Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/3KAHsSKyY3N4UhLsPNQ1mC9E6lo.roa
File: 3KAHsSKyY3N4UhLsPNQ1mC9E6lo.roa (raw, json)
Hash identifier: fZEyVGHez3JE9Nen+A0X24d2iwqlR4PJwZD23KpFAgg=
Subject key identifier: DC:A0:07:B1:22:B2:63:73:78:52:12:EC:3C:D4:35:98:2F:44:EA:5A
Certificate issuer: /CN=c026567dcb0295bde7709c2a7d601afaea64ee31
Certificate serial: 0197C6EC
Authority key identifier: C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/3KAHsSKyY3N4UhLsPNQ1mC9E6lo.roa
Signing time: Sat 01 Jan 2022 04:03:49 +0000
ROA not before: Sat 01 Jan 2022 04:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48715
IP address blocks: 185.206.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26724076 (0x197c6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c026567dcb0295bde7709c2a7d601afaea64ee31
Validity
Not Before: Jan 1 04:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dca007b122b26373785212ec3cd435982f44ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:7b:44:5d:5f:37:5a:1e:31:33:e9:49:ba:
13:fa:d2:d4:9a:51:d6:72:bc:47:f7:49:52:11:71:
28:07:b0:e4:ce:05:e4:3d:62:62:3f:6b:55:22:60:
ad:91:44:91:d3:a2:3f:fb:fd:52:43:06:40:c6:48:
51:53:f5:05:f8:95:ee:7f:2f:81:4c:63:4e:93:02:
bb:10:a4:ed:7c:a9:a5:43:d2:85:8a:be:0c:7c:36:
7b:42:08:c9:00:dc:f1:c8:14:52:2d:5c:ab:57:b8:
7e:69:de:c9:39:0c:a9:49:35:41:62:87:11:13:55:
a1:9d:20:22:e0:d0:7e:e8:43:d2:63:d8:94:6a:c4:
91:1a:4d:8d:75:37:e9:98:11:30:4b:1e:d1:ce:79:
43:67:b6:14:eb:2f:10:1a:8e:77:1f:b2:36:6b:cb:
f0:8a:c1:db:77:95:56:5a:36:41:a3:12:44:9b:33:
c5:48:79:9f:ea:b1:12:8a:89:1b:ed:59:06:b5:ca:
03:17:35:00:e1:33:25:93:bb:de:bd:89:b2:67:10:
7d:f2:80:a3:19:e6:fb:dc:c4:25:e3:2f:c4:b6:3c:
11:ea:0d:4c:0b:e6:1e:14:df:42:a9:ae:e8:5c:8c:
cd:c7:f9:7e:ee:da:af:a3:1c:6a:16:0b:6e:56:cc:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:07:B1:22:B2:63:73:78:52:12:EC:3C:D4:35:98:2F:44:EA:5A
X509v3 Authority Key Identifier:
keyid:C0:26:56:7D:CB:02:95:BD:E7:70:9C:2A:7D:60:1A:FA:EA:64:EE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCZWfcsClb3ncJwqfWAa-upk7jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/3KAHsSKyY3N4UhLsPNQ1mC9E6lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/53cc43-595d-4c8f-ab23-6db3a2d35efd/1/wCZWfcsClb3ncJwqfWAa-upk7jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.231.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1b:5c:fa:f2:d3:bd:92:d8:c5:87:ea:18:56:6a:68:48:fe:
01:cb:43:e0:e6:4b:b7:f4:3a:0e:65:ed:80:8b:26:c8:3c:94:
f6:6a:d0:f6:f4:3f:b5:3e:15:8e:3a:c6:33:df:da:de:2e:86:
93:56:47:04:2c:8f:8b:02:13:68:0a:7e:92:86:9a:51:08:d3:
69:d5:3d:72:b4:9c:46:42:51:dd:d7:9c:81:8a:e9:23:1b:60:
cb:32:16:01:fb:8e:06:88:09:51:e8:19:b5:a0:09:38:3e:e2:
62:89:58:a8:58:63:8e:40:83:e0:b9:e7:67:f7:fd:7f:cb:79:
f4:09:25:2e:72:4c:f8:e5:b3:ab:39:3d:57:6a:c8:7d:28:c5:
b1:38:f1:38:a1:10:e4:55:38:c1:d7:14:04:d6:4f:ef:1d:ae:
82:93:00:1a:6e:89:95:03:09:23:4e:bf:2b:85:3a:f8:a9:db:
ca:ed:14:f4:30:12:78:76:9a:98:83:1e:68:95:03:2f:e7:bf:
25:29:6c:7a:ff:d6:01:f8:0d:5e:e1:9a:3a:8f:2d:2a:da:e7:
3f:62:6e:6f:3d:f9:5c:a8:c5:1b:d1:82:10:36:28:32:f9:b2:
da:47:4c:d5:9c:30:a4:9e:9b:69:24:6e:18:77:eb:a1:d5:d6:
1b:19:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:07 2025 by rpki-client