Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3MaGpzwvPkKwRKEmz5Qi3iq0LiQ.roa
File: 3MaGpzwvPkKwRKEmz5Qi3iq0LiQ.roa (raw, json)
Hash identifier: v78vH0jk+oIdDKALbNCzcyfmOJAVc1jtgSVau5oWWBA=
Subject key identifier: DC:C6:86:A7:3C:2F:3E:42:B0:44:A1:26:CF:94:22:DE:2A:B4:2E:24
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B5517D13DB0BA14FB8045DBD64EA72
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3MaGpzwvPkKwRKEmz5Qi3iq0LiQ.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 212.69.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:51:7d:13:db:0b:a1:4f:b8:04:5d:bd:64:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcc686a73c2f3e42b044a126cf9422de2ab42e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:c9:88:85:00:e8:e8:3d:8d:06:21:8d:93:
4e:9c:1c:1a:71:47:2f:a9:81:5d:9b:a5:61:4c:5b:
e5:8a:13:1d:23:59:f3:88:6e:f0:4b:8c:e9:01:88:
ba:1c:eb:58:90:95:b0:32:81:12:29:bb:fa:5f:ac:
29:b6:ed:41:a1:34:f8:5d:ce:35:83:53:5b:3a:e2:
72:b5:53:45:19:31:37:8d:ff:5c:45:d4:94:f3:2f:
9e:fb:58:59:1d:cb:cd:28:0b:60:83:27:a3:a5:29:
cc:fb:a7:17:ac:15:ee:5a:c7:ed:0b:40:b1:5b:c4:
d6:4b:8f:fa:68:ec:0b:eb:0e:e4:d6:56:01:c9:2b:
15:58:4e:7a:92:aa:4c:0d:b6:0d:b6:a9:3a:92:db:
0d:07:49:72:20:dd:b9:8a:81:d4:a3:71:76:0b:77:
6a:d3:f0:e0:51:06:b4:ac:40:5e:a1:69:7d:de:ba:
d1:22:6e:37:e6:43:91:4d:a5:ea:1d:7e:fd:d9:80:
2a:7f:65:5e:8a:a0:68:e9:80:e4:c4:8d:8d:38:59:
60:0a:7d:d2:d6:7b:9b:5e:32:57:f4:87:1f:80:76:
e8:16:9b:75:60:20:1e:4f:6d:44:0d:96:70:9e:2e:
52:91:b9:84:cd:a9:5c:51:79:37:55:15:72:9c:c8:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C6:86:A7:3C:2F:3E:42:B0:44:A1:26:CF:94:22:DE:2A:B4:2E:24
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3MaGpzwvPkKwRKEmz5Qi3iq0LiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e2:5d:57:08:60:ca:30:a9:39:02:ac:c8:52:dc:e6:5f:32:
39:87:83:d7:8c:b6:02:51:24:b5:8d:cd:8f:62:27:c2:56:b2:
00:8f:68:28:b5:e9:5b:d2:40:4c:27:68:38:3c:04:2f:1d:02:
b3:73:26:5f:7f:60:06:f5:bd:6c:11:15:c5:d8:5b:42:92:bc:
6b:a6:91:a7:d5:2a:28:ae:c6:dc:7f:f4:67:34:a6:07:55:d5:
c5:ba:68:a5:12:2f:94:c3:d3:01:0b:0a:72:b9:8f:15:48:6d:
97:d3:ba:b1:ec:2c:ff:7d:93:76:c1:3d:8e:0d:57:c5:92:8e:
e9:4b:14:3f:b8:eb:fd:e7:d4:25:1b:1d:c9:53:2e:99:1e:9e:
a5:a0:76:bb:27:49:63:74:9d:d1:22:29:2a:94:c8:92:f4:63:
08:4b:d3:31:d2:da:88:94:62:3d:4c:51:f0:9d:06:41:91:58:
78:12:68:1a:c3:15:30:dd:4e:bf:5b:63:bf:61:c1:37:00:55:
2a:0d:ec:2d:61:cf:99:31:ba:ba:bb:3f:54:02:6f:3b:d1:8d:
4d:b7:ec:b0:1a:10:fb:c8:a9:6b:73:2e:be:c2:60:bc:3b:70:
12:7d:cf:ca:2f:6e:97:e8:4d:a5:91:68:b3:a1:d8:66:73:18:
b1:30:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:26:49 2025 by rpki-client