Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/3VQFHIG_0NRiYGSMTzNDYelPmMs.roa
File: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (raw, json)
Hash identifier: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=
Subject key identifier: DD:54:05:1C:81:BF:D0:D4:62:60:64:8C:4F:33:43:61:E9:4F:98:CB
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 019425211DA9F08F8CD7B446BE6A087D4B9F
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/3VQFHIG_0NRiYGSMTzNDYelPmMs.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 146.19.128.0/24 maxlen: 24
178.250.186.0/24 maxlen: 24
193.163.203.0/24 maxlen: 24
217.119.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1d:a9:f0:8f:8c:d7:b4:46:be:6a:08:7d:4b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd54051c81bfd0d46260648c4f334361e94f98cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:81:59:3c:27:89:8d:d0:b5:7c:1b:7b:9c:
d6:73:74:db:d6:c7:b6:58:52:c3:3e:af:11:29:fa:
fa:a3:b3:03:7b:0b:24:1a:75:28:2a:bb:84:5c:42:
16:91:5d:f2:dd:db:cb:1a:c3:56:4b:07:fd:ef:77:
c7:32:2d:4c:25:d2:a9:30:de:a1:89:58:1b:ce:41:
1c:8d:21:6f:af:09:3b:5a:f2:9e:76:45:93:d6:8f:
33:5a:d6:de:53:76:ac:d6:af:9c:2d:78:a2:77:df:
dd:40:08:81:9d:3f:c1:ce:48:b1:56:ab:f0:65:d7:
82:00:1f:0a:1c:70:bf:87:14:fc:c1:05:bb:69:f8:
18:25:86:e3:05:c2:07:7a:1d:ad:f1:d4:5e:dd:9f:
19:b2:ab:3e:64:d6:ed:a4:9b:b5:72:40:82:48:2a:
fc:da:f6:f3:33:b2:f2:ab:fc:44:9d:98:8c:8a:df:
b2:ac:5e:70:b4:e2:0d:3c:2f:ff:48:a8:b3:31:90:
ea:61:d5:4e:db:bb:a2:95:69:ee:d5:ac:e4:a6:a7:
f8:9b:97:66:b0:fd:d0:b6:a1:44:fc:18:e8:12:39:
16:bb:bb:28:9f:99:a0:1e:83:9e:80:d3:66:c5:a7:
f0:28:55:08:94:01:f6:2b:73:76:69:b1:5d:9d:3e:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:05:1C:81:BF:D0:D4:62:60:64:8C:4F:33:43:61:E9:4F:98:CB
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/3VQFHIG_0NRiYGSMTzNDYelPmMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.128.0/24
178.250.186.0/24
193.163.203.0/24
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a6:84:7a:e9:97:6d:1e:26:6d:cd:cd:d4:69:8b:2f:1c:23:
dc:fc:0a:74:50:55:18:b0:d3:52:82:87:54:fb:76:34:d4:9d:
fc:15:23:72:9c:77:3a:13:e6:d3:fd:e2:8d:67:15:b7:59:cc:
11:15:a8:09:6e:f8:70:b2:9b:46:3c:76:cb:5f:f4:21:76:d5:
dc:61:bb:c7:00:ab:7e:b0:a5:93:45:d1:84:0e:f4:02:c2:22:
f7:9f:ef:ec:b0:5f:19:eb:14:db:b9:7f:c0:83:97:85:b6:26:
ba:fd:bf:b8:fd:69:7d:76:06:fe:95:b2:0e:0a:96:8c:74:dc:
ab:01:18:c6:e2:ec:02:da:bc:8a:4d:f8:be:55:22:96:de:98:
e2:69:92:21:4e:5a:29:84:f6:6e:a1:cd:16:c7:59:bd:e5:13:
fa:fe:11:9a:d0:a6:f2:32:43:b4:ab:19:78:64:1d:45:42:2b:
c2:2b:12:c3:58:c5:db:15:68:90:4f:ae:f5:6a:16:46:69:bc:
3a:be:cb:fa:c1:d7:70:ad:e3:73:6a:e3:63:d6:12:1e:16:1c:
b7:38:a3:d0:6a:fd:bc:a0:7f:59:e3:e3:16:50:b9:5e:0d:bc:
59:a0:e2:9a:dd:95:3c:77:19:45:ca:2a:fe:b2:a8:22:70:cd:
84:2c:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:39:28 2025 by rpki-client