Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa
File: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (raw, json)
Hash identifier: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=
Subject key identifier: 3A:9C:E3:5F:FD:F4:35:C0:D5:CC:8D:E5:9F:8B:0B:3A:E1:BB:FC:CA
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 0194266C070E1345FB8F69629D83BCB7C11C
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60893
IP address blocks: 185.220.108.0/22 maxlen: 24
2a0b:efc0::/32 maxlen: 32
2a0b:efc0:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:07:0e:13:45:fb:8f:69:62:9d:83:bc:b7:c1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a9ce35ffdf435c0d5cc8de59f8b0b3ae1bbfcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:e6:c3:50:6c:25:ac:ee:0a:50:e8:59:4c:
93:df:86:58:59:98:c2:7c:71:ab:25:76:6c:90:b1:
d7:09:f2:7b:2f:18:0f:5a:20:24:6e:43:62:b5:d7:
e3:81:42:46:ae:5d:ef:79:ef:b6:2c:9e:0e:0e:38:
14:74:6f:62:f4:e0:32:a1:fe:cc:49:04:91:92:f1:
f7:8a:f5:37:6a:04:f2:87:6e:58:84:30:a1:23:9a:
04:93:9b:62:f8:61:a5:67:19:f4:7f:6c:4d:fd:bd:
c0:12:2a:ea:a3:37:cb:4b:03:4c:ef:bf:fc:f2:46:
4b:be:87:f4:b9:c0:e0:4a:4f:7f:68:e9:a6:3f:4f:
1a:c5:7d:4d:bf:72:5d:77:4f:81:06:75:1d:30:85:
a5:76:e4:db:53:5f:de:6f:a7:fb:14:36:36:d8:e4:
03:49:35:33:df:c1:d0:c1:11:8c:9a:f2:01:81:a2:
c0:10:20:a6:c0:55:2f:77:54:f0:b0:b1:9a:20:c6:
ae:28:f5:ee:b3:ea:5d:54:90:c8:77:2b:3d:54:f0:
3c:bf:67:77:b0:3f:11:fd:3f:9b:66:c5:79:3c:cd:
1c:7e:07:34:d4:ad:98:9c:fe:9b:01:c4:4b:02:d0:
f4:7c:4d:90:09:bc:b6:1a:fa:bd:73:9f:3c:04:65:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:E3:5F:FD:F4:35:C0:D5:CC:8D:E5:9F:8B:0B:3A:E1:BB:FC:CA
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.108.0/22
IPv6:
2a0b:efc0::/32
Signature Algorithm: sha256WithRSAEncryption
c2:9f:bf:b8:34:f5:a0:27:15:da:0a:ed:e1:e0:2c:14:4e:f9:
2c:35:94:85:d3:0f:17:7b:68:c2:0d:52:c4:43:55:40:89:62:
f0:d1:17:d8:86:8b:40:63:d5:39:05:80:a4:14:09:e8:ca:b6:
47:69:0a:76:44:3f:13:3b:88:83:3e:60:7f:cd:71:1e:b7:1b:
64:4a:27:46:6e:38:5f:eb:30:f6:eb:4f:0b:af:5f:f0:d3:64:
25:82:7a:a2:46:e7:02:9c:b7:f2:9b:e2:b3:38:9c:87:3d:7b:
f5:a7:ce:df:d6:2d:cd:83:17:6e:77:9b:14:c2:75:d0:72:07:
11:73:ea:60:4e:76:40:74:a5:44:56:32:5a:13:f7:50:62:ce:
ae:21:53:ef:44:ff:1c:a9:fa:56:f4:9e:9d:ca:e8:fd:fa:f4:
8c:50:98:62:54:3f:0a:db:87:bc:54:14:62:58:a3:ef:31:f4:
a1:cb:00:37:23:b9:39:85:d7:fe:90:a2:d3:01:5f:0d:9b:68:
53:69:36:b2:96:f3:ee:05:15:a1:98:8a:50:00:82:6d:86:2d:
17:52:74:ac:b6:7b:30:16:d2:db:01:e9:f8:ae:60:67:1f:e2:
cf:da:0f:0f:fa:91:76:87:db:b1:ef:8c:a8:40:55:34:42:6f:
71:ff:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:54 2025 by rpki-client