Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3f--PY_vGQuDJQFfJ7nKNoBcJzI.roa
File: 3f--PY_vGQuDJQFfJ7nKNoBcJzI.roa (raw, json)
Hash identifier: BtElGIeIuZ0vVX1UeyOXtAfuWUQbmWicLbVjwYIsLRs=
Subject key identifier: DD:FF:BE:3D:8F:EF:19:0B:83:25:01:5F:27:B9:CA:36:80:5C:27:32
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CD383A1F0024A6FDA404DAF04409057D8
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3f--PY_vGQuDJQFfJ7nKNoBcJzI.roa
Signing time: Thu 04 Jan 2024 08:07:48 +0000
ROA not before: Thu 04 Jan 2024 08:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 176.221.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:83:a1:f0:02:4a:6f:da:40:4d:af:04:40:90:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 4 08:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddffbe3d8fef190b8325015f27b9ca36805c2732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:a2:5c:59:71:da:d9:1a:cd:62:5d:17:4f:
b4:62:92:8a:eb:6a:d4:f8:3f:83:fd:15:51:a2:bc:
9d:0a:f7:63:ba:18:e2:45:db:6b:16:5b:11:f2:d3:
38:6e:f0:2d:64:3d:4c:4a:a1:8a:54:a6:b4:19:ae:
71:60:1f:0e:cf:ab:38:75:5d:88:c6:3e:a4:75:91:
be:21:5b:7b:8c:f5:6d:9b:30:fc:1d:7f:15:9f:d1:
44:86:06:3c:32:fe:a3:a6:c7:b3:82:7d:b7:d2:69:
38:4f:bc:a0:57:23:46:e4:20:5e:71:10:8d:cb:52:
8b:cd:5b:22:64:cd:0d:ef:5d:1f:a0:b4:b0:fd:cc:
1f:1f:0d:64:22:92:f6:a5:8a:32:e5:fd:fc:93:30:
99:d7:99:7c:ee:bc:02:97:ab:6a:8d:b2:5b:f2:f2:
97:dc:d0:1d:e7:94:56:0f:0b:b1:80:14:9c:76:56:
1c:19:dc:7f:e4:f1:00:10:1f:a6:39:40:c5:67:84:
99:66:a4:d5:dd:84:4b:d1:63:8f:ac:78:7b:30:d5:
f1:83:20:7c:3a:b1:42:c7:f7:68:dc:8c:17:05:5b:
fc:ae:43:d4:cf:a6:e7:a8:84:fa:ea:ed:16:b5:0b:
14:86:1b:4c:fd:fe:ba:10:47:d0:1d:d1:c9:54:2e:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:BE:3D:8F:EF:19:0B:83:25:01:5F:27:B9:CA:36:80:5C:27:32
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3f--PY_vGQuDJQFfJ7nKNoBcJzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.24.0/22
Signature Algorithm: sha256WithRSAEncryption
26:bc:b7:c8:b4:c5:e8:be:40:80:11:b8:c5:4b:52:ad:48:d9:
69:80:18:7d:b0:e9:8c:3c:65:25:66:f0:9c:3b:25:93:c2:35:
b7:7a:ff:cc:af:39:c7:31:dd:3b:1a:8c:cb:fb:30:86:b1:81:
85:60:eb:0d:46:5e:e0:0b:88:18:8e:09:91:f1:df:3e:b9:86:
0b:a0:ea:3e:84:ca:23:1d:dd:8c:d3:ad:12:49:3c:1b:15:16:
52:ec:37:61:f4:82:2c:e3:1f:0b:e9:33:f6:f5:44:75:2a:3f:
bb:91:89:fb:5e:24:d8:af:7e:fa:1d:46:15:8e:b9:8f:bc:a5:
7e:4f:24:80:96:d2:95:83:8c:0e:71:07:b3:09:c8:9d:84:16:
e4:e3:88:e9:21:cd:13:01:fd:44:b3:58:c9:18:be:0c:e0:0a:
54:28:bf:25:9f:60:15:5c:bd:2d:2c:a1:b3:27:15:a7:7c:c5:
94:20:2b:84:68:45:e8:47:62:43:fa:0d:15:62:14:96:e3:7c:
58:b5:d8:2e:e5:07:e2:09:00:f7:be:28:9d:e0:9e:2a:38:99:
53:db:03:f5:04:8f:05:e3:f0:97:9f:b2:34:c9:c2:14:97:96:
ed:44:7e:f9:e5:46:ea:63:2b:04:26:8e:03:96:a8:ec:07:1c:
13:d7:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:39 2025 by rpki-client