Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/3dzNn59E7w7P4U268CS0xQCLOOw.roa
File: 3dzNn59E7w7P4U268CS0xQCLOOw.roa (raw, json)
Hash identifier: uSrKvhMR8RUvNIv26fwshQGaOI3P9czx9p0CE8sOVqQ=
Subject key identifier: DD:DC:CD:9F:9F:44:EF:0E:CF:E1:4D:BA:F0:24:B4:C5:00:8B:38:EC
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0194A934F056C6E6CB12F585288691312A8E
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/3dzNn59E7w7P4U268CS0xQCLOOw.roa
Signing time: Mon 27 Jan 2025 19:20:06 +0000
ROA not before: Mon 27 Jan 2025 19:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211895
IP address blocks: 85.204.127.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:34:f0:56:c6:e6:cb:12:f5:85:28:86:91:31:2a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 27 19:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dddccd9f9f44ef0ecfe14dbaf024b4c5008b38ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:c3:69:5a:27:02:b6:7e:2e:7d:65:68:dd:
3f:c0:2c:58:99:90:8a:68:bf:1d:c4:f5:43:4c:09:
d4:1a:93:87:53:e6:ef:1b:d0:1c:76:c8:0e:a8:c0:
89:88:d9:e9:ee:7e:01:01:ac:2f:c1:ac:20:09:cf:
65:76:4b:31:9b:6c:95:23:90:cb:30:90:5b:34:3e:
d4:18:e6:e4:f4:a4:1f:3a:26:4c:be:38:d4:05:9e:
7d:4f:6c:7d:cd:f8:e8:58:29:3c:27:94:e3:0d:c7:
02:4b:42:a9:f9:53:30:c9:bc:95:f0:2b:7a:2e:b0:
5c:a2:2e:25:db:5e:fc:b1:16:64:de:8c:62:41:14:
18:ae:a7:ce:be:eb:2b:5c:39:02:98:45:d3:e4:30:
7e:9d:4b:f8:57:e4:05:ec:b3:7f:9a:23:0a:0b:9e:
b7:8e:cf:32:d4:ca:02:21:6b:01:59:5d:42:9b:b9:
11:82:75:84:ae:42:50:49:4b:58:93:17:e2:48:b8:
80:e7:39:53:16:2c:89:52:f9:58:a8:5c:5c:03:c4:
ce:d8:78:de:46:ea:ad:c0:f1:4b:e6:31:ee:03:f7:
4b:ee:37:a5:b5:93:c2:65:e0:33:25:5d:19:a1:2c:
65:db:55:be:9f:52:58:04:2d:01:fb:46:e0:33:3d:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:CD:9F:9F:44:EF:0E:CF:E1:4D:BA:F0:24:B4:C5:00:8B:38:EC
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/3dzNn59E7w7P4U268CS0xQCLOOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.127.0/24
89.33.163.0/24
Signature Algorithm: sha256WithRSAEncryption
91:65:27:8f:1c:1d:98:8a:ed:39:e3:bb:58:3b:50:bd:7e:83:
93:83:13:81:55:79:73:b3:44:4a:bf:ad:71:50:de:fe:68:3d:
f8:8b:34:f0:db:d1:11:b8:74:a1:8d:b1:81:9e:8c:24:a3:5b:
dd:01:da:83:15:56:57:36:e6:9c:fc:05:9a:81:6e:29:9e:83:
42:f5:34:e1:8d:d1:37:e7:a7:db:f2:7e:af:56:a3:bb:61:4f:
15:70:cf:35:04:1b:ce:d5:6e:ce:fa:88:80:3b:1a:3b:c3:c6:
1d:0e:f2:02:f5:76:81:73:5d:ac:c9:10:68:8f:10:29:19:d5:
c7:79:04:26:56:fc:3d:c8:4f:c3:fb:7d:46:95:84:3b:ed:b4:
4e:86:15:bb:9e:12:db:7f:05:0d:5d:76:59:45:1d:dd:a1:36:
7b:85:61:e8:8d:ee:c9:fd:ef:8b:cf:a6:15:ed:5c:23:1c:63:
33:86:38:62:84:7a:8a:3f:65:6a:53:e9:43:19:3e:65:95:2d:
f3:b0:c2:2c:84:b5:6a:b1:fc:1e:11:8b:2f:e5:9b:5c:a2:75:
ff:4b:66:af:74:74:92:2a:ed:f0:be:fd:58:d0:12:24:9e:87:
e9:71:56:28:e5:8b:71:ed:75:df:ac:05:3c:0a:12:1b:2d:87:
46:1f:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:48 2025 by rpki-client