:83:eb:b2:fc:17:2c:d5:b5:b2:4d:9b:
c6:13:48:3d:cb:25:2b:b7:3e:c5:60:4d:87:fe:86:52:57:f1:
05:0e:09:99:5b:64:d5:bc:bb:24:94:ad:bc:a2:53:33:5e:46:
dd:32:4e:fa:e0:03:fd:9a:57:fe:0a:fa:20:15:8a:cd:b2:d8:
07:24:e5:5d:16:2b:4e:d2:66:de:18:c5:49:2c:ad:76:73:5e:
f7:2a:99:d9:65:5f:95:d2:29:f1:91:b1:a7:ac:0e:ee:77:7a:
87:ea:52:31:12:8a:f0:1f:9f:af:92:da:26:51:6f:af:21:91:
f1:94:33:06:21:0e:b7:37:29:bb:9a:36:50:9e:23:07:76:2d:
99:95:cb:db:32:70:a2:c2:1b:87:6c:a0:d5:74:0a:fd:8d:f3:
d9:ca:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:04 2025 by rpki-client