Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/rDzdHpqYiZg-RQr-6bWjvd-DWOs.roa
File: rDzdHpqYiZg-RQr-6bWjvd-DWOs.roa (raw, json)
Hash identifier: nJwfhW+J1J2cWbUJe+3gD6/ZjHmr6XgMUvyBfYolSfs=
Subject key identifier: AC:3C:DD:1E:9A:98:89:98:3E:45:0A:FE:E9:B5:A3:BD:DF:83:58:EB
Certificate issuer: /CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Certificate serial: 018B3DAEC7FA92CE42AF4DD38D030267DA73
Authority key identifier: 3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/rDzdHpqYiZg-RQr-6bWjvd-DWOs.roa
Signing time: Tue 17 Oct 2023 12:49:06 +0000
ROA not before: Tue 17 Oct 2023 12:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 185.10.112.0/22 maxlen: 24
178.20.144.0/21 maxlen: 24
88.85.224.0/19 maxlen: 24
62.204.48.0/24 maxlen: 24
46.235.88.0/21 maxlen: 24
212.12.160.0/19 maxlen: 24
176.241.184.0/21 maxlen: 24
2a00:1560::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:ae:c7:fa:92:ce:42:af:4d:d3:8d:03:02:67:da:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Validity
Not Before: Oct 17 12:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac3cdd1e9a9889983e450afee9b5a3bddf8358eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:7a:01:c1:25:31:f2:cc:1f:05:43:20:9c:
2c:b9:ad:0e:b9:c6:b3:b6:e2:fd:64:5d:ff:b1:b6:
e4:54:23:c7:45:a4:22:37:33:31:96:04:4f:70:6a:
bc:c4:56:97:67:f2:09:d8:a5:fb:39:60:1c:08:0f:
f1:04:9c:d0:48:af:72:2e:c7:c8:37:93:fe:58:a8:
fd:f5:ed:7b:ac:b0:3b:3a:49:8f:75:5d:b5:3f:f3:
43:0b:b3:bc:f8:9d:58:70:a6:41:18:e5:84:f1:74:
e9:9e:c4:4f:de:15:7d:a9:3b:56:8c:00:4c:cd:a0:
28:bb:cd:57:f6:a4:d8:0e:71:3c:99:6e:dc:30:bd:
42:b3:6b:ca:19:5b:f9:8b:04:23:4a:2e:f5:15:68:
0a:04:84:53:7f:e7:79:56:37:f0:49:2d:cf:ef:30:
3e:88:ff:c9:38:5e:50:3b:22:34:7a:6a:6a:8c:3d:
5c:56:cd:62:b8:71:bd:17:48:4d:38:07:0c:93:5a:
c1:8b:b4:01:d9:a7:e3:2f:d4:3a:5c:5a:dd:ee:6e:
5c:80:bd:cc:1e:ee:5f:a0:df:09:41:06:c1:5a:8c:
30:20:92:cd:e4:37:c8:6d:cd:c7:c8:af:39:4d:3d:
36:04:38:29:bf:58:18:e0:54:d0:82:b8:07:14:9a:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:DD:1E:9A:98:89:98:3E:45:0A:FE:E9:B5:A3:BD:DF:83:58:EB
X509v3 Authority Key Identifier:
keyid:3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/rDzdHpqYiZg-RQr-6bWjvd-DWOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
88.85.224.0/19
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
212.12.160.0/19
IPv6:
2a00:1560::/32
Signature Algorithm: sha256WithRSAEncryption
87:f1:76:aa:8f:48:36:7f:d3:d2:ae:fb:db:d6:dc:e2:95:ba:
a7:d2:41:ec:04:30:60:01:47:3a:23:d4:b3:ec:1b:01:bf:69:
39:e8:6c:8b:ef:89:92:f3:57:c0:d3:cc:6e:80:6f:5e:9a:07:
d3:7b:bb:1d:7e:37:5b:66:64:42:40:63:0f:c8:60:9f:e2:f1:
e2:9d:e6:2c:63:f8:e9:e3:39:9b:0a:ca:31:f2:09:5e:c6:3d:
bb:9a:f0:7e:20:86:68:cf:3d:76:f9:ca:d4:30:cb:a7:de:70:
f7:4a:3f:62:38:f4:72:32:34:63:ad:30:94:98:cd:f1:b3:fe:
ed:0d:2b:1e:91:5e:44:0a:06:6a:44:7b:ab:1c:39:c1:58:fc:
2a:31:c4:92:4a:35:91:2d:61:5a:32:77:37:b9:0a:9c:b5:d2:
90:d6:bc:01:83:e1:6f:75:96:7a:99:bd:14:49:de:c8:b9:09:
f4:1c:bc:23:9b:32:a4:5c:5b:1e:59:20:bb:24:c2:b7:b7:be:
91:d2:5c:ef:8d:8a:4f:89:2a:fc:b9:d1:9c:76:48:72:c3:5b:
34:fd:24:9c:6d:2e:0c:07:ed:92:a1:92:70:98:60:ed:e0:6c:
f7:d2:8d:95:d7:f3:18:3b:58:00:b3:52:85:e4:5d:6c:82:a8:
d0:9c:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:26 2025 by rpki-client