Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/P3r8oITRtebSeW0p5g8ljrH9RWE.roa
File: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (raw, json)
Hash identifier: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=
Subject key identifier: 3F:7A:FC:A0:84:D1:B5:E6:D2:79:6D:29:E6:0F:25:8E:B1:FD:45:61
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194282647206106DE02379655F8033024D2
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/P3r8oITRtebSeW0p5g8ljrH9RWE.roa
Signing time: Thu 02 Jan 2025 17:53:04 +0000
ROA not before: Thu 02 Jan 2025 17:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 212.46.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:47:20:61:06:de:02:37:96:55:f8:03:30:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f7afca084d1b5e6d2796d29e60f258eb1fd4561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:82:cd:55:20:c0:c7:5d:87:06:28:8c:06:
57:83:f5:d5:b3:a1:45:47:05:6f:93:d4:1a:d5:0d:
1a:66:0c:20:50:48:2b:b4:ed:99:7b:ea:f1:f7:03:
c6:54:39:49:35:9f:ac:c3:be:ea:d0:97:25:a1:e0:
b4:56:1f:5f:ce:b4:68:49:59:13:22:04:d1:33:b9:
fd:50:93:96:5f:fc:ea:05:c9:3c:7a:49:f7:4f:6d:
92:3d:6a:96:65:41:7c:6b:51:76:7a:a9:00:87:83:
56:0d:66:c6:43:41:79:d5:8d:e2:e1:34:66:be:35:
30:16:6f:4a:f8:aa:af:e5:8e:22:92:86:6a:b9:eb:
2e:41:cc:4e:94:e1:87:48:bb:68:cf:66:57:63:57:
fc:59:cf:0b:8a:d4:18:cd:d8:41:5b:ff:7c:a9:ba:
57:0f:66:01:ee:36:fe:08:d3:81:b9:89:00:a5:b9:
d5:e0:92:89:3c:36:1c:54:55:45:ad:33:5f:b2:ef:
42:fe:02:48:db:6b:2b:6b:18:25:32:9a:40:5f:bf:
ee:05:8f:2a:20:51:e3:25:5d:78:30:19:e8:da:4e:
91:ed:c0:99:e1:29:31:4c:42:69:a7:ba:16:6e:1b:
17:5a:af:bc:60:f6:94:f8:ba:0a:62:8c:d9:22:74:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:FC:A0:84:D1:B5:E6:D2:79:6D:29:E6:0F:25:8E:B1:FD:45:61
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/P3r8oITRtebSeW0p5g8ljrH9RWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.39.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:e1:a6:e7:bb:77:79:3e:a1:62:5c:f1:8a:9b:3b:c3:1d:ad:
a4:70:b0:14:39:7b:9b:07:8d:05:02:dd:bf:27:f5:07:4f:5e:
ff:0d:08:0c:ba:cb:c7:cf:73:96:33:36:bc:00:61:8d:4c:4a:
7d:34:d0:4e:df:7d:f6:6d:f4:27:14:1f:67:c6:3b:b0:77:0e:
cb:53:20:71:71:46:70:17:d4:61:68:36:c7:d0:8c:f5:11:c8:
a3:7d:6d:a2:92:7b:05:3c:4b:e9:1a:e7:07:32:06:d8:51:44:
27:81:79:8e:43:2d:89:e9:d8:d7:fa:94:33:e6:1b:a5:e1:ae:
00:e1:30:c4:0e:b2:8f:56:fd:bb:f4:1d:6b:ba:9a:ab:f3:9c:
05:04:9c:f1:be:ae:bf:22:30:13:21:98:35:f0:6a:27:91:a6:
02:3c:4f:e0:37:ef:19:09:0e:52:2a:a6:f7:55:c4:ce:f0:5b:
ca:1e:49:be:2b:04:14:bd:a0:10:4f:19:48:1e:26:61:76:69:
68:91:63:0a:53:eb:84:43:81:dc:6a:a4:58:cd:0a:54:b8:5c:
b6:6b:19:2a:8b:f2:f9:93:83:af:b8:fc:08:0d:1f:6a:82:7c:
dc:ce:14:8d:59:29:fc:0f:a5:9c:11:96:a3:d2:d0:a6:2c:16:
1f:79:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:39:49 2025 by rpki-client