Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3aAxQ8lCXkJBDlKxzgzsK3P31rE.roa
File: 3aAxQ8lCXkJBDlKxzgzsK3P31rE.roa (raw, json)
Hash identifier: eObonBchzNkCs6yOyxrWHaNwmFlyoTBU7lFoM6wTvoE=
Subject key identifier: DD:A0:31:43:C9:42:5E:42:41:0E:52:B1:CE:0C:EC:2B:73:F7:D6:B1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019579BD8B594B1FF2E934F88794DE5CE3AF
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3aAxQ8lCXkJBDlKxzgzsK3P31rE.roa
Signing time: Sun 09 Mar 2025 07:10:19 +0000
ROA not before: Sun 09 Mar 2025 07:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 213.176.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:bd:8b:59:4b:1f:f2:e9:34:f8:87:94:de:5c:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Mar 9 07:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda03143c9425e42410e52b1ce0cec2b73f7d6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:a8:59:3e:b1:17:a7:98:4b:b5:f5:80:aa:
5a:fc:4f:78:c4:08:31:b9:3d:51:7b:90:23:7e:bd:
48:81:7c:a3:11:78:23:78:0e:00:fd:ea:c8:8c:2a:
53:59:d4:38:e0:84:4f:5a:ce:5f:f4:cf:ea:2a:4a:
48:da:23:28:b4:94:ef:f0:9e:d1:d6:c6:7d:13:ac:
0d:79:ff:82:67:30:c9:0c:cb:0e:f6:c2:97:a2:34:
55:53:4f:9a:1e:8b:92:ff:57:50:38:f0:e3:a5:a7:
fd:3a:25:2b:ae:88:02:68:bb:0d:e3:69:dd:21:ac:
ff:bf:c5:d4:ee:10:9b:d8:8a:f6:e5:1f:fc:94:d8:
33:ee:29:7b:4b:cd:fc:0e:fb:3a:93:d2:03:14:5c:
ef:68:15:79:f1:46:54:98:12:65:90:64:75:4a:34:
b0:75:93:08:e5:55:7c:25:2b:f6:1a:5e:14:2b:23:
d4:74:8f:28:cc:ed:a1:56:bb:5d:ca:7a:15:11:15:
5c:a4:d9:d7:32:31:5f:c9:a1:b8:2f:01:ef:b1:a9:
d0:c1:f2:19:7d:4b:33:83:8d:b9:74:ec:02:ef:3b:
cd:00:52:10:4c:fb:81:4b:60:e0:1b:4b:e5:27:80:
e1:25:f1:23:85:4c:b5:bd:d1:29:a4:31:a3:7c:d3:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:31:43:C9:42:5E:42:41:0E:52:B1:CE:0C:EC:2B:73:F7:D6:B1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/3aAxQ8lCXkJBDlKxzgzsK3P31rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a0:91:14:d0:d0:55:7d:c0:f4:88:2c:e2:fc:22:db:8a:90:
04:7d:de:57:f5:bd:f3:79:56:3b:d0:d4:51:e9:7a:1d:e2:e6:
b5:74:e6:ac:77:5f:48:19:92:5a:1e:23:1a:15:48:a0:bd:2d:
b8:86:78:fc:75:43:0a:03:86:c9:f8:63:c7:64:a0:3c:11:58:
dc:4c:46:6c:53:d7:4c:de:45:01:67:0d:16:f4:f3:a7:8e:8c:
be:f9:66:16:40:97:6a:0e:bf:38:b3:a9:eb:5b:34:23:7d:da:
ed:37:cd:19:f0:8d:e8:78:64:7d:97:8d:24:d2:ae:74:4d:58:
ef:de:e4:cb:be:0e:35:64:3d:d6:07:79:de:d4:41:99:52:03:
9b:ab:0b:1f:65:a0:5a:bc:f6:31:82:96:14:44:46:d2:57:18:
03:f5:1c:53:e4:88:5e:3f:71:f2:5d:36:b1:f6:41:3a:9d:63:
12:f2:91:39:e3:21:23:32:9e:01:eb:bb:e2:c5:1c:2e:f5:07:
7e:71:da:f9:b0:10:53:e9:de:49:e9:b8:35:f3:62:9d:3e:49:
c9:4c:dd:9c:56:d6:a7:d4:02:9c:42:6b:59:eb:3a:06:b7:a6:
75:7a:77:8f:3d:0d:57:36:ee:56:63:5c:f0:48:e8:97:43:fd:
60:eb:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:10 2025 by rpki-client