Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/P0upgPVxgnHc3fH_mHJd1KzCJvk.roa
File: P0upgPVxgnHc3fH_mHJd1KzCJvk.roa (raw, json)
Hash identifier: cbxentYR6XunX+xycgVIJyJvffW/b4fyUGGteTDpYic=
Subject key identifier: 3F:4B:A9:80:F5:71:82:71:DC:DD:F1:FF:98:72:5D:D4:AC:C2:26:F9
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64AC584D547A435B5F1F032A61BC62
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/P0upgPVxgnHc3fH_mHJd1KzCJvk.roa
Signing time: Thu 09 Jan 2025 09:28:19 +0000
ROA not before: Thu 09 Jan 2025 09:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32181
IP address blocks: 130.185.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:ac:58:4d:54:7a:43:5b:5f:1f:03:2a:61:bc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f4ba980f5718271dcddf1ff98725dd4acc226f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:62:ad:b8:d5:75:ae:9e:75:4d:e1:bd:9f:
81:6c:f7:f4:0e:67:50:57:72:72:75:a4:2f:2b:be:
bc:0e:54:42:f6:ea:40:62:09:d9:00:1f:05:91:32:
0d:9b:ee:17:87:70:26:cd:5a:88:97:62:77:d4:16:
9e:01:0a:25:61:98:c7:46:d8:74:7f:08:11:ec:d4:
ec:4f:da:70:2c:40:fb:92:90:e3:32:c1:5f:fd:be:
31:79:a2:26:11:f6:5c:03:1f:68:85:06:71:a8:c3:
20:dd:18:80:e0:8c:0f:03:8c:b8:95:c7:9f:23:66:
56:e9:a7:cc:5b:ee:ab:1e:55:cb:e8:c0:71:36:bd:
39:08:58:10:52:3d:f7:16:da:a3:50:81:e3:b3:f9:
f0:88:f9:59:a7:95:93:34:18:85:78:66:dc:cb:bd:
d0:dd:52:79:c6:24:4b:f7:32:5b:46:57:dc:94:26:
74:db:ea:03:85:1b:ac:7e:1b:c5:86:2d:90:f5:7c:
b2:6c:3a:52:73:f1:9e:b8:d0:61:e3:97:7b:8c:32:
bc:04:cb:4f:3d:41:f6:49:36:aa:ae:95:bc:1d:c1:
84:5d:f0:f6:aa:45:86:78:cd:96:d2:61:b4:98:7e:
66:54:42:0d:c6:f2:77:c8:0c:2d:96:ea:f2:b3:12:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:A9:80:F5:71:82:71:DC:DD:F1:FF:98:72:5D:D4:AC:C2:26:F9
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/P0upgPVxgnHc3fH_mHJd1KzCJvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f5:cf:a8:3e:fe:e6:53:3c:e3:09:90:4b:38:09:e7:7f:0f:
b8:88:bb:e5:7a:69:98:02:9c:fe:9d:fc:54:3f:39:14:f1:7d:
f4:97:e5:d6:d8:e9:36:e2:fc:2d:52:ac:e0:23:c2:5f:9c:f8:
c0:dc:46:ff:38:4e:7f:41:70:9b:f8:12:33:2a:72:93:50:93:
b3:c3:c3:21:a8:1d:63:00:07:23:99:a7:c5:44:df:1e:2f:89:
93:61:a7:96:40:8a:78:e2:f8:9f:80:4a:3f:0c:6a:68:93:6a:
97:72:f9:64:ab:14:a4:7e:83:8d:a7:82:ab:42:2e:5b:de:b0:
55:85:99:33:6c:36:b3:32:c0:0b:ab:0c:7c:a4:1d:9f:68:b3:
26:2c:bd:6e:0e:96:bb:82:e4:94:43:49:b4:8e:3b:04:eb:a4:
cf:10:2c:3b:4c:5a:dc:20:1a:cc:e8:9a:32:7d:79:36:ab:b9:
2c:5a:c5:c2:fb:ff:19:3d:80:55:55:53:5f:42:74:09:4e:e3:
41:26:5a:84:b6:61:e6:bb:a0:96:db:8b:d3:9b:aa:2a:fb:32:
d3:81:ea:9f:d4:23:c5:bc:83:ed:15:9c:51:3d:3b:d4:46:f3:
f1:e4:c4:5d:b2:4e:fe:6a:b2:d4:e6:02:1b:90:43:56:00:af:
42:96:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:48 2025 by rpki-client