Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/3e96O0zql-DJprCN832OErRtWhY.roa
File: 3e96O0zql-DJprCN832OErRtWhY.roa (raw, json)
Hash identifier: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=
Subject key identifier: DD:EF:7A:3B:4C:EA:97:E0:C9:A6:B0:8D:F3:7D:8E:12:B4:6D:5A:16
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 0195483CD0EA4E687A9594431C1738FBE755
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/3e96O0zql-DJprCN832OErRtWhY.roa
Signing time: Thu 27 Feb 2025 16:28:19 +0000
ROA not before: Thu 27 Feb 2025 16:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 185.195.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:3c:d0:ea:4e:68:7a:95:94:43:1c:17:38:fb:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Feb 27 16:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddef7a3b4cea97e0c9a6b08df37d8e12b46d5a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:90:bb:11:cc:94:72:86:55:3d:26:f2:7b:
bc:a1:03:5b:a5:ec:8a:72:79:8a:5f:8c:ee:97:8a:
cf:d7:39:06:66:37:0f:a8:88:7a:ad:4e:83:8b:d7:
f2:df:6b:02:69:5f:3b:0c:89:bc:06:6c:a5:f9:71:
29:ce:d7:9e:0a:ef:31:12:af:69:0e:9f:e8:c2:36:
90:e0:4b:93:ed:05:40:c8:48:83:25:85:d5:98:26:
05:3e:7e:1e:bb:51:1a:16:c7:aa:09:aa:39:53:61:
57:e1:c5:46:be:23:49:d2:c0:78:a4:22:37:06:c7:
5d:36:a8:a8:70:4b:0a:c2:cd:14:4b:42:da:a0:e4:
7e:e8:eb:17:31:5e:f8:fa:ec:34:53:99:ac:39:b8:
3f:f8:22:b0:c7:2a:e8:24:c8:0b:74:2e:e1:eb:6d:
aa:f6:7f:50:c4:c3:d7:d8:c8:bd:c9:1a:64:fc:1e:
91:8d:d5:e0:46:f0:6f:89:62:18:a6:13:25:11:98:
1b:db:72:d9:19:b4:97:b8:50:a1:ea:95:ec:52:85:
ca:fb:f7:da:50:16:93:94:d0:86:26:71:90:49:51:
c9:af:08:2a:df:77:64:d8:92:0e:05:a6:f3:67:f1:
67:6d:2e:fa:4e:eb:66:c2:a3:cd:20:b3:2a:3d:f0:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:7A:3B:4C:EA:97:E0:C9:A6:B0:8D:F3:7D:8E:12:B4:6D:5A:16
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/3e96O0zql-DJprCN832OErRtWhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
62:b7:95:15:53:e3:79:60:0b:55:09:e6:a8:cd:20:b2:5f:e3:
b7:d7:fa:5d:83:11:86:96:1d:b7:96:5a:cb:e6:1a:2b:11:af:
37:93:03:00:4d:25:f0:84:4c:77:db:ed:c6:04:32:bc:d3:a4:
45:bc:ce:24:dc:e6:ad:29:6a:3a:10:72:f4:7a:e7:be:65:3a:
80:4a:08:4a:13:aa:3d:f8:aa:ef:40:ae:fa:fc:6d:8d:a8:f3:
5b:66:99:83:33:5a:34:01:1c:ba:da:a4:44:a9:3c:b9:3e:74:
25:b9:3a:fb:cd:a6:22:f2:22:40:43:4f:c6:af:0e:a2:0d:2f:
b0:6a:1c:0a:4a:e1:ce:7a:f6:bf:0b:97:8c:b9:37:ed:d4:fe:
0c:4d:b8:a0:e2:5a:80:c4:b7:77:8c:ae:84:f2:3a:db:f4:d5:
52:a8:9a:d6:fc:ac:4a:0a:e5:63:02:78:4d:41:eb:01:da:2e:
de:19:d4:19:e3:fa:0b:bd:2b:5c:bf:c8:06:3c:d2:ad:6f:0f:
45:48:e6:dd:61:87:38:a0:54:c0:3f:08:97:1f:30:ae:6e:e9:
e4:84:9a:33:a0:14:2d:7f:d8:7c:bd:68:5b:eb:e6:2f:69:ac:
24:7c:aa:a6:f3:50:a5:ab:36:60:46:90:b1:f9:52:ee:6f:d2:
97:e3:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:28:42 2025 by rpki-client