Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/3Vtbc5LTlTpx1lQ03Nh8322eiqA.roa
File: 3Vtbc5LTlTpx1lQ03Nh8322eiqA.roa (raw, json)
Hash identifier: Mzy8o//gxlo8ELofdAIDwiIMLPclpFhkInJO0E0B8EY=
Subject key identifier: DD:5B:5B:73:92:D3:95:3A:71:D6:54:34:DC:D8:7C:DF:6D:9E:8A:A0
Certificate issuer: /CN=36a2c42cda257b1b666b9380fbc29492106a707f
Certificate serial: 02486EE0
Authority key identifier: 36:A2:C4:2C:DA:25:7B:1B:66:6B:93:80:FB:C2:94:92:10:6A:70:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqLELNolextma5OA-8KUkhBqcH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/3Vtbc5LTlTpx1lQ03Nh8322eiqA.roa
Signing time: Sat 01 Jan 2022 09:03:46 +0000
ROA not before: Sat 01 Jan 2022 09:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.107.4.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38301408 (0x2486ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a2c42cda257b1b666b9380fbc29492106a707f
Validity
Not Before: Jan 1 09:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd5b5b7392d3953a71d65434dcd87cdf6d9e8aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:95:da:27:61:72:0e:6e:c0:a9:17:e9:fe:
7e:0e:a6:eb:d8:d8:bc:f6:b3:34:8d:1f:f3:92:6f:
b3:e3:43:00:64:65:ef:5a:20:df:6a:51:90:a3:cf:
2e:2f:f5:6d:c9:56:b7:b0:41:30:37:b0:bf:ca:9b:
47:29:6f:32:62:64:f8:7a:47:1d:0f:d1:54:09:a2:
63:12:9e:3e:41:3d:bd:46:92:4a:ef:44:88:bb:e2:
45:09:c1:35:bc:5e:68:7b:9a:bc:48:e1:39:78:6d:
6a:b9:21:2f:c1:4f:44:b0:41:5c:75:52:ad:87:92:
96:85:fe:68:fa:ba:a4:6c:a8:bb:96:12:20:1a:42:
24:ad:56:7f:b8:7d:61:1a:ed:ea:9e:31:62:c2:33:
b9:9b:75:23:80:c3:75:f2:99:c0:dc:db:b1:14:75:
f1:33:6c:7f:05:1f:f8:15:2b:7e:8e:89:b2:7f:6a:
d9:d1:07:75:de:06:5a:cf:d2:62:5c:2e:78:c2:48:
62:f8:f8:a0:2e:97:42:05:06:af:a9:a1:f4:d7:84:
e8:e3:a5:0f:60:04:31:dd:2a:0f:a8:c6:0d:2e:ef:
a2:a8:4b:8d:c4:ba:60:5d:90:d5:6c:cb:02:eb:15:
60:74:da:cc:14:a1:43:cc:0b:6b:29:79:31:6a:d9:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:5B:73:92:D3:95:3A:71:D6:54:34:DC:D8:7C:DF:6D:9E:8A:A0
X509v3 Authority Key Identifier:
keyid:36:A2:C4:2C:DA:25:7B:1B:66:6B:93:80:FB:C2:94:92:10:6A:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqLELNolextma5OA-8KUkhBqcH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/3Vtbc5LTlTpx1lQ03Nh8322eiqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ebfda0-b0e9-4090-b4c3-e44898aa5980/1/NqLELNolextma5OA-8KUkhBqcH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.4.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:fb:55:a2:34:62:b9:df:c3:9f:a7:b9:78:0e:4a:ae:60:22:
0e:75:55:6b:e6:f9:ed:63:c2:ab:cc:e3:e2:2f:7a:8b:b3:88:
96:00:f8:d4:76:c8:fd:53:f4:0f:d6:09:a8:85:60:1b:62:e1:
f8:c3:b7:0b:e3:44:91:ea:0d:41:cd:a4:92:3e:53:f4:ab:aa:
be:72:8d:95:9e:65:78:e5:15:5e:0a:0c:d4:97:61:c8:51:78:
4a:e6:2c:28:23:72:e3:11:db:b8:db:61:e4:f7:23:c9:f5:58:
b0:2d:28:72:43:c5:67:b5:63:a8:b0:c7:6c:d2:1b:7c:db:fb:
a8:72:0d:ab:f2:9a:ca:dd:a4:86:67:99:20:e3:f3:bf:ba:e9:
45:c2:ca:2f:9b:b2:c2:5f:cb:d4:70:70:1e:fb:60:cb:ff:5b:
00:59:8f:7a:6e:8d:e0:84:d0:cb:14:cf:a2:7d:54:db:4b:9c:
72:df:65:96:9f:36:b9:87:0a:36:75:1a:f1:39:9a:b3:81:ba:
fe:0e:67:15:e6:ff:ed:1b:ff:2b:b2:53:f8:59:5e:1b:b8:52:
b4:2b:85:5f:98:f2:40:3a:af:6b:0e:da:c3:02:58:f2:ac:3a:
a9:42:e7:3c:9a:63:c2:ef:5c:1d:c7:95:bf:b6:62:e7:8b:4f:
ba:0e:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:49 2025 by rpki-client