Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/3Ks_TQEDRS7l6iBb1tV9eN3zXy8.roa
File: 3Ks_TQEDRS7l6iBb1tV9eN3zXy8.roa (raw, json)
Hash identifier: HNrIAz7hD5cYRfxoPWtjWB1w2BAEOo96jI/YGzvF2EQ=
Subject key identifier: DC:AB:3F:4D:01:03:45:2E:E5:EA:20:5B:D6:D5:7D:78:DD:F3:5F:2F
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 045A20C3
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/3Ks_TQEDRS7l6iBb1tV9eN3zXy8.roa
Signing time: Sat 02 Jul 2022 00:35:25 +0000
ROA not before: Sat 02 Jul 2022 00:35:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 37.251.176.0/20 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73015491 (0x45a20c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jul 2 00:35:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcab3f4d0103452ee5ea205bd6d57d78ddf35f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:31:c5:d8:ed:58:d7:d5:97:12:64:6e:0e:1c:
57:2a:db:68:56:06:c1:99:01:35:01:5d:02:22:85:
36:d8:3a:d5:8b:31:8f:34:2d:a8:21:4c:74:3c:0b:
ee:1f:fe:c3:05:17:60:73:95:a8:6b:fc:36:b6:75:
ac:07:dd:ef:f3:f3:8f:fa:a1:e7:e9:bd:f0:1f:10:
72:f0:f8:97:69:c1:f7:70:9a:52:ab:bc:22:f5:08:
99:cf:e4:8b:bc:db:14:c2:5d:0e:9e:86:4d:6d:1f:
f1:62:8c:9d:f5:6a:be:8d:43:c6:5e:6b:d7:74:87:
89:48:23:8d:f2:7a:7f:fa:2a:1f:d4:94:c0:c0:1e:
36:0b:06:06:35:59:80:6a:5d:cb:96:50:eb:6a:bc:
f4:ef:09:27:80:26:5e:1a:fb:f3:31:98:de:86:b7:
12:82:54:2c:a0:7f:a7:c3:19:55:17:23:3b:d7:0e:
c4:2a:52:4e:c9:77:6e:08:59:c1:9a:24:bc:8c:f1:
86:5d:a0:66:c1:43:49:b2:3b:41:e1:d4:06:55:f0:
b6:2b:ff:a8:bd:75:3c:ea:92:e8:10:24:10:0b:92:
cb:c3:cc:be:04:b1:5f:5b:65:b0:03:e7:0f:ff:0b:
81:4b:7a:c0:88:2c:c5:b9:38:fe:47:a1:6d:1c:7b:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AB:3F:4D:01:03:45:2E:E5:EA:20:5B:D6:D5:7D:78:DD:F3:5F:2F
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/3Ks_TQEDRS7l6iBb1tV9eN3zXy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.176.0/20
141.136.16.0/20
Signature Algorithm: sha256WithRSAEncryption
96:9a:9d:1a:bf:dd:d6:1a:6b:e1:66:cb:c0:aa:44:f0:91:00:
fc:c5:42:3d:5b:33:b5:3c:75:14:09:20:5c:6a:fd:3e:10:c2:
d5:e4:7d:af:12:15:a3:fb:f2:db:36:d2:e5:92:dd:f8:e6:16:
b7:c8:ab:d8:ad:c7:b3:e9:aa:9d:51:2a:b0:12:cf:09:1b:83:
5b:91:e7:84:9d:80:60:cb:e4:14:74:64:4e:66:48:cd:b1:8b:
f6:ca:69:7c:d9:12:d3:71:e6:19:97:04:7c:2a:55:8b:c9:c5:
15:5e:6b:02:37:5c:f2:6e:bb:1d:48:88:98:09:73:60:38:09:
13:ca:66:84:3f:02:42:35:3a:f1:56:2a:59:ce:3d:b8:56:34:
fb:9b:ad:91:bf:65:bb:15:8d:9a:e2:fd:31:4a:5c:05:36:64:
6a:5e:b2:7a:ce:4e:62:66:84:b3:a4:e8:ca:52:02:f3:52:99:
4a:60:72:0a:f1:fd:3b:98:a9:8d:b8:ed:6f:24:31:eb:b0:70:
74:8f:9c:f5:96:35:3a:f6:8d:a6:46:9f:d1:20:ee:b7:58:82:
5c:a2:60:42:4b:51:10:cc:c8:ec:cf:ca:69:a1:ea:09:a6:95:
9b:ef:7e:82:88:f8:dd:0e:91:68:08:06:dd:4d:d9:a7:58:9e:
27:58:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:52:58 2025 by rpki-client