Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/dJ5bhwdJmrOQ1zFv5CjSw6gw2Hw.roa
File: dJ5bhwdJmrOQ1zFv5CjSw6gw2Hw.roa (raw, json)
Hash identifier: SdvRkdKVvEzlmReRMvTdYrkTmi5Vr4kPNwwJ1SLq6z0=
Subject key identifier: 74:9E:5B:87:07:49:9A:B3:90:D7:31:6F:E4:28:D2:C3:A8:30:D8:7C
Certificate issuer: /CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Certificate serial: B2FF6F
Authority key identifier: 3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/dJ5bhwdJmrOQ1zFv5CjSw6gw2Hw.roa
Signing time: Sat 01 Jan 2022 13:01:57 +0000
ROA not before: Sat 01 Jan 2022 13:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29684
IP address blocks: 185.10.112.0/22 maxlen: 24
178.20.144.0/21 maxlen: 24
46.235.88.0/21 maxlen: 24
88.85.224.0/19 maxlen: 24
212.12.160.0/19 maxlen: 24
176.241.184.0/21 maxlen: 24
2a00:1560::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11730799 (0xb2ff6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Validity
Not Before: Jan 1 13:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=749e5b8707499ab390d7316fe428d2c3a830d87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:4a:95:ec:86:52:9f:c3:43:5c:04:c9:3c:
77:eb:b0:61:7c:c4:7a:d9:2e:0d:1b:35:1f:17:90:
ff:58:d7:e3:a2:79:ce:51:e1:60:0b:99:ce:4d:8a:
3d:49:3b:44:a0:3b:c4:14:1c:45:df:71:e6:d0:14:
30:4c:6a:f7:93:00:a7:5e:48:16:37:e0:f7:19:9b:
1e:05:43:a2:5d:08:db:d8:3a:42:59:79:9f:be:b2:
64:3a:29:38:78:de:2b:bf:4a:57:56:e7:35:34:0a:
14:97:ca:9c:60:5a:fd:a2:56:f6:0a:9d:22:b2:1f:
79:a6:45:ba:a5:3a:c5:3f:22:3a:db:08:52:48:2e:
eb:90:6c:cf:b5:41:82:79:b5:89:d8:3a:85:64:17:
36:87:d7:34:1a:0d:64:b9:4f:3e:5a:27:63:da:dd:
d7:33:3e:08:6d:04:4e:13:bc:71:29:9b:9b:d8:bd:
43:54:da:ff:2d:b0:55:cb:57:cf:f0:1b:35:d6:e2:
93:ab:35:37:0a:20:50:2e:d0:ed:5f:d4:fe:a7:08:
fa:24:dc:59:9f:3c:5d:ce:c1:7b:f3:23:ba:c5:4a:
2f:a4:cc:1d:ba:53:8e:0b:49:9b:34:6f:8f:72:71:
f8:79:fa:d4:5c:4c:7c:c2:2d:55:29:6d:21:1b:53:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:5B:87:07:49:9A:B3:90:D7:31:6F:E4:28:D2:C3:A8:30:D8:7C
X509v3 Authority Key Identifier:
keyid:3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/dJ5bhwdJmrOQ1zFv5CjSw6gw2Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
88.85.224.0/19
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
212.12.160.0/19
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
30:e9:2a:b8:57:55:c5:eb:a2:f6:ab:ad:cc:e3:d0:d5:c6:a0:
13:a6:44:7d:b4:87:8f:84:a5:ae:5d:db:9d:9d:20:24:21:af:
90:80:c8:6a:4b:75:3a:7c:dc:7f:15:39:14:d8:5e:6b:4d:1d:
63:ac:5b:14:33:a9:05:72:06:da:29:5b:de:39:60:a5:0c:6f:
cc:4e:bc:c8:ff:b2:07:57:40:64:bc:58:d5:46:98:53:fe:e5:
cc:58:89:7b:b1:a8:67:8e:d0:1e:f9:d7:22:25:5c:1a:da:e7:
13:a9:21:a2:9f:4b:f4:1e:19:01:65:31:ff:c5:60:5c:7a:b2:
aa:f3:af:9f:9b:53:2b:ea:9b:cf:70:fd:24:d1:82:66:32:ab:
06:a5:4f:60:4f:08:00:f9:8a:b3:e0:1b:8a:26:24:9d:02:7c:
ee:5d:7c:1e:c6:71:eb:6f:00:e8:0e:c9:df:ac:3a:d7:6c:c7:
30:19:b4:4a:f8:07:8f:fc:27:22:fb:b6:4a:f9:ff:04:24:39:
f1:d0:8d:9e:57:b9:8b:ae:02:34:2a:3c:2a:f5:14:a8:2e:7d:
6b:3b:4a:03:80:f3:a4:65:0e:e2:29:e8:d5:a7:a0:42:3c:c5:
93:5f:b9:92:cc:54:22:a1:b1:9b:a0:2e:db:f7:16:d4:c0:5d:
f4:e1:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:46:16 2025 by rpki-client