Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/3i-FLLqZNZBmwu1ImdXKMAXcINc.roa
File: 3i-FLLqZNZBmwu1ImdXKMAXcINc.roa (raw, json)
Hash identifier: f5mig2xePHhIeW771WU5qz2mX8EgYaIQXzf9RtaIn7k=
Subject key identifier: DE:2F:85:2C:BA:99:35:90:66:C2:ED:48:99:D5:CA:30:05:DC:20:D7
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 01957B531FFC57C086A9437757D3F9E84079
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/3i-FLLqZNZBmwu1ImdXKMAXcINc.roa
Signing time: Sun 09 Mar 2025 14:33:20 +0000
ROA not before: Sun 09 Mar 2025 14:33:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.246.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7b:53:1f:fc:57:c0:86:a9:43:77:57:d3:f9:e8:40:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Mar 9 14:33:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de2f852cba99359066c2ed4899d5ca3005dc20d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:a3:7f:c0:23:6b:ae:65:d8:48:b3:73:f0:
9f:32:ff:80:bd:2b:17:3d:66:e2:88:49:67:5c:48:
43:6c:8f:c0:e7:b1:47:32:b0:39:fc:9f:09:14:ce:
94:d3:e0:8f:f3:66:df:69:52:42:97:a6:f1:18:4b:
98:aa:b4:ce:34:eb:57:ad:cb:23:5a:c8:e2:d8:1e:
8c:4b:14:a2:59:bb:93:7a:64:57:82:7a:94:b0:22:
83:3b:b3:eb:4e:68:7f:2e:c4:33:12:6b:ae:d4:72:
58:9d:0a:af:a9:25:0f:bb:32:ac:3d:74:40:37:82:
a3:77:eb:91:5a:dd:29:4d:ea:b5:59:cb:36:29:3e:
99:df:5d:ad:97:5a:90:56:f2:2c:21:ca:aa:48:92:
7e:5c:72:3f:b8:1e:3b:85:60:80:a3:38:15:04:9e:
ef:74:21:ef:21:ee:01:72:d9:25:1d:2d:11:8d:0c:
1c:f2:97:78:d1:e1:aa:c2:bd:db:8c:e9:7b:62:3d:
a7:2f:d2:4e:47:81:41:e0:01:5c:cf:49:5f:a1:ab:
40:8b:ee:6b:12:b8:9b:b2:c8:58:35:38:d1:84:35:
42:42:66:a7:f6:12:a2:68:06:99:a0:7c:c0:b3:93:
fb:86:2c:05:c7:e5:9f:ca:85:c5:76:2a:86:b5:24:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:85:2C:BA:99:35:90:66:C2:ED:48:99:D5:CA:30:05:DC:20:D7
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/3i-FLLqZNZBmwu1ImdXKMAXcINc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.55.0/24
Signature Algorithm: sha256WithRSAEncryption
58:99:bb:d0:e9:f2:b7:fd:65:37:91:ca:12:89:34:23:11:19:
fa:ad:a4:d1:53:59:6c:52:c4:be:ad:2c:27:c5:d3:ab:0c:e2:
ab:42:3a:22:1a:b6:73:d5:89:0e:48:1d:4f:e0:4d:68:41:e0:
46:e0:d8:94:26:80:5a:60:57:d3:91:a8:c2:4f:74:36:74:2d:
e4:fc:6e:b5:52:c8:09:10:61:f5:75:99:41:b0:d6:c0:d3:b5:
ce:6d:3b:ce:b8:b2:b6:2b:65:92:d6:7b:5e:54:d4:2c:f4:19:
e4:e4:96:4d:b2:13:9c:ba:3e:3a:8a:48:b2:cd:ac:e5:79:78:
3f:44:68:c9:fd:ce:c0:f0:50:df:4e:04:15:59:4a:00:34:2b:
7a:48:45:dc:fe:47:09:ba:a9:2f:a6:78:54:b7:91:77:ea:66:
5d:1e:66:e3:b8:74:0c:02:af:e1:b7:74:19:fa:06:e3:48:d5:
5c:d2:92:80:5d:3c:55:e5:4f:85:46:6a:b3:da:df:a9:89:bb:
c6:60:66:8f:46:9e:1e:22:bf:8f:b3:c9:42:09:99:e9:ee:91:
24:09:85:f2:0d:84:e4:13:6a:1b:42:cc:40:97:dc:d0:b1:aa:
8c:ac:49:d7:74:9d:b2:dd:52:ab:f7:30:f7:46:a1:fc:cd:8d:
38:67:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:01 2025 by rpki-client