Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PK3ZbVJldg96hC66IMyC1gGERM8.roa
File: PK3ZbVJldg96hC66IMyC1gGERM8.roa (raw, json)
Hash identifier: M8Uf0rgTbW1OxZHUl1T7CuXNSOPKTE9q9NtmlV+1abQ=
Subject key identifier: 3C:AD:D9:6D:52:65:76:0F:7A:84:2E:BA:20:CC:82:D6:01:84:44:CF
Certificate issuer: /CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Certificate serial: 020904C4
Authority key identifier: 3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PK3ZbVJldg96hC66IMyC1gGERM8.roa
Signing time: Wed 15 Jun 2022 23:24:47 +0000
ROA not before: Wed 15 Jun 2022 23:24:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 212.18.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34145476 (0x20904c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea3f5f665bb54bd5efce90a25656109863f8786
Validity
Not Before: Jun 15 23:24:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cadd96d5265760f7a842eba20cc82d6018444cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:54:14:ae:fe:74:63:ec:e4:f5:75:48:1a:
09:77:ef:dc:53:1d:c0:9f:31:57:c9:1b:a7:06:58:
ac:4e:5d:c2:ca:a4:2c:49:7a:69:fb:16:31:cd:25:
03:7d:d3:2d:81:74:0e:d6:64:21:94:d4:1a:81:0a:
51:2b:d1:dc:a9:1e:db:12:d9:1a:5a:6d:53:36:3f:
38:35:c8:3d:a0:03:fd:e9:af:3e:9b:74:9b:c0:5c:
91:26:78:e7:ac:05:37:cd:60:57:bc:99:de:2d:ec:
82:9b:b4:75:95:93:24:d7:c3:ea:59:87:7a:a7:8d:
48:a6:0b:52:e0:ce:d1:50:e9:3c:f7:66:87:0c:81:
8b:13:58:8c:64:d1:91:2e:d2:73:48:19:e4:b7:e0:
3b:7f:14:82:6a:45:ac:10:cf:c4:9b:f0:65:9c:e1:
37:db:0b:9c:fa:bb:c8:eb:2e:f1:51:c0:f5:86:f1:
6a:8c:b9:ae:fa:cd:d4:29:46:0e:46:38:31:fc:11:
5f:9e:b1:77:b8:ba:15:d3:79:6f:a5:01:90:07:9b:
cd:4b:20:89:44:ff:0c:06:c1:bb:0b:a6:6f:b8:f7:
d1:62:85:f8:94:17:a1:f4:ef:3f:a2:52:a6:af:1c:
3d:8c:f8:bc:cc:30:b3:c8:35:02:2b:73:e6:b3:b8:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:D9:6D:52:65:76:0F:7A:84:2E:BA:20:CC:82:D6:01:84:44:CF
X509v3 Authority Key Identifier:
keyid:3E:A3:F5:F6:65:BB:54:BD:5E:FC:E9:0A:25:65:61:09:86:3F:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqP19mW7VL1e_OkKJWVhCYY_h4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PK3ZbVJldg96hC66IMyC1gGERM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d342b8-f64d-43f3-875c-1d64b21d3c74/1/PqP19mW7VL1e_OkKJWVhCYY_h4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:3f:01:84:66:d4:37:eb:ec:86:19:f6:c1:27:15:66:27:3d:
90:15:7c:79:ee:bb:92:b8:da:76:be:bc:21:9d:0f:98:6e:6d:
e6:14:04:48:28:c1:d3:fa:e0:fc:71:2a:ef:dd:03:8d:d6:93:
bb:a2:5e:43:ed:3a:a2:96:1d:53:5c:c4:b7:03:d0:a5:b3:24:
44:28:e4:dd:35:23:d5:46:78:81:00:66:97:99:94:57:ae:b4:
74:da:2d:50:b6:f0:3e:da:a8:d0:be:78:fa:5b:d2:5d:91:9b:
5b:6c:93:5c:63:5f:f7:1a:ac:ad:44:3a:c4:eb:c4:a7:f4:19:
2b:4b:5c:e9:28:1a:30:90:61:10:3e:51:90:56:46:b9:db:be:
25:74:a3:11:0c:bd:94:d9:10:04:06:38:ed:5a:6f:0d:46:09:
a0:a1:f5:61:a7:13:db:5d:5a:71:cf:4f:3d:19:b5:05:96:35:
b2:c9:25:3b:74:d5:73:4a:e9:2c:b1:d9:38:7a:81:5d:e0:68:
4b:f6:4b:62:85:f1:b8:d7:d5:0a:21:f4:5f:d1:1b:cd:18:6c:
bd:f7:db:14:ab:27:32:af:ff:bf:3c:b5:27:3f:f8:62:13:78:
59:25:4a:9f:56:05:eb:a2:1a:a3:c5:c2:11:6b:99:5c:74:3d:
44:d4:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:20:17 2025 by rpki-client