Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3gODaJZvS2ApERf9OXo57zjWnm4.roa
File: 3gODaJZvS2ApERf9OXo57zjWnm4.roa (raw, json)
Hash identifier: wA3fq/OZP653G9qwWM7R/D/1tb1Ax+nA/htdAHR6Mfs=
Subject key identifier: DE:03:83:68:96:6F:4B:60:29:11:17:FD:39:7A:39:EF:38:D6:9E:6E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A26DDF8A0693FBD46109E9A7B1B0
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3gODaJZvS2ApERf9OXo57zjWnm4.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215898
IP address blocks: 185.132.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a2:6d:df:8a:06:93:fb:d4:61:09:e9:a7:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de038368966f4b60291117fd397a39ef38d69e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:e7:68:f5:0e:3d:04:54:38:03:f7:e1:fb:
d0:8b:19:b7:db:6d:d3:3a:2c:be:82:e6:d1:c8:ed:
ca:e8:bb:85:d1:9a:16:fe:2c:ec:b5:65:a0:11:e6:
f8:45:fc:ce:8c:45:44:0a:0a:93:14:1d:91:e4:21:
69:f6:c4:ff:86:04:56:d1:e4:7a:20:b0:c4:0f:fc:
65:73:0d:cb:2f:45:aa:7b:c8:5f:56:16:ab:ce:99:
c1:3a:84:b9:3d:8c:bd:af:01:ae:bd:e9:2d:8c:82:
de:a1:2e:6f:6d:4a:42:94:21:59:fe:a6:98:f0:4d:
2b:79:47:a2:22:65:e0:ba:56:15:b5:67:b0:fe:4e:
3c:8c:86:f6:9e:6f:75:cd:7a:f8:52:e9:c3:b7:fe:
f5:a9:7f:e4:bd:44:d8:f7:25:ae:28:63:a1:fe:4f:
b7:f8:9e:6b:89:c5:c9:f9:c1:c2:73:f8:c7:ba:40:
35:8e:c4:51:70:91:e9:26:48:ad:42:58:89:9e:f5:
56:d3:6d:0e:6d:11:44:fb:e5:34:22:7d:ca:cc:21:
4c:d8:9a:c8:73:06:e6:b4:d5:88:5f:bb:62:6f:34:
14:76:d8:98:3a:10:ff:bd:a2:6e:2c:de:c0:4c:6c:
60:7c:38:53:0b:49:5f:69:53:7b:86:b1:33:a4:de:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:83:68:96:6F:4B:60:29:11:17:FD:39:7A:39:EF:38:D6:9E:6E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/3gODaJZvS2ApERf9OXo57zjWnm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
09:17:3c:13:ea:b4:e9:1a:79:5c:30:db:06:52:62:cd:1a:25:
80:cb:97:be:8f:a9:b1:a3:e5:3b:37:60:1b:58:88:32:55:9b:
01:df:1a:47:5a:77:c3:73:2d:b7:68:90:37:61:9f:49:7a:3d:
da:eb:af:74:78:61:c4:7a:56:cf:f5:c2:60:98:22:9d:3c:14:
b7:69:df:06:c1:a0:81:45:02:bb:cc:69:a6:4c:c2:98:74:a8:
15:28:42:73:3a:6b:0c:84:dc:a6:e9:0d:bf:90:42:03:47:d5:
db:10:fb:b9:ef:a4:25:51:ab:25:d1:68:aa:a5:d6:12:69:33:
a8:6c:43:0b:03:81:d3:c0:97:b3:fe:c8:92:33:2c:82:2d:e4:
e0:36:67:39:e1:3a:e5:fe:e6:ca:95:c4:dc:23:ce:c1:b0:0d:
59:76:13:19:02:cc:a8:44:76:37:d2:ab:cb:55:37:1d:c3:b5:
75:8a:7b:bd:7a:a6:11:7b:fc:6a:53:69:07:27:0c:f9:30:b6:
0f:79:62:55:bf:2d:48:fb:74:34:00:14:6d:ba:8f:f6:f0:ca:
3e:3c:fe:d6:d4:30:e0:94:17:57:0a:ca:13:53:73:14:94:53:
a3:a9:5e:55:d7:0b:21:4c:25:53:0d:9a:7f:f0:57:18:a6:5f:
12:dc:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:50 2025 by rpki-client