Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa
File: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (raw, json)
Hash identifier: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=
Subject key identifier: F8:2B:2B:DD:6E:D1:16:44:ED:6E:97:39:BD:E8:29:33:4C:77:48:98
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 019420D5A40082D7A1A05CDAF5EAA8CD7D5E
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 185.3.24.0/22 maxlen: 22
217.69.16.0/20 maxlen: 20
2a03:6c80::/32 maxlen: 48
2a03:6c81::/32 maxlen: 32
2a03:6c82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a4:00:82:d7:a1:a0:5c:da:f5:ea:a8:cd:7d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f82b2bdd6ed11644ed6e9739bde829334c774898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:10:98:d2:cf:40:74:a8:e2:25:29:c1:96:
a3:b1:79:e0:70:ed:21:09:11:f6:1a:8b:6c:89:1f:
8e:9a:2b:be:f6:d8:d0:19:0a:85:d0:dd:89:c3:e7:
fc:1d:bf:8d:29:6c:91:ca:84:d0:a8:44:e0:47:ff:
22:05:b0:ed:e2:68:1e:8d:4a:e1:7b:5f:75:7c:55:
c6:dc:4f:b6:9b:1a:36:d1:0d:76:12:67:f4:0e:9d:
72:a1:82:e7:c2:1c:7d:2c:ff:79:fd:dc:7a:0a:16:
01:50:96:78:a4:65:24:5f:c1:a5:ee:05:3b:b9:d3:
3c:70:1b:46:6a:34:25:4d:8a:42:9f:0b:5c:fa:c9:
07:50:e7:dd:40:4f:af:e5:e8:79:0d:8b:67:af:52:
c5:cc:92:83:b2:23:9a:20:61:d8:49:38:8c:90:d3:
6d:b8:57:c3:7c:8e:eb:c0:44:74:f4:8a:37:62:9b:
19:83:fd:fd:23:8f:b8:17:22:76:7f:eb:f6:3d:d6:
96:8e:c9:1d:b1:c1:78:7b:d0:2f:c5:39:90:84:65:
aa:c9:2e:0c:f2:4a:71:f5:e2:7d:1d:ff:28:bd:33:
3b:a1:af:ec:b5:00:c7:10:7c:f0:ba:44:73:d1:3a:
be:82:8b:5c:78:a0:8b:ef:53:88:9b:f1:87:ee:63:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2B:2B:DD:6E:D1:16:44:ED:6E:97:39:BD:E8:29:33:4C:77:48:98
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.24.0/22
217.69.16.0/20
IPv6:
2a03:6c80::-2a03:6c82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:1b:74:07:b6:02:e9:07:da:a7:b9:2b:56:ce:6f:cd:03:be:
93:5c:9c:f1:a6:e9:d3:9f:45:ea:97:c1:5f:2c:c1:d6:0a:8e:
7a:81:99:59:f7:68:c1:ae:f6:83:e7:8b:25:91:72:8c:3f:e3:
fa:6d:5f:0f:ce:55:a7:89:ea:f9:4f:93:a4:12:d1:5b:53:2b:
08:2d:28:8d:69:17:8d:6b:76:e8:55:9c:23:ee:67:d0:3b:fb:
ff:84:2f:c2:70:7e:23:a9:5d:b0:b9:4d:e9:7f:0d:75:16:b9:
f9:f0:cb:b6:3e:59:4d:77:e0:89:93:29:da:d2:9d:98:04:ca:
20:ca:8a:2d:50:63:7f:81:7a:dd:3b:40:d1:e2:64:a3:2b:a9:
2e:eb:21:9a:5d:30:87:b3:40:ad:1e:be:26:bb:61:9c:11:ec:
55:92:e6:a6:84:19:8d:92:21:66:31:cf:1b:1a:9c:ab:28:03:
c1:06:dd:40:52:f0:db:60:ed:f4:19:96:d7:64:fd:ad:e5:31:
a9:e8:09:01:13:82:2b:b5:73:ac:6e:84:19:4c:54:5c:5b:45:
b6:2f:a1:53:e3:64:bc:66:c9:61:0a:78:48:92:07:a3:b1:c4:
f4:e0:6b:e8:ea:dc:34:40:a8:32:75:c0:8a:d1:b4:84:de:63:
37:a4:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:20 2025 by rpki-client