Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/3gASlQlN9UdPtrWqrdLITdzt5Ew.roa
File: 3gASlQlN9UdPtrWqrdLITdzt5Ew.roa (raw, json)
Hash identifier: ramhN8+V67WDz+dJge66wgSFRzcM7UnMyKgsybDZiQA=
Subject key identifier: DE:00:12:95:09:4D:F5:47:4F:B6:B5:AA:AD:D2:C8:4D:DC:ED:E4:4C
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 019473BDCE6A0B1CD1BC960B115CA4CC779F
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/3gASlQlN9UdPtrWqrdLITdzt5Ew.roa
Signing time: Fri 17 Jan 2025 10:10:06 +0000
ROA not before: Fri 17 Jan 2025 10:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 156.83.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bd:ce:6a:0b:1c:d1:bc:96:0b:11:5c:a4:cc:77:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Jan 17 10:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de001295094df5474fb6b5aaadd2c84ddcede44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:d7:e5:a8:93:07:8b:8a:ca:79:4d:e7:9a:
9c:09:d4:1a:3d:75:29:3f:3b:5f:56:69:10:be:81:
58:a5:5f:e0:cb:68:a2:ae:46:0e:4b:40:fc:12:c1:
58:94:75:54:f7:19:07:fb:9c:3c:0b:dd:60:63:38:
e5:41:cc:b1:ca:c3:15:2e:63:98:2d:3c:6c:fe:ae:
9f:84:c2:3c:d6:a4:95:83:75:fa:b8:ca:38:3f:5c:
e2:f4:83:03:b2:a2:4b:8d:18:71:f2:1a:5e:c1:d8:
bd:16:6b:82:37:e9:f9:6d:4e:b6:d2:bb:3e:1a:af:
0a:ad:1a:d2:a6:1f:16:00:09:72:e6:81:2a:50:db:
70:3f:be:bd:a7:1f:b7:5c:27:31:2f:5d:da:87:90:
aa:9b:18:96:64:b0:44:4d:e7:68:d0:0b:3f:e4:94:
02:91:c5:ee:c1:7b:c2:d3:72:12:1a:cf:68:bd:0b:
f4:bb:c5:7b:4a:a4:37:b6:e9:b2:85:da:bb:b9:e9:
8f:9a:5a:e3:2e:e7:c4:27:8a:d8:f3:1f:09:8f:64:
29:c7:cb:d5:2e:e0:64:75:cb:e4:cf:88:c4:7d:19:
d8:54:98:9e:cc:bc:38:8a:20:4b:c8:ad:97:52:dc:
ec:23:16:c9:d7:a1:5b:9e:df:41:00:2d:6d:70:45:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:12:95:09:4D:F5:47:4F:B6:B5:AA:AD:D2:C8:4D:DC:ED:E4:4C
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/3gASlQlN9UdPtrWqrdLITdzt5Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.83.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:3a:aa:03:13:68:3b:86:10:5d:5d:f6:94:39:fb:0d:28:2c:
41:2a:fd:6c:e6:e9:30:c9:c8:c1:e8:13:84:e8:e8:f8:b6:19:
50:a7:20:b3:ee:bc:c8:f1:08:06:a3:92:54:bf:6d:6e:83:15:
83:da:6e:c0:f4:23:c2:68:b7:e7:7a:c6:cd:51:e1:e5:a6:ce:
9f:23:8d:2a:ce:ba:38:55:5f:b2:97:0a:b4:a5:cb:57:69:45:
17:b4:31:db:24:0f:14:76:42:80:33:18:4b:16:0f:d0:fb:02:
0b:ea:ee:56:71:14:c0:64:8e:ba:5e:a1:28:2e:3f:73:c4:1e:
e0:40:cf:19:e7:f8:e1:68:e6:11:a7:4f:30:cd:24:09:b9:0d:
ad:99:03:6b:09:20:b6:92:e5:af:e4:0a:d7:7d:90:52:50:1b:
19:4a:8b:4c:c7:6b:82:c1:4b:6b:b9:e8:da:c7:11:fd:0a:e0:
b0:6c:51:a8:f7:87:40:20:56:20:87:31:fb:79:fe:33:95:47:
18:b5:51:dc:cf:45:52:31:73:52:64:3c:f3:30:ca:bf:ec:8d:
d4:76:40:8d:c7:4a:e0:04:24:f8:10:6b:28:6a:9e:5b:98:1e:
05:ed:69:ac:17:45:08:67:83:9c:56:9c:bd:37:04:5c:dd:35:
15:21:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:50 2025 by rpki-client