Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa
File: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (raw, json)
Hash identifier: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=
Subject key identifier: DD:9A:47:DC:85:BD:F6:D7:02:03:31:A3:6E:34:13:4E:2B:BB:D0:48
Certificate issuer: /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial: 0194228DAA82C34EB3606F656A25B5BEC947
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 194.11.207.0/24 maxlen: 24
194.11.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:aa:82:c3:4e:b3:60:6f:65:6a:25:b5:be:c9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd9a47dc85bdf6d7020331a36e34134e2bbbd048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:ad:ca:f8:33:58:34:b5:f6:77:e6:ac:80:
97:9a:44:08:78:d3:1e:3a:cf:ce:2f:8c:ad:90:de:
ce:0d:5b:97:8a:a2:2f:61:02:42:a8:ca:af:dc:99:
ee:98:39:6a:17:d0:aa:6d:3d:15:f9:2e:a7:2f:68:
f1:a3:1b:d5:a5:ce:da:6d:f0:e0:e8:07:9e:3b:ae:
81:0d:40:37:b0:10:fa:b6:a5:a1:25:72:4b:8a:8c:
ea:12:7d:f1:8a:7e:bd:1d:fa:ec:e2:16:0d:69:f7:
bb:eb:f0:8a:9b:35:49:42:5c:26:27:31:68:e4:35:
8c:72:fa:1a:64:2a:46:37:59:26:28:4d:f1:95:3e:
99:a4:29:d8:54:aa:96:71:f1:0c:09:35:5d:74:7e:
c2:e3:27:98:a6:56:c3:82:41:5b:52:ca:34:04:be:
d9:17:27:ce:0b:a2:cc:c9:a8:c2:b6:dd:30:79:d4:
1d:cc:fb:d6:c2:40:24:09:55:89:25:19:e3:94:e3:
f5:12:03:5f:1a:c9:3b:dd:fc:e1:80:44:8b:00:3e:
de:45:e2:35:cb:e2:4f:02:3b:03:b8:f8:33:25:af:
bd:e5:92:89:fd:74:b4:c9:20:a5:67:5d:79:be:32:
08:40:ed:b3:ea:14:67:ea:b9:f4:12:18:dd:72:2b:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:47:DC:85:BD:F6:D7:02:03:31:A3:6E:34:13:4E:2B:BB:D0:48
X509v3 Authority Key Identifier:
keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.207.0/24
194.11.212.0/24
Signature Algorithm: sha256WithRSAEncryption
38:62:11:1e:0c:3e:b1:fc:5b:0c:7f:48:66:2a:1c:0f:95:e9:
b4:3b:89:aa:fd:7e:6b:e9:22:91:9e:f1:71:0e:24:d5:1c:cf:
fa:98:3d:85:1b:ff:3e:bc:71:fc:72:34:0b:70:50:bd:2d:a6:
04:77:52:b5:c7:c4:c4:a3:69:b0:03:e8:b8:73:33:c4:e0:f3:
c5:2e:d7:c9:0a:f8:30:c7:a0:ee:67:ea:d6:6c:e6:05:60:4f:
e6:47:99:c4:3c:85:79:d6:42:15:6f:7b:37:a2:36:aa:3e:30:
1b:ad:57:57:b9:9c:4e:8e:2c:d0:b2:67:5d:11:fe:07:45:6a:
db:76:08:ae:c5:a7:58:bf:c0:d6:7a:fc:76:4d:e8:c4:23:e4:
0c:da:d9:2c:07:5b:34:c6:7e:36:c8:49:aa:e1:2d:0a:bb:91:
79:63:7c:fa:ba:c5:54:c2:68:2a:dc:c4:44:d5:58:2c:73:2f:
27:c1:42:d7:bb:82:19:63:f8:9d:ce:6e:2d:83:39:6f:8d:be:
6f:c6:24:84:33:74:0e:c0:72:0c:62:45:23:36:89:fb:6f:6a:
21:3b:a5:d5:bb:60:d7:23:42:bf:18:02:82:bf:02:c3:a2:73:
09:43:ca:ba:aa:8a:3b:b5:cd:90:fb:27:d7:df:2a:71:43:4d:
32:18:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:39 2025 by rpki-client