Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa
File: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (raw, json)
Hash identifier: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=
Subject key identifier: DC:B7:05:0A:0E:D1:33:56:8B:3D:B1:37:21:BF:FA:40:2C:6B:27:01
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 0194266BEA9C6EC9E8C095EED0A524A2DBA3
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201587
IP address blocks: 185.72.116.0/22 maxlen: 22
2a04:5980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ea:9c:6e:c9:e8:c0:95:ee:d0:a5:24:a2:db:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcb7050a0ed133568b3db13721bffa402c6b2701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:31:e6:d4:03:aa:5d:a2:54:42:07:7d:95:
9f:b1:d1:c1:6a:6b:4a:98:40:1c:20:76:d4:79:8c:
b3:f2:2b:a4:40:48:06:b2:c3:2c:79:65:98:63:26:
8b:3c:62:9f:53:f7:36:88:c3:8e:7b:e8:a0:40:35:
25:b7:8d:b2:c7:86:61:26:02:39:07:90:a3:4b:a9:
35:06:f4:7d:46:78:5e:aa:e7:af:e2:10:a4:39:4b:
ba:f6:65:63:05:57:60:86:35:e2:15:18:78:16:5f:
d7:c5:fc:ca:97:f6:9e:24:12:5d:32:65:e9:e2:21:
1b:44:7c:e4:8d:8d:e9:7a:96:4b:4f:f9:d0:bd:11:
a2:8f:ab:bc:92:61:40:ad:05:69:bf:bd:b3:53:8a:
c3:eb:45:9e:ec:7b:ac:eb:58:e9:92:6b:1f:84:84:
b3:c8:5b:cc:06:ae:ba:21:df:8a:01:59:b4:1a:1a:
9e:da:10:8c:77:b5:8a:d0:db:10:21:b7:e8:67:39:
30:cc:d9:87:31:58:1f:54:b3:48:6a:ff:dd:96:82:
e1:f6:18:c2:3c:6a:bd:3b:c6:b8:cd:61:37:89:16:
0f:61:74:95:ac:1d:4a:55:95:8a:12:8a:56:36:d1:
08:92:b3:bd:d4:90:a1:43:7e:bf:0d:59:aa:6e:eb:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B7:05:0A:0E:D1:33:56:8B:3D:B1:37:21:BF:FA:40:2C:6B:27:01
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.116.0/22
IPv6:
2a04:5980::/29
Signature Algorithm: sha256WithRSAEncryption
81:1f:f7:6e:ca:86:10:e5:66:49:b2:46:7a:ee:ee:54:a5:eb:
2e:a7:13:2e:27:19:85:5c:3b:68:16:9c:00:ac:c2:1b:ff:ae:
ca:cc:ea:7b:f7:1a:5f:e5:9d:19:e5:15:7f:89:57:f2:a8:fd:
50:c1:8f:6f:aa:92:bd:d8:69:5f:98:ca:26:2a:f9:ba:7c:43:
04:14:f0:ce:80:91:c4:97:6e:70:cf:fe:65:39:e4:cd:d0:37:
2b:05:9c:9d:de:ef:b0:79:1d:9f:33:67:4e:3b:3c:04:18:91:
9f:0d:f5:cd:21:dc:59:04:d8:6c:a5:f9:39:a5:02:02:1d:fa:
8b:49:29:4f:19:c9:d9:4b:04:82:b6:75:99:47:a7:f2:e1:a0:
65:31:48:86:40:bd:41:bd:9a:32:30:a3:4f:ba:3e:98:4e:4a:
b4:2b:0a:6b:de:3e:d6:09:80:c0:b9:59:41:5a:b6:0a:d6:9c:
6f:c8:b0:13:d8:e7:69:34:cd:de:67:06:24:67:52:02:b3:ca:
56:cf:44:b3:ae:29:ec:ea:8e:f4:75:a1:7a:b7:02:e3:da:30:
36:3d:6d:64:d7:f2:93:36:f4:0d:47:ca:6a:28:8e:53:12:7c:
ab:4f:80:f7:3d:9c:d2:05:db:79:35:17:83:65:dc:22:69:8a:
51:08:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:15 2025 by rpki-client