Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa
File: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (raw, json)
Hash identifier: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=
Subject key identifier: 8F:A7:50:D9:C8:F3:5C:0D:F5:F7:6B:83:4F:23:80:89:91:8B:13:C4
Certificate issuer: /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial: 019420D5A50A42E82D536D5910297DF9B652
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24990
IP address blocks: 185.3.24.0/22 maxlen: 22
217.69.16.0/20 maxlen: 20
2a03:6c80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a5:0a:42:e8:2d:53:6d:59:10:29:7d:f9:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fa750d9c8f35c0df5f76b834f238089918b13c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:48:e0:c1:d3:62:17:1b:f5:c6:a9:2f:b4:
d8:82:5c:bb:6e:2a:6c:52:91:b4:9b:6f:4a:88:ba:
b3:4f:7a:e6:17:01:ff:b6:37:0a:bf:df:1a:09:d4:
58:4c:70:f0:73:7d:d8:38:da:7f:b5:a5:23:33:f8:
1d:dd:5b:de:cb:53:09:a5:9a:5f:c3:95:c8:5a:94:
e2:71:d4:3b:3e:eb:3f:a6:8e:4b:7b:14:2d:f3:78:
87:7a:a7:29:d8:d0:41:d5:de:28:dd:ca:93:11:ea:
57:cc:cd:ea:01:fd:e1:7b:8b:7d:9b:ea:a4:e0:2c:
15:58:2d:0b:f2:4a:c3:cd:6e:1e:4e:75:92:ae:43:
06:31:cc:93:d1:92:9a:93:7d:85:26:ab:d7:90:a5:
79:7a:71:ac:35:f8:93:ef:4f:bb:71:7e:42:ea:d8:
98:51:52:55:c0:a1:c5:10:2f:65:55:72:1b:46:1b:
1f:3c:04:b0:57:5d:0a:10:de:83:cb:a4:ca:59:89:
85:6b:40:1a:ef:81:60:45:c6:11:e2:94:9a:cb:50:
99:77:ae:2a:b3:fe:f2:74:2b:dd:69:6e:d0:eb:9a:
66:a5:67:37:e8:0b:77:ac:ae:50:65:3b:75:81:4e:
94:e0:4a:e4:ae:85:e2:28:5d:a2:a5:44:eb:69:ef:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A7:50:D9:C8:F3:5C:0D:F5:F7:6B:83:4F:23:80:89:91:8B:13:C4
X509v3 Authority Key Identifier:
keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.24.0/22
217.69.16.0/20
IPv6:
2a03:6c80::/32
Signature Algorithm: sha256WithRSAEncryption
06:23:32:76:92:ca:b5:11:16:ed:4a:23:40:1c:31:8b:6c:c0:
34:eb:dc:63:10:a1:3b:67:34:74:5b:3a:ef:c6:ab:44:c8:77:
89:90:2c:91:93:25:76:61:8c:88:d2:ad:d1:13:ab:47:a6:f8:
37:97:3e:8f:8d:ad:6b:ee:6b:b3:e5:ed:59:60:f2:dd:4e:5a:
fc:19:e1:61:91:53:19:eb:39:28:b6:16:1f:54:1f:44:8d:8f:
11:47:39:1d:1c:8d:bd:4b:98:f8:f8:24:33:b9:f6:3a:cf:c9:
2d:3d:a6:93:51:b1:42:75:44:5c:0d:44:38:2b:50:5d:2a:ea:
12:eb:93:74:04:24:31:92:01:4e:a7:ce:90:63:b8:85:25:42:
a6:c5:9d:0e:d4:78:af:07:17:65:7e:3b:29:8e:49:e9:bc:bc:
b1:4f:ca:1b:e2:4e:f9:e2:1b:bf:bb:ee:ca:f8:4b:dd:e7:de:
fe:9b:05:12:29:74:65:b6:f1:17:5a:be:d9:28:4e:07:7c:a4:
e9:fb:56:60:f1:91:74:46:cd:a9:fe:6c:b9:81:c6:8d:36:2f:
a1:2a:d8:19:07:76:ee:cf:b0:20:f0:d6:27:77:e4:c3:d6:9c:
e9:3c:3b:c2:a3:d8:eb:f5:64:f7:10:2d:3b:96:07:e1:0c:94:
11:bc:4c:bd
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQg1aUKQugtU21ZECl9+bZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMzUwYmE4MmYzZmViNWFlZTI4OTM4ZmJmMWIwOWMxZTJm
ZDE5YjQwHhcNMjUwMTAxMDc0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmE3NTBkOWM4ZjM1YzBkZjVmNzZiODM0ZjIzODA4OTkxOGIxM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfNI4MHTYhcb9capL7TYgly7bips
UpG0m29KiLqzT3rmFwH/tjcKv98aCdRYTHDwc33YONp/taUjM/gd3Vvey1MJpZpf
w5XIWpTicdQ7Pus/po5LexQt83iHeqcp2NBB1d4o3cqTEepXzM3qAf3he4t9m+qk
4CwVWC0L8krDzW4eTnWSrkMGMcyT0ZKak32FJqvXkKV5enGsNfiT70+7cX5C6tiY
UVJVwKHFEC9lVXIbRhsfPASwV10KEN6Dy6TKWYmFa0Aa74FgRcYR4pSay1CZd64q
s/7ydCvdaW7Q65pmpWc36At3rK5QZTt1gU6U4ErkroXiKF2ipUTrae+AawIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFI+nUNnI81wN9fdrg08jgImRixPEMB8GA1UdIwQY
MBaAFDw1C6gvP+ta7iiTj78bCcHi/Rm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEt
NjFiNzkwMmVlMjA0LzEvajZkUTJjanpYQTMxOTJ1RFR5T0FpWkdMRThRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82NGQ3YTktY2FjMy00NTQ5LWE3YWEtNjFiNzkwMmVlMjA0
LzEvUERVTHFDOF82MXJ1S0pPUHZ4c0p3ZUw5R2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQMYAwQE
2UUQMA0EAgACMAcDBQAqA2yAMA0GCSqGSIb3DQEBCwUAA4IBAQAGIzJ2ksq1ERbt
SiNAHDGLbMA069xjEKE7ZzR0WzrvxqtEyHeJkCyRkyV2YYyI0q3RE6tHpvg3lz6P
ja1r7muz5e1ZYPLdTlr8GeFhkVMZ6zkothYfVB9EjY8RRzkdHI29S5j4+CQzufY6
z8ktPaaTUbFCdURcDUQ4K1BdKuoS65N0BCQxkgFOp86QY7iFJUKmxZ0O1HivBxdl
fjspjknpvLyxT8ob4k754hu/u+7K+Evd597+mwUSKXRltvEXWr7ZKE4HfKTp+1Zg
8ZF0Rs2p/my5gcaNNi+hKtgZB3buz7Ag8NYnd+TD1pzpPDvCo9jr9WT3EC07lgfh
DJQRvEy9
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:10 2025 by rpki-client