Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3ZqK0t4dova7TnpTp-2_HQ6k0PI.roa
File: 3ZqK0t4dova7TnpTp-2_HQ6k0PI.roa (raw, json)
Hash identifier: WpynCCZCGmZilaYXH10d+NUViwDJbAzvtXCo6wQNvqU=
Subject key identifier: DD:9A:8A:D2:DE:1D:A2:F6:BB:4E:7A:53:A7:ED:BF:1D:0E:A4:D0:F2
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01946A3FFFE23D1C51ECEC3BB2E97A0EEE92
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3ZqK0t4dova7TnpTp-2_HQ6k0PI.roa
Signing time: Wed 15 Jan 2025 13:56:06 +0000
ROA not before: Wed 15 Jan 2025 13:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 188.212.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:3f:ff:e2:3d:1c:51:ec:ec:3b:b2:e9:7a:0e:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 15 13:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd9a8ad2de1da2f6bb4e7a53a7edbf1d0ea4d0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2f:17:15:2e:fc:f0:76:a0:9f:68:e7:0a:c1:
8d:fe:f4:b2:7c:a2:c9:62:bf:f0:c5:cc:c2:00:7a:
56:e2:28:5d:5b:0d:93:8f:d9:38:33:b2:55:ab:48:
9b:73:8d:d3:8d:cc:86:13:6b:ae:e5:d0:67:a8:6d:
16:73:33:f1:21:c0:0b:08:63:bd:5d:a5:f5:66:ba:
74:a5:c6:19:ce:59:3b:b1:f4:7f:7f:9d:1b:f7:7c:
d2:c5:d3:58:70:0c:4c:09:8e:ad:e7:1f:d4:40:14:
fd:f5:d7:20:d6:a4:3c:56:eb:2d:b2:3b:24:41:06:
9d:c0:28:02:9b:1c:42:39:33:41:64:df:00:32:f3:
db:19:33:e5:39:2c:51:be:86:3e:35:e5:e1:bc:d3:
b6:63:7f:86:3a:52:b0:e3:78:4d:1f:c3:e7:f0:f3:
7f:e7:bc:99:de:0c:a2:83:05:11:93:09:65:c6:ba:
c5:36:5d:ca:48:82:20:0d:22:44:30:b4:c0:55:ff:
fe:1b:ea:08:23:0f:d9:c2:ff:88:21:68:79:29:f2:
4b:35:97:94:78:7b:e5:a3:62:86:e4:97:3b:87:31:
04:ce:ed:11:a5:3c:67:96:17:03:da:f0:e6:09:4e:
58:f2:ee:34:14:9e:66:f5:1b:e7:fc:74:95:8a:e3:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:8A:D2:DE:1D:A2:F6:BB:4E:7A:53:A7:ED:BF:1D:0E:A4:D0:F2
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3ZqK0t4dova7TnpTp-2_HQ6k0PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b2:8c:52:ee:87:dc:cd:bf:05:45:4b:76:93:37:2a:c5:e8:
dd:5d:2a:5b:43:42:04:2b:35:c4:cb:1a:e5:81:47:71:df:57:
d2:32:95:2a:33:fa:eb:e2:fb:5f:f4:ee:6d:57:3e:d1:4d:5f:
ae:08:dc:62:18:a6:74:93:fd:f6:26:a6:79:7f:10:a0:49:06:
38:08:cb:de:e6:4b:9e:11:2a:f5:c4:38:67:c2:dd:0f:0a:3d:
42:99:46:2e:c0:33:f6:1a:4b:2f:5a:86:74:d7:7c:79:b3:33:
7a:31:fc:52:2f:be:7f:83:af:8f:58:ff:54:bb:56:f2:e1:22:
72:fa:38:b3:3d:e7:52:8a:5a:3a:39:8d:26:fd:37:eb:11:7f:
f0:73:ae:4a:f7:e6:2b:ed:9f:99:f4:fe:c6:3f:cb:b2:26:f5:
16:31:bd:dc:c3:b4:87:6c:10:d0:42:ab:21:07:09:4e:37:15:
98:14:73:bf:e1:b3:81:5d:52:37:66:7b:75:a8:21:2c:65:3a:
02:ed:33:4c:19:be:25:66:d4:f0:45:86:e0:e2:06:38:b0:14:
b9:f2:bc:06:ac:c7:a5:fc:10:20:e1:20:8d:46:00:aa:b0:05:
f0:60:dc:18:b9:b3:e1:8b:78:f4:90:9e:02:97:32:c1:37:8f:
f4:7a:60:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:07 2025 by rpki-client