Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/3Jp97JUe3gWKYF84NM2iFfloREw.roa
File: 3Jp97JUe3gWKYF84NM2iFfloREw.roa (raw, json)
Hash identifier: VNFR7b84l18qK1EKYiFN7wA+p6c65UHU5/wSsOrBu1E=
Subject key identifier: DC:9A:7D:EC:95:1E:DE:05:8A:60:5F:38:34:CD:A2:15:F9:68:44:4C
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B229E2620E63942DD034ACDA0E74B6
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/3Jp97JUe3gWKYF84NM2iFfloREw.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12402
IP address blocks: 83.212.28.0/22 maxlen: 22
83.212.236.0/22 maxlen: 22
195.251.224.0/21 maxlen: 21
195.251.236.0/23 maxlen: 23
2001:648:24a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:29:e2:62:0e:63:94:2d:d0:34:ac:da:0e:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc9a7dec951ede058a605f3834cda215f968444c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:e4:45:81:dc:6b:20:94:3c:38:d6:3d:62:
0e:2c:2d:b9:1f:fa:37:23:bf:9f:39:6d:3c:a9:8f:
a4:45:c8:35:72:f4:2a:50:c1:ee:b5:68:e4:31:60:
21:a0:2f:a0:d5:e7:97:d0:5c:39:8a:4f:ff:46:08:
ad:63:f5:d3:9e:8f:22:0e:33:75:fb:41:06:03:8a:
e7:b0:c2:b3:9d:85:47:d8:c1:c0:c8:9b:28:37:6a:
bb:8d:9d:8c:24:61:82:1d:f8:b5:85:27:32:b8:dc:
34:ef:66:31:16:46:74:60:63:d6:d8:78:42:f0:17:
26:97:21:d5:74:15:87:94:3e:6d:9a:7c:89:11:1f:
eb:12:fe:e6:f8:a4:97:07:15:7b:2c:67:fb:d7:bc:
2c:a1:73:29:9f:ad:f9:2a:50:ea:39:61:40:e4:e0:
07:ca:38:17:af:6c:cd:3d:f5:92:d1:a4:21:34:83:
3b:e1:28:e1:44:e0:f9:02:be:da:06:45:f7:d6:0b:
6d:c0:c7:51:5f:42:08:13:d9:ec:0b:42:83:ee:bc:
b7:23:f3:ab:2f:54:58:9a:88:a7:99:38:86:51:9c:
c1:e5:ae:17:34:72:40:2b:c9:d9:4d:17:2b:53:02:
50:94:2f:77:df:9b:8e:03:94:12:e2:28:c8:b2:2b:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:7D:EC:95:1E:DE:05:8A:60:5F:38:34:CD:A2:15:F9:68:44:4C
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/3Jp97JUe3gWKYF84NM2iFfloREw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.28.0/22
83.212.236.0/22
195.251.224.0/21
195.251.236.0/23
IPv6:
2001:648:24a0::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c1:d6:66:2b:3a:1e:11:bb:91:57:ef:a3:a7:0c:2a:74:3d:
d7:75:a5:4f:13:07:68:1d:25:ca:fa:9b:3c:b7:ee:bc:d2:13:
ae:fd:5a:92:90:36:ca:47:86:6b:51:e3:f1:67:9d:42:08:c9:
8f:88:68:ad:25:b9:40:86:64:09:0d:41:57:8b:cf:ae:88:32:
cb:20:08:42:9c:52:33:e5:80:49:86:fd:5c:56:20:7c:d0:92:
3f:a7:21:c4:d6:d0:5a:fb:dd:09:12:70:37:95:54:ea:12:41:
b9:14:8a:be:40:c9:8b:d8:72:a4:d6:af:ad:30:03:1c:70:21:
28:6e:7f:ab:52:3e:1d:ed:f2:a5:43:cc:26:14:23:2c:64:8e:
e8:a9:f7:de:e1:6a:04:d6:4e:69:1f:44:f4:e5:d6:44:d7:08:
f0:ed:b0:68:c6:ff:12:fa:56:41:1b:aa:1a:c7:42:eb:30:49:
61:72:59:8f:9a:35:22:c7:d1:f9:3b:35:94:85:e3:90:6c:37:
9b:a6:31:e0:f1:71:9d:6e:ac:db:71:78:17:95:e5:cb:89:ae:
38:6e:a5:ac:eb:ff:49:98:17:63:08:c5:15:59:25:e9:3d:4b:
ed:6c:35:9f:83:98:af:1d:ca:21:64:53:10:52:08:c4:b1:a8:
f6:1e:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:09 2025 by rpki-client