Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/h3fzrapAzlisSbCyRSsknWWR-E0.roa
File: h3fzrapAzlisSbCyRSsknWWR-E0.roa (raw, json)
Hash identifier: mpVQ6/Pv4Fc/dfcW8qk0Mm8/C7eVXnkg6ZPMum0VDGE=
Subject key identifier: 87:77:F3:AD:AA:40:CE:58:AC:49:B0:B2:45:2B:24:9D:65:91:F8:4D
Certificate issuer: /CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Certificate serial: 0D995F
Authority key identifier: 3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/h3fzrapAzlisSbCyRSsknWWR-E0.roa
Signing time: Sat 01 Jan 2022 01:00:55 +0000
ROA not before: Sat 01 Jan 2022 01:00:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43309
IP address blocks: 185.234.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891231 (0xd995f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0665b6676875acf60e01522b9343c040a5ffe1
Validity
Not Before: Jan 1 01:00:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8777f3adaa40ce58ac49b0b2452b249d6591f84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:f9:64:99:b1:48:dd:2f:ad:28:3b:57:be:
75:97:ee:67:a2:7d:7b:b4:90:46:a5:29:27:b5:96:
af:5b:f6:74:04:07:db:32:fb:36:49:30:c7:95:6a:
83:04:e9:e2:b7:e6:48:7a:37:bf:c6:95:a4:fd:12:
f0:cd:64:e3:6a:1f:19:58:4f:e3:e6:97:c9:5e:8f:
18:56:6a:c5:32:28:da:21:58:b6:e9:75:a5:15:4c:
1b:30:7e:b0:71:2f:1f:37:21:37:ee:35:c5:81:d3:
d6:03:f0:7f:c9:99:4e:fe:57:2e:9d:1a:78:66:82:
e0:1d:17:3a:d9:fc:f2:1e:dd:e4:2a:02:bc:2c:90:
55:54:b8:73:f6:3a:25:d1:7a:7b:d0:f5:86:74:65:
f5:28:8d:98:63:6b:e5:b4:b0:5e:1b:25:7b:e9:b7:
8a:85:ca:1e:5f:c8:69:e5:b8:34:60:fa:b2:c6:c9:
3f:a3:b7:df:27:04:97:17:43:53:74:a0:59:0f:7a:
0d:59:b4:1d:21:f1:cb:ed:9f:84:91:98:99:74:e5:
14:2c:a2:24:aa:41:0d:b3:bd:18:2f:6b:5c:5f:d5:
35:3f:bd:7f:d6:9a:24:dd:95:d4:89:2a:fa:a9:bc:
d8:aa:13:86:4b:b2:4b:8f:4b:17:86:62:a0:de:b5:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:77:F3:AD:AA:40:CE:58:AC:49:B0:B2:45:2B:24:9D:65:91:F8:4D
X509v3 Authority Key Identifier:
keyid:3D:06:65:B6:67:68:75:AC:F6:0E:01:52:2B:93:43:C0:40:A5:FF:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQZltmdodaz2DgFSK5NDwECl_-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/h3fzrapAzlisSbCyRSsknWWR-E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3170e-715c-4c40-ac3d-9ae0feaf9939/1/PQZltmdodaz2DgFSK5NDwECl_-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4f:cb:a8:ef:4a:79:ad:40:8d:81:ef:c8:81:d2:a0:a8:86:
e8:66:7e:f5:00:db:f8:38:97:55:dc:be:0c:07:ba:a3:3b:c8:
33:c4:a8:5d:7e:ae:db:91:a0:dc:67:0a:3b:dc:48:74:b2:6f:
3d:70:ba:03:56:e1:ac:c9:c1:58:83:c8:c2:c9:18:b7:61:54:
bf:10:44:23:46:57:f7:6b:01:f6:eb:e8:0d:45:8f:d4:06:91:
41:22:13:e8:16:f1:79:00:0b:f0:db:5f:f4:24:ac:ec:27:c4:
b8:fe:fb:f4:f7:94:fa:b8:f2:6f:69:3f:ea:59:9f:e5:2b:cf:
39:37:09:44:60:8c:b0:4f:c0:77:05:51:29:3b:ad:db:81:95:
5c:3c:75:c9:87:85:8f:26:2a:1c:9d:13:77:87:44:90:de:5e:
74:50:3c:31:bc:36:32:fe:00:80:b5:87:86:58:24:b0:7d:5f:
4e:6a:4f:ac:1a:2c:d2:0d:e0:dd:46:2d:ac:9b:48:72:db:78:
e2:04:0c:6d:ad:ce:ec:bc:b2:9b:c4:2a:f2:b0:0a:ec:41:68:
d0:4e:cd:45:01:93:fc:cf:35:5c:0f:bf:d6:34:d2:90:73:a6:
58:b3:42:9f:7a:4b:8e:90:de:1d:42:21:29:64:17:50:50:b9:
97:6b:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:37 2025 by rpki-client