Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa
File: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (raw, json)
Hash identifier: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=
Subject key identifier: DE:DD:AB:6E:D7:0E:13:0E:6C:0F:BB:91:8C:25:D3:3D:1E:12:31:4F
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019421B23A58409C024FFD4ED2B9CBACBE29
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 195.85.225.0/24 maxlen: 24
2a13:d780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:58:40:9c:02:4f:fd:4e:d2:b9:cb:ac:be:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deddab6ed70e130e6c0fbb918c25d33d1e12314f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:f6:5f:9b:fd:25:b6:e0:f0:4c:be:1c:24:
99:40:a7:35:88:2d:e2:21:3d:7e:9d:86:2a:8a:2b:
b4:50:ae:ff:23:b4:a2:ba:3c:5a:2f:f2:a3:78:b0:
72:36:9f:76:93:25:69:12:f5:23:9e:1b:a4:d5:75:
4d:7c:a9:e9:89:88:e1:88:23:ae:b1:90:cc:5d:b8:
dd:58:c0:e6:7c:83:96:d5:6a:e3:22:f3:c2:4a:9c:
66:65:7f:2e:30:a4:11:27:da:cc:0b:55:ed:33:8c:
27:ff:97:ae:74:e3:23:9e:9f:68:f6:35:57:10:2a:
77:7b:b8:e9:89:8e:0e:54:83:f4:2c:10:1e:0a:b1:
d0:26:4f:55:01:b9:76:d7:2e:6e:9a:3e:4c:ac:28:
43:7e:7c:80:fb:77:2d:9d:11:cd:56:cb:30:07:6a:
d8:9c:b0:44:e1:c6:61:ab:be:e7:2b:84:f4:c8:e6:
37:7c:be:5b:f1:08:a7:51:1e:eb:94:86:ed:99:c2:
73:37:d2:d7:fa:7c:84:c0:c9:50:4e:08:ef:4b:b2:
23:86:7c:9b:e0:84:51:38:e5:81:ea:e7:49:6e:e2:
53:e7:e9:15:e9:c3:d9:1b:0f:47:d5:f6:c3:15:7b:
92:33:1c:1b:70:ed:32:42:49:d4:d5:1e:ef:41:35:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:AB:6E:D7:0E:13:0E:6C:0F:BB:91:8C:25:D3:3D:1E:12:31:4F
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.225.0/24
IPv6:
2a13:d780::/29
Signature Algorithm: sha256WithRSAEncryption
55:e2:f6:76:24:f9:23:4b:1e:08:d4:91:76:8a:ad:db:f4:10:
1c:75:c9:ce:71:c7:ea:5f:e0:61:3b:a2:6f:2a:72:ea:a0:96:
af:ed:76:26:95:c2:80:5a:ae:a2:dd:df:7f:ba:72:b0:d8:ca:
f0:65:f8:5b:b7:eb:0b:7f:dd:41:08:0b:fa:9c:f3:5a:88:9d:
58:f6:c7:8e:8d:1a:19:25:7c:55:1b:68:3d:b8:17:19:29:0e:
ff:12:f7:da:19:0a:87:a1:fc:b0:9c:b2:ae:12:ed:bb:df:89:
40:c5:72:9f:50:8c:9d:2c:02:ab:f6:8d:1f:6d:89:1d:c4:2f:
8f:d8:87:37:3f:48:3e:4a:13:bb:e7:b2:57:84:51:ca:fd:a1:
84:1a:0c:79:72:9f:7d:c3:63:4e:8e:83:be:45:ba:5a:8e:8e:
4e:45:6b:3e:c0:46:dc:e7:bb:61:ed:31:80:24:88:66:7b:8d:
05:49:5f:c9:14:ce:65:ed:c0:8e:ab:de:28:44:75:33:77:5b:
54:f2:85:00:f9:cf:20:a1:cc:d1:b3:a4:c2:96:d8:26:a1:02:
ff:e4:a6:b8:ba:fd:d6:ee:62:3c:d0:e4:5c:e9:f6:2e:1f:15:
96:e7:f9:b8:94:34:bf:3b:5e:43:33:05:3e:7f:f4:c0:d1:80:
58:93:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:56 2025 by rpki-client