Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d5ed8c-f1e5-44ec-aca7-8fecb16a648a/1/3SlpEh9l0r7lCcT9YksjQxSjHVM.roa
File: 3SlpEh9l0r7lCcT9YksjQxSjHVM.roa (raw, json)
Hash identifier: uepJhI5qMhccRLUFGP52ROXr/eSZGGDeOBRMFSkRCao=
Subject key identifier: DD:29:69:12:1F:65:D2:BE:E5:09:C4:FD:62:4B:23:43:14:A3:1D:53
Certificate issuer: /CN=80cdceaf17410ab9c22ddb71ad01cfc2ad0cbcf3
Certificate serial: 018CC3B68C17BFBFC42B48A53475BCCEBAAB
Authority key identifier: 80:CD:CE:AF:17:41:0A:B9:C2:2D:DB:71:AD:01:CF:C2:AD:0C:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gM3OrxdBCrnCLdtxrQHPwq0MvPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d5ed8c-f1e5-44ec-aca7-8fecb16a648a/1/3SlpEh9l0r7lCcT9YksjQxSjHVM.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212374
IP address blocks: 185.231.240.0/24 maxlen: 24
185.231.242.0/24 maxlen: 24
185.231.241.0/24 maxlen: 24
185.231.243.0/24 maxlen: 24
2a0c:9900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8c:17:bf:bf:c4:2b:48:a5:34:75:bc:ce:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80cdceaf17410ab9c22ddb71ad01cfc2ad0cbcf3
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd2969121f65d2bee509c4fd624b234314a31d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:66:d7:b3:91:ed:99:d2:ca:34:f9:20:3f:
7d:5f:e8:79:b3:da:87:5b:93:48:70:08:38:74:53:
5a:b3:d5:5a:be:65:e6:04:7b:62:91:bb:38:e5:74:
a9:9a:46:fc:6c:58:ea:07:16:ca:15:30:82:f8:bc:
d6:c8:41:69:99:d6:37:d6:d8:c9:0e:b9:58:38:42:
e1:43:ec:c1:ff:e7:de:fd:e7:7d:8d:a6:be:78:d1:
44:b6:08:a0:96:d8:aa:2a:46:eb:ae:b3:4b:44:5e:
df:c2:ef:04:58:4d:4d:27:0e:d4:74:f6:2d:8e:da:
93:27:3d:9e:da:16:48:e5:de:02:83:cb:b2:f8:b6:
6b:c5:c8:34:06:1e:4b:3c:65:19:05:12:b8:02:f9:
f2:af:2d:0a:90:72:57:ff:52:73:c4:1a:c8:1a:ad:
c5:d4:5a:7e:e1:a1:ae:23:19:ad:50:de:87:22:39:
5c:9d:ab:cd:45:35:0b:db:cd:10:1c:66:22:e4:7d:
30:81:0c:b1:fa:e2:42:5c:a3:8a:4c:bb:c4:74:74:
be:2d:f9:2b:c0:0b:94:fd:50:e7:e8:12:53:e3:c8:
d0:b0:a3:01:52:0e:a1:cd:8b:04:26:16:2c:58:a0:
5a:16:8b:4e:f2:f1:bd:58:db:cd:22:a7:9e:89:40:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:69:12:1F:65:D2:BE:E5:09:C4:FD:62:4B:23:43:14:A3:1D:53
X509v3 Authority Key Identifier:
keyid:80:CD:CE:AF:17:41:0A:B9:C2:2D:DB:71:AD:01:CF:C2:AD:0C:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gM3OrxdBCrnCLdtxrQHPwq0MvPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5ed8c-f1e5-44ec-aca7-8fecb16a648a/1/3SlpEh9l0r7lCcT9YksjQxSjHVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d5ed8c-f1e5-44ec-aca7-8fecb16a648a/1/gM3OrxdBCrnCLdtxrQHPwq0MvPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.240.0/22
IPv6:
2a0c:9900::/32
Signature Algorithm: sha256WithRSAEncryption
18:60:c5:8d:39:21:04:20:84:9e:c6:64:ce:f2:80:6b:b2:09:
85:de:7d:47:f7:08:02:de:11:8f:a2:f6:88:5d:fb:d1:ff:d8:
b1:33:97:c2:64:40:6c:91:c2:ae:81:94:f8:ca:44:f7:ae:50:
71:d2:7f:b1:69:1a:d8:cf:8e:2d:42:52:c9:a0:49:16:4e:36:
c7:d4:d6:72:49:fe:85:ee:c6:48:8c:8d:13:9a:9b:74:c8:3f:
18:b5:de:fb:cc:91:ff:0f:c0:2a:68:43:5a:56:77:6c:d8:91:
17:a8:46:bb:5c:03:24:f6:f5:e1:f4:45:db:96:68:fb:a8:37:
b4:40:f6:df:b7:50:98:13:fd:db:57:49:78:9b:12:f3:58:36:
b7:78:0e:1a:b5:d9:37:f2:62:12:11:d1:08:0a:04:31:a5:b9:
42:69:01:d4:3d:36:9f:48:35:45:3c:14:1c:66:e3:9b:35:1d:
0e:fb:10:f0:84:98:89:64:9c:61:fd:0a:36:12:72:1b:0b:9a:
13:88:f9:51:c0:4c:36:f7:30:3c:67:c6:3b:8e:c9:0e:46:08:
a9:e6:9b:b1:c5:06:4c:5f:e3:c7:ec:0a:4c:df:6d:38:fd:cf:
f0:98:80:4b:bc:d8:b9:68:9e:2a:db:61:5b:4a:76:b3:20:c4:
aa:3b:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:06 2025 by rpki-client