Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa
File: 3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa (raw, json)
Hash identifier: iHgOduhUsida+9pHg8iFsStpH/s/1dREHiJkoJW0aww=
Subject key identifier: DC:A4:8D:FE:4D:CA:7F:24:48:A6:43:A9:2A:C6:DB:CF:D0:6A:AB:91
Certificate issuer: /CN=2a264605245af2019c293c3728f6a5e255d89f25
Certificate serial: 01942067F05618AAE0EAC27D28A830713C5B
Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61205
IP address blocks: 94.198.200.0/21 maxlen: 24
185.117.56.0/22 maxlen: 24
185.120.112.0/22 maxlen: 24
185.213.176.0/22 maxlen: 24
188.213.56.0/21 maxlen: 21
188.213.56.0/22 maxlen: 22
2a03:c2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f0:56:18:aa:e0:ea:c2:7d:28:a8:30:71:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca48dfe4dca7f2448a643a92ac6dbcfd06aab91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:66:6e:5f:95:38:4d:f9:b4:e9:a4:08:2d:
4d:43:d6:55:df:1d:b3:3e:b2:0f:83:76:58:5a:86:
0a:3f:0c:1b:d9:e3:df:96:48:74:2d:ac:8a:30:83:
ce:0c:cc:34:46:46:27:0b:b1:68:86:1b:e3:5d:f8:
3e:84:a9:13:d4:14:f5:b3:09:cf:a6:4e:32:f6:cd:
bf:09:f1:0d:8a:3b:ab:51:23:25:fc:9f:be:57:62:
41:ad:61:8c:66:57:ca:a1:6d:af:11:73:12:88:3a:
e3:b4:bc:28:59:50:e5:ef:ae:f1:65:93:e2:ab:f5:
9a:e3:ea:ed:7f:fb:9f:52:22:ab:c2:97:f1:41:0d:
c6:36:58:59:96:21:89:1d:42:89:8a:e8:a9:66:6b:
54:95:ea:9d:2f:0f:49:6f:f9:0d:55:6b:e1:1f:6f:
fc:3a:6e:20:1d:7d:da:26:36:e1:ad:79:f3:57:6a:
16:e6:5f:94:b2:4a:d3:9c:19:cb:1d:a8:9b:ed:39:
4b:b3:74:86:8c:ec:1c:a3:07:29:01:a6:43:f8:cc:
e2:53:bd:d0:ff:23:cd:08:81:b8:eb:ff:df:eb:b9:
e5:88:e3:85:d4:45:21:96:dc:2c:95:29:de:c7:85:
ff:bc:7f:c6:d4:c0:ab:28:66:e3:cf:ec:82:b3:a5:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A4:8D:FE:4D:CA:7F:24:48:A6:43:A9:2A:C6:DB:CF:D0:6A:AB:91
X509v3 Authority Key Identifier:
keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.200.0/21
185.117.56.0/22
185.120.112.0/22
185.213.176.0/22
188.213.56.0/21
IPv6:
2a03:c2c0::/32
Signature Algorithm: sha256WithRSAEncryption
75:2c:8f:fb:31:38:d1:8d:b9:92:bf:1d:c4:62:28:8c:33:75:
29:92:58:c5:71:7c:a3:5c:bd:99:26:98:48:37:fc:15:76:99:
4e:c9:1b:11:d8:17:85:59:91:3b:5a:1d:32:5e:d8:33:7c:d1:
67:b6:b0:98:77:88:0c:6e:d4:22:48:31:01:00:14:d1:89:07:
c7:83:7c:43:76:0e:6c:56:b8:ab:27:1e:93:a0:c0:61:b7:c8:
ad:2e:f3:78:89:67:73:cb:7b:7b:b1:43:8a:db:a8:45:e4:e0:
d8:cd:bc:0e:9e:60:e0:4f:75:ff:b2:1c:86:37:e6:74:48:d8:
4d:c7:0a:de:79:4f:07:a9:03:8d:da:3b:ef:a7:91:43:40:56:
2a:8e:22:f5:cb:1a:58:a2:d3:69:e0:96:a9:60:96:69:39:2a:
cb:a1:e4:c7:9f:e1:96:e1:5b:53:9f:c1:93:56:d5:25:c8:01:
b4:22:c6:76:dd:83:d8:29:c0:f2:bc:f2:e9:ba:b7:c1:76:3c:
64:ee:eb:9a:ba:45:8f:3c:4f:18:c1:bb:37:8e:a9:2f:e0:96:
92:2d:c0:83:41:68:9b:6a:49:b3:e4:0b:dd:fb:82:25:a2:da:
4b:90:19:f6:9e:60:fd:ad:03:b1:2b:97:95:20:d5:86:cb:b3:
2d:e7:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:39 2025 by rpki-client