Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/B3vxfCdBbqCpFRIfeZyCQ2Fihm4.roa
File: B3vxfCdBbqCpFRIfeZyCQ2Fihm4.roa (raw, json)
Hash identifier: QTf5FbWUd2JRsm5/AHBpunnMm6hqVgSwd8D8NPeJObg=
Subject key identifier: 07:7B:F1:7C:27:41:6E:A0:A9:15:12:1F:79:9C:82:43:61:62:86:6E
Certificate issuer: /CN=576b57aed853f89da2a5b23df17f9217eefa61b6
Certificate serial: 0194236A2BB515103506BCBAC606B1F0D31A
Authority key identifier: 57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/B3vxfCdBbqCpFRIfeZyCQ2Fihm4.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51053
IP address blocks: 141.101.40.0/21 maxlen: 24
185.208.160.0/22 maxlen: 24
193.104.3.0/24 maxlen: 24
2a01:4f80::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2b:b5:15:10:35:06:bc:ba:c6:06:b1:f0:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b57aed853f89da2a5b23df17f9217eefa61b6
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=077bf17c27416ea0a915121f799c82436162866e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:13:b8:07:6f:11:30:af:8b:ec:e2:76:0d:
8f:bc:d1:28:92:12:7e:a1:0f:d2:84:7f:bf:30:38:
3d:d1:6c:7d:94:c0:17:98:25:e7:37:be:72:6d:98:
3a:a1:ce:d3:0f:f9:2e:f8:79:09:26:03:d5:f8:fa:
68:47:f8:d6:94:5c:68:60:04:f8:82:16:cf:ac:9e:
3f:ba:12:ba:78:1b:74:ee:3a:79:1d:40:c2:07:7a:
dc:4d:1c:b5:50:a2:1c:47:83:f4:21:fb:6e:58:82:
e9:25:7b:1b:89:56:a4:65:5e:83:ab:17:7f:ab:f7:
dd:80:21:e1:b1:2b:c0:f6:75:07:81:40:46:66:ec:
32:c6:57:e2:51:0f:09:dc:7e:6a:b2:55:bd:27:98:
4b:1f:2a:9c:44:19:32:1e:94:c6:e2:21:05:00:72:
17:08:ea:2e:8e:7a:df:36:17:25:a3:62:90:5f:b9:
60:25:bb:5d:50:ed:c4:cc:71:da:a0:f1:42:12:95:
57:51:63:53:35:c3:5e:69:ed:bb:92:e9:c5:66:2a:
1c:3d:a4:14:2f:fc:7e:c8:c2:d3:54:55:74:40:3f:
66:3a:9f:12:0a:e1:e3:05:fb:be:05:ed:e2:64:06:
f5:a0:4c:72:bd:e7:61:ff:58:b9:71:a7:cf:1e:db:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:F1:7C:27:41:6E:A0:A9:15:12:1F:79:9C:82:43:61:62:86:6E
X509v3 Authority Key Identifier:
keyid:57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/B3vxfCdBbqCpFRIfeZyCQ2Fihm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.40.0/21
185.208.160.0/22
193.104.3.0/24
IPv6:
2a01:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
55:70:4b:dc:b8:e2:d4:91:29:78:9f:9a:3b:fb:0d:30:2a:28:
12:53:59:a7:ba:de:eb:76:ef:f1:92:31:35:8b:42:b8:a6:0d:
dc:4c:25:5d:2f:f3:07:43:30:db:6c:94:48:5a:fa:56:eb:b9:
d7:5b:79:e8:4d:ad:a0:74:08:a6:82:d8:a2:8d:ca:f0:70:3b:
79:85:6b:cf:f4:4a:4b:a8:a8:59:db:22:d6:bd:07:06:db:94:
09:21:91:53:2d:ae:ef:27:8b:f8:e1:1d:be:eb:34:28:9d:43:
8f:38:a5:f9:d4:31:45:d9:3e:b2:d8:3d:20:1d:bf:08:c6:1b:
4e:c8:2a:12:c0:11:fa:0d:4d:c3:6d:2a:22:98:f2:59:47:ee:
1c:61:2f:66:62:df:e4:71:a7:2d:8b:a6:6f:34:9f:66:bd:0f:
27:7f:db:7f:9f:46:ab:ce:ef:29:51:74:4d:1a:f2:07:c5:03:
79:ea:24:cd:46:71:4a:6b:a4:86:0a:b8:bd:cf:4a:76:2a:3d:
2c:d9:a2:bf:f2:16:14:94:48:40:af:b8:54:5b:60:dd:a2:8a:
27:7b:0e:b6:4a:00:1b:fb:54:a2:f8:ba:5b:fe:65:b8:70:e4:
28:dc:b2:84:eb:e8:3b:a3:7a:46:20:b7:62:24:a4:3b:4d:2d:
1a:b6:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:11 2025 by rpki-client