Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/PdP7D6zww1cUkLXFJC2KJdML-6Q.roa
File: PdP7D6zww1cUkLXFJC2KJdML-6Q.roa (raw, json)
Hash identifier: BhRL4TZHJTnrLlh1nKpcXBY5zI3gH+LStYOuB+PYhe8=
Subject key identifier: 3D:D3:FB:0F:AC:F0:C3:57:14:90:B5:C5:24:2D:8A:25:D3:0B:FB:A4
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 01942143821DEB6E74F8439CDCAF1733937D
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/PdP7D6zww1cUkLXFJC2KJdML-6Q.roa
Signing time: Wed 01 Jan 2025 09:47:39 +0000
ROA not before: Wed 01 Jan 2025 09:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43016
IP address blocks: 185.121.216.0/22 maxlen: 22
195.181.192.0/20 maxlen: 23
2a06:a0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:82:1d:eb:6e:74:f8:43:9c:dc:af:17:33:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Jan 1 09:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dd3fb0facf0c3571490b5c5242d8a25d30bfba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:ab:81:7d:31:2b:5b:f5:d2:86:f2:61:20:
40:94:eb:0b:9f:0a:ca:fb:bb:60:ab:be:68:e0:d7:
4f:d9:9f:6f:b1:8e:aa:84:bf:a3:16:18:11:1a:22:
be:1a:da:ec:5c:20:f9:a6:32:bf:66:3f:51:4a:94:
5e:91:ce:7c:5f:e2:fa:1a:78:24:ff:72:b1:7f:a0:
fd:1b:e2:7b:5e:d8:01:41:60:f5:b0:66:63:c8:10:
3d:fc:22:a8:2a:d2:bf:91:19:9f:b6:85:6e:0f:c8:
30:3b:ca:b3:98:5a:ed:ae:e3:07:fe:d4:78:b0:54:
9b:78:a9:99:50:d7:b1:dd:28:c5:de:12:63:ac:06:
80:e4:7e:09:c6:74:55:b1:a7:3f:f8:9f:12:94:f7:
ca:95:84:a2:17:7d:c3:ba:dd:c9:6c:f3:1b:c1:4d:
53:f9:be:bf:60:3e:39:30:f2:23:7e:5e:0d:cb:e3:
7a:01:e9:4e:b8:e8:d1:e8:1d:66:8e:63:72:4f:1f:
35:9a:3e:0b:18:37:80:a6:81:d0:c5:bf:a3:17:9d:
ec:09:d8:ac:45:3b:16:c8:0b:63:04:42:77:a7:2c:
91:9a:ac:9a:68:15:26:a7:f4:bc:15:d0:48:4c:b4:
23:f1:91:9d:a4:36:c1:44:67:67:8e:4e:bf:8b:94:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D3:FB:0F:AC:F0:C3:57:14:90:B5:C5:24:2D:8A:25:D3:0B:FB:A4
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/PdP7D6zww1cUkLXFJC2KJdML-6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.216.0/22
195.181.192.0/20
IPv6:
2a06:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:91:6a:b5:11:f8:ee:f6:28:02:d0:47:8e:98:0d:c5:01:86:
bc:c8:8b:0b:8c:24:e4:ca:d0:2c:50:02:ed:d0:eb:9f:8d:27:
50:da:a6:21:6c:38:e8:39:dc:c1:8e:e9:85:6c:5d:fc:e8:e6:
cb:19:9f:3b:35:17:1f:cf:80:df:bc:e6:ce:98:3e:d1:13:4e:
4c:17:32:c4:45:67:a4:17:fa:ba:1f:b8:e1:10:2f:be:1b:bb:
e1:5d:35:0c:ef:73:b1:2a:93:27:7b:19:80:ff:80:28:f9:22:
a0:c0:cd:ed:7e:9d:26:fe:64:6b:ac:78:95:9c:36:d8:ce:95:
0a:6f:62:4a:1c:29:5f:93:27:25:dd:62:6d:56:3e:15:b4:b4:
e9:61:2b:2c:ee:b1:02:97:54:13:eb:5b:aa:d9:c1:75:0a:1e:
39:9f:d1:69:04:ee:73:76:b8:ce:54:ae:9e:2f:33:e1:a4:58:
47:40:c1:4e:2e:10:1f:48:7d:f9:2d:a2:18:77:d5:15:e6:da:
ee:10:3a:7c:e0:09:2d:f9:66:af:ac:21:e9:61:af:2c:d5:b8:
b3:93:6d:2b:ba:30:20:c0:91:9e:e5:b7:c2:ee:12:dd:bb:08:
ec:50:a1:b7:5d:22:69:ef:c2:9c:cd:af:7a:37:9c:92:35:3f:
6e:b0:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:28 2025 by rpki-client