Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c3qRc_D1ll411VvXOlaibYuE1Sw.roa
File: c3qRc_D1ll411VvXOlaibYuE1Sw.roa (raw, json)
Hash identifier: sw6etL2CNDrl74HmHSkHcvA+654fDkefD2SlfAMgGgs=
Subject key identifier: 73:7A:91:73:F0:F5:96:5E:35:D5:5B:D7:3A:56:A2:6D:8B:84:D5:2C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019464BC5529930FAC143E9316243555986B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c3qRc_D1ll411VvXOlaibYuE1Sw.roa
Signing time: Tue 14 Jan 2025 12:14:11 +0000
ROA not before: Tue 14 Jan 2025 12:14:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13210
IP address blocks: 85.120.42.0/24 maxlen: 24
85.120.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:bc:55:29:93:0f:ac:14:3e:93:16:24:35:55:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 14 12:14:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737a9173f0f5965e35d55bd73a56a26d8b84d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:59:96:07:d9:3b:0b:14:53:35:7a:d4:aa:
ae:b5:c1:26:7a:28:bd:8b:16:34:78:00:50:e9:37:
7b:55:9c:98:81:e6:90:0e:6f:c2:4b:9a:f6:12:2a:
60:1e:7a:8d:27:b0:46:1f:b9:05:b7:3c:ae:b6:f6:
ff:11:65:73:3d:c5:9e:82:78:67:9d:d8:f1:14:e6:
b8:1e:a5:bc:ec:f4:2b:bb:60:33:9d:66:b0:eb:5b:
df:d7:d8:3e:79:33:29:38:07:f2:86:68:55:ae:9e:
0d:f1:63:5a:c2:99:a6:83:75:4b:3a:b1:6b:c3:4b:
35:2c:a4:78:a2:eb:61:e5:b0:0e:13:80:d7:d9:d5:
06:a1:45:71:6f:20:78:7a:2a:25:39:e5:e8:11:81:
48:74:4e:8f:1f:b4:7f:cd:3a:57:c0:8c:e9:d5:25:
14:9e:44:1d:6e:1d:10:38:f8:d7:09:4d:70:4c:41:
3e:a9:1a:aa:5c:9c:35:9c:2f:9b:e7:fc:78:f1:48:
d2:03:c2:89:22:c4:87:5c:4e:9c:8c:8e:31:94:d1:
9f:6f:5a:93:bb:68:78:1a:b2:ba:16:31:2a:f9:bd:
02:bd:d2:34:39:a4:69:50:a6:62:d4:03:4a:73:79:
4c:92:2e:17:ac:ed:2f:d1:76:98:c0:14:61:07:ea:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:91:73:F0:F5:96:5E:35:D5:5B:D7:3A:56:A2:6D:8B:84:D5:2C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c3qRc_D1ll411VvXOlaibYuE1Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.42.0/24
85.120.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2a:2c:4d:bf:a6:23:dc:d4:c2:a8:fd:55:59:71:64:c0:6e:
ca:81:00:f7:bc:12:e3:7d:fd:cf:e0:31:8b:a4:29:8f:81:3f:
b6:da:ee:d0:92:ee:31:fd:1d:7b:0b:95:a4:68:0f:ed:0e:56:
73:53:c3:43:d8:29:4b:8d:fb:95:d6:d1:d7:ee:36:63:84:90:
9f:b6:1f:2d:a9:16:8f:ad:2a:0f:89:43:78:67:67:c6:40:45:
23:2f:d7:73:74:41:a7:7d:50:c2:3b:5b:a4:3a:eb:e6:bb:6d:
35:12:5c:1b:d2:e2:c5:dd:86:82:1b:74:15:5f:a1:f0:1d:18:
0e:50:e6:3d:2f:94:2b:15:89:aa:5a:6f:ee:f9:b7:79:9f:fb:
bf:e0:4d:74:64:57:69:69:4d:9c:25:74:f0:ad:e6:bc:b9:9d:
e2:fc:fd:d7:db:31:99:01:ae:00:cc:a0:b2:a8:a2:c8:41:7b:
df:b6:f3:de:77:f7:b4:77:84:73:8b:68:f4:54:39:ca:72:6d:
72:52:cb:c1:d4:cd:c7:37:cf:eb:1a:f7:ea:c0:1b:74:5b:9f:
4e:f2:98:ab:24:06:0e:f1:80:f1:90:85:15:97:23:52:ba:e3:
40:87:f9:57:5a:e0:29:2e:8c:9a:9a:23:31:51:ef:9c:65:6b:
ec:74:65:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:12 2025 by rpki-client