Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/03ZM68yYKMqsd6mtNhIoIeuQKjQ.roa
File: 03ZM68yYKMqsd6mtNhIoIeuQKjQ.roa (raw, json)
Hash identifier: sEzEH0K2JWpGjpAeB/W/0G2a1DRBorc/Ze/G66t2kAY=
Subject key identifier: D3:76:4C:EB:CC:98:28:CA:AC:77:A9:AD:36:12:28:21:EB:90:2A:34
Certificate issuer: /CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Certificate serial: 018A69B9FBBED5D710829C0EC8E08A3764FB
Authority key identifier: C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/03ZM68yYKMqsd6mtNhIoIeuQKjQ.roa
Signing time: Wed 06 Sep 2023 09:01:50 +0000
ROA not before: Wed 06 Sep 2023 09:01:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12566
IP address blocks: 185.39.216.0/22 maxlen: 22
95.181.220.0/22 maxlen: 22
2a04:800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:b9:fb:be:d5:d7:10:82:9c:0e:c8:e0:8a:37:64:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Validity
Not Before: Sep 6 09:01:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3764cebcc9828caac77a9ad36122821eb902a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:4e:fc:b6:aa:b2:eb:d9:e7:7d:1a:c5:ad:
01:6d:22:13:cc:ef:7f:95:5f:d2:b8:16:64:4d:80:
6f:c3:38:b9:ed:75:c9:8e:84:06:9f:5d:fb:9e:47:
e3:2b:e3:69:5b:48:a4:59:69:8d:cc:cf:d4:f2:4b:
b6:d1:61:db:53:90:56:7c:ff:d1:80:9a:bc:b7:7c:
7d:49:62:c1:ce:c2:38:d6:54:0a:60:ff:a7:40:26:
bd:8b:2b:5c:c6:a6:45:e8:ee:04:5d:76:e4:46:a5:
20:48:3b:a9:07:f7:9f:15:b6:53:c8:79:e0:e7:f6:
04:5c:e7:6f:f2:dc:3a:74:c6:69:74:ae:26:13:6b:
eb:be:97:58:6d:0c:b5:fa:d7:84:1b:22:8c:37:23:
8e:8b:70:2d:2a:08:38:ba:9e:55:8b:a9:d0:02:96:
f7:eb:b9:d1:42:78:a8:75:ab:e9:a9:f1:bb:ed:4c:
f2:db:26:e8:e4:4c:ff:08:a5:af:ad:f1:f7:43:2c:
60:3f:95:73:03:a2:46:f7:85:11:09:72:e2:b4:7f:
aa:4f:b8:9d:11:5f:aa:ba:22:17:b6:e3:f9:98:1f:
59:ec:42:f0:6b:37:dc:d7:4e:5b:a0:27:ca:9e:e0:
d5:88:2a:25:dd:f7:e9:9b:f7:20:86:42:d4:43:fc:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:76:4C:EB:CC:98:28:CA:AC:77:A9:AD:36:12:28:21:EB:90:2A:34
X509v3 Authority Key Identifier:
keyid:C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/03ZM68yYKMqsd6mtNhIoIeuQKjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.220.0/22
185.39.216.0/22
IPv6:
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
51:1a:6b:ee:85:a6:bc:3c:c0:54:e2:55:f0:cc:a0:67:85:02:
3b:cd:45:05:05:e6:31:9e:4e:51:12:c0:32:f2:61:e5:39:48:
4d:7c:04:e3:c2:78:5d:dd:74:55:6f:dc:ef:a7:94:e0:e1:0a:
0b:e6:99:c0:f4:3a:33:8e:53:67:71:ce:f4:52:36:99:10:b0:
cf:90:6d:7b:49:29:23:f8:ab:f2:d4:a2:82:bc:aa:61:89:11:
67:cf:e3:11:1f:cf:8b:89:a2:11:77:58:a9:87:ec:10:4a:3b:
c2:68:bf:1d:29:6c:5b:03:f6:aa:0b:3b:25:7e:52:5d:d1:ab:
cb:ec:3c:60:bb:ce:f3:59:68:dd:5b:9d:e9:5a:81:fb:8a:98:
ca:a2:20:2b:4f:e0:25:ee:18:95:b2:09:3a:88:a0:0b:54:4f:
0c:f2:58:e8:ed:3c:1f:a2:99:5b:30:42:71:98:e3:1b:40:99:
05:19:d4:36:9d:5b:b4:96:ee:b1:57:53:5b:62:3d:9d:5e:17:
01:40:08:b1:69:78:7a:c0:74:20:55:46:ec:00:65:7c:ac:66:
0b:1a:50:dc:a6:e1:73:ea:b5:ad:70:b5:22:83:8e:7e:0e:1e:
9b:a0:a9:23:c6:65:db:8b:cb:b7:31:f6:a9:26:16:d6:0b:48:
cc:96:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:20:02 2025 by rpki-client