Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/3gd5yhd86K_T7jr5SxEq6WbDoig.roa
File: 3gd5yhd86K_T7jr5SxEq6WbDoig.roa (raw, json)
Hash identifier: ojHL5lyJlzOv7t+xWWNn1JpZWPbuIJXizb57Of8VZwQ=
Subject key identifier: DE:07:79:CA:17:7C:E8:AF:D3:EE:3A:F9:4B:11:2A:E9:66:C3:A2:28
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 01941F8C3D8EC4FC8A826C7BACCF28C5FC6D
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/3gd5yhd86K_T7jr5SxEq6WbDoig.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25094
IP address blocks: 148.110.0.0/16 maxlen: 16
185.106.24.0/22 maxlen: 24
2a00:18e8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3d:8e:c4:fc:8a:82:6c:7b:ac:cf:28:c5:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de0779ca177ce8afd3ee3af94b112ae966c3a228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:40:8d:a4:25:f9:f8:16:33:de:67:86:ad:
1d:69:5a:b9:26:00:13:88:c2:e3:b8:55:1b:9a:58:
41:0f:c9:0a:8c:c7:5f:f4:d3:36:b4:52:9e:f2:6b:
50:12:03:76:c6:de:f7:f5:8a:b4:1d:19:12:73:eb:
75:84:2a:8a:db:d7:a1:21:09:c8:ea:e8:47:bb:67:
61:6b:a2:7d:a5:ba:d6:5a:2c:a0:54:80:b8:49:56:
05:51:c9:98:bb:43:19:4a:c4:2d:1b:25:b0:5d:c3:
bd:3e:f9:d3:e1:8c:21:9f:00:68:e0:73:01:eb:bf:
a4:fa:ee:4d:c2:15:c6:9d:dd:7a:3d:c9:32:34:55:
c8:28:f9:de:f1:98:0d:7b:f1:6e:7c:84:28:0e:6f:
f7:91:d6:d6:c8:13:c8:04:2e:ff:4e:f2:63:6e:12:
c3:eb:0e:55:6e:45:b6:e5:39:71:80:2f:0c:55:d7:
f8:f4:19:0c:8c:94:1e:c9:64:98:62:33:59:3d:d4:
89:49:0e:f5:e4:f8:ff:d6:f2:ce:02:d3:5b:3d:21:
2d:c6:a5:eb:95:45:b1:13:9b:f7:9e:8b:99:ec:d0:
8f:6d:bf:2d:5f:b5:fe:09:05:65:f4:f1:45:52:48:
1a:b2:d6:de:dc:44:8d:a4:5c:50:0f:09:94:74:ff:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:79:CA:17:7C:E8:AF:D3:EE:3A:F9:4B:11:2A:E9:66:C3:A2:28
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/3gd5yhd86K_T7jr5SxEq6WbDoig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.110.0.0/16
185.106.24.0/22
IPv6:
2a00:18e8::/29
Signature Algorithm: sha256WithRSAEncryption
98:95:4a:14:56:1e:24:ad:62:96:2c:5c:e2:a6:26:e2:88:a5:
85:08:ae:44:59:aa:ea:69:47:f9:ed:f7:e8:b1:42:5d:a9:48:
5f:d7:fb:52:09:65:da:92:d7:1e:21:85:e5:97:ef:56:64:6f:
b3:d5:e0:d8:65:71:9a:03:e2:6d:35:51:32:aa:3f:db:7c:e1:
c6:a3:f0:1b:16:7d:bb:7d:cd:72:b2:6b:eb:02:e6:ac:13:89:
40:ac:e7:f0:7c:4c:48:07:7c:b9:48:86:81:69:68:b0:ec:f8:
d3:76:59:91:d2:cf:0d:38:7f:74:fb:6e:9c:69:e4:0c:a3:32:
55:be:99:96:5f:73:2d:67:45:42:8f:a4:06:3d:c2:bc:a6:ea:
01:51:1d:26:1d:96:a7:ef:6a:1c:f4:44:a8:df:5d:f0:ca:53:
69:6c:3e:f0:84:d2:fb:b0:85:49:f4:6c:10:6c:f0:50:b6:f6:
21:b3:14:e4:5e:c1:9c:35:c8:c7:1f:b9:a7:01:55:de:05:aa:
80:f1:56:93:44:b4:53:1a:15:83:6f:86:15:5b:06:00:e0:d7:
55:fc:ad:6b:b9:25:08:80:ae:79:b5:fe:19:77:ed:45:38:58:
3d:c2:7d:c3:24:63:a3:d3:03:78:8b:f2:5c:1e:90:21:4a:f9:
99:34:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:50 2025 by rpki-client