Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/3GvpHIxxSBOh_JH9oQawEJfN78g.roa
File: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (raw, json)
Hash identifier: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=
Subject key identifier: DC:6B:E9:1C:8C:71:48:13:A1:FC:91:FD:A1:06:B0:10:97:CD:EF:C8
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 0194258F8A366E5FC2B9472EFF16F8676EAE
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/3GvpHIxxSBOh_JH9oQawEJfN78g.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51321
IP address blocks: 185.132.120.0/22 maxlen: 24
185.132.120.0/24 maxlen: 24
185.132.121.0/24 maxlen: 24
185.132.122.0/24 maxlen: 24
185.132.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8a:36:6e:5f:c2:b9:47:2e:ff:16:f8:67:6e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6be91c8c714813a1fc91fda106b01097cdefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:46:83:77:d5:1f:94:43:bc:8d:79:5f:bb:
e9:1d:3d:5a:55:2b:bc:c7:cb:f0:ae:c6:8f:49:da:
c5:52:91:b2:b8:f6:4f:a8:2e:97:c8:15:58:27:cd:
05:7f:64:05:aa:54:37:3c:3e:72:63:a5:e4:8f:35:
6b:12:25:15:7a:90:7c:df:c6:e5:34:f3:a9:1e:50:
88:da:81:9f:50:20:7f:ef:a1:e7:f2:31:bb:7d:a8:
b1:de:53:f3:a3:7f:29:87:93:f2:e5:07:b2:5d:73:
83:df:21:60:09:96:6b:c9:71:3e:db:51:eb:cd:4c:
2c:e4:cc:be:cb:50:71:e8:7b:67:31:f0:0c:02:1f:
6e:11:e0:20:29:a0:bf:bc:f6:e3:81:26:db:22:58:
2f:0b:1d:3c:59:d1:a0:fa:5f:1b:00:c3:15:0a:f6:
f8:a0:06:2a:e1:1a:5c:67:03:31:c2:27:48:cb:71:
04:5a:bf:20:07:5d:ea:ec:e9:bb:45:43:bc:bc:9f:
68:78:73:17:5f:a4:ec:fc:4a:60:00:d9:ad:7f:3a:
86:d4:22:d6:32:05:66:fd:b6:d7:dd:13:45:14:70:
83:98:f6:f3:e7:aa:84:86:30:c7:da:bc:34:52:07:
df:0b:b9:7c:c1:c5:c6:07:77:5e:e7:7f:84:b2:cc:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6B:E9:1C:8C:71:48:13:A1:FC:91:FD:A1:06:B0:10:97:CD:EF:C8
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/3GvpHIxxSBOh_JH9oQawEJfN78g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.120.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ff:f1:0d:ea:c6:ef:17:ec:f8:9f:0d:5d:e9:d3:81:b4:0c:
15:3e:ca:96:cd:05:e2:ee:8b:8c:74:e7:51:2c:7b:69:6c:da:
d9:38:03:54:ba:0c:54:49:30:79:1d:21:1c:cc:00:5a:2e:c8:
0b:dd:10:c5:b0:12:98:0c:e0:cc:4d:81:19:0f:90:11:a6:37:
f5:da:00:b6:90:07:ac:70:50:3f:16:5f:da:57:3b:f6:e0:45:
13:0c:ec:65:08:19:b3:d1:1b:71:39:20:61:78:84:4c:ba:fb:
8a:b3:1b:87:b0:1d:20:c2:4c:64:cb:f2:e3:a8:c4:58:09:cb:
58:f9:9f:9f:a1:13:83:83:11:61:d1:4d:3c:86:e0:d6:ec:6c:
b7:9e:eb:1f:83:d6:de:3d:ee:f7:38:82:59:0d:5b:f5:b4:d4:
72:09:9e:4c:f2:6e:16:d8:cc:ab:b1:51:2b:89:96:19:b2:c9:
82:f8:7b:3b:aa:fa:cb:b4:cf:7c:7d:cd:9e:93:70:78:25:0a:
56:3b:29:0b:ef:06:8c:a0:56:45:ac:3e:b8:64:74:8d:15:19:
2f:e1:33:0b:c9:c1:ec:13:be:f4:d4:5f:c1:61:cd:97:59:a7:
dd:3e:0f:26:9c:62:e3:05:a0:62:1f:92:2a:d1:0a:25:96:22:
f9:87:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:41:17 2025 by rpki-client