Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/3WyukmgjrbVq74wKKBH8aEdD_Ys.roa
File: 3WyukmgjrbVq74wKKBH8aEdD_Ys.roa (raw, json)
Hash identifier: bOaQsx2S0bqpcii92XnvMEaJCl3Va5qxbDlK4NP/lz4=
Subject key identifier: DD:6C:AE:92:68:23:AD:B5:6A:EF:8C:0A:28:11:FC:68:47:43:FD:8B
Certificate issuer: /CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Certificate serial: 06C4EA
Authority key identifier: 92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/3WyukmgjrbVq74wKKBH8aEdD_Ys.roa
Signing time: Thu 06 Jan 2022 16:46:31 +0000
ROA not before: Thu 06 Jan 2022 16:46:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 194.37.81.0/24 maxlen: 24
185.247.117.0/24 maxlen: 24
185.181.8.0/24 maxlen: 24
185.227.110.0/24 maxlen: 24
2a07:3b80:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443626 (0x6c4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92755d7acea000d4ae66101ac5fdfac81c677efc
Validity
Not Before: Jan 6 16:46:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd6cae926823adb56aef8c0a2811fc684743fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:9e:79:81:3b:b6:d7:4e:88:06:e8:25:0d:
da:43:dc:8c:12:cc:6c:84:01:3e:bf:3a:8f:f4:05:
52:2b:1f:98:a1:6b:3e:28:37:6a:94:a8:a5:9d:29:
42:25:85:37:a2:bc:ae:15:39:fb:75:aa:ea:27:24:
49:4a:7f:26:85:64:04:8b:8c:a1:17:19:84:2b:34:
0b:8d:e1:1f:fd:1c:ec:78:ef:0a:5d:56:40:f0:79:
7c:2e:75:bc:6f:20:55:22:ab:cb:10:74:a9:ea:57:
09:5d:68:ea:80:6b:50:3c:09:53:09:b4:ad:08:59:
b6:c5:87:53:34:f7:5b:72:ea:40:21:60:94:24:fc:
c1:40:65:32:26:87:54:c0:a5:01:b9:bb:a0:a4:bb:
59:4b:64:43:3f:15:ac:f9:50:72:08:7a:b1:42:80:
e8:2b:3a:7c:ed:2f:d0:41:e5:89:01:9a:89:92:fa:
6f:1c:b8:75:cb:c1:0d:4d:43:83:e8:39:ad:7e:3b:
eb:89:d1:cc:31:5a:f4:75:96:f4:d4:c1:68:a8:5c:
c3:6c:6b:40:66:d6:c4:44:4f:64:19:29:b7:ff:04:
4e:4f:53:ad:8f:90:81:41:c4:00:cf:17:b7:05:37:
87:6c:ee:21:a5:83:df:4f:d3:d7:0f:37:86:20:2e:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:AE:92:68:23:AD:B5:6A:EF:8C:0A:28:11:FC:68:47:43:FD:8B
X509v3 Authority Key Identifier:
keyid:92:75:5D:7A:CE:A0:00:D4:AE:66:10:1A:C5:FD:FA:C8:1C:67:7E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knVdes6gANSuZhAaxf36yBxnfvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/3WyukmgjrbVq74wKKBH8aEdD_Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8a6c5b-7e28-4548-817d-f1e6985def25/1/knVdes6gANSuZhAaxf36yBxnfvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.8.0/24
185.227.110.0/24
185.247.117.0/24
194.37.81.0/24
IPv6:
2a07:3b80:3::/48
Signature Algorithm: sha256WithRSAEncryption
0f:18:13:5f:7c:50:b0:13:9c:5d:1c:91:ca:4c:f7:4e:55:80:
b2:2a:56:9f:4e:26:cb:84:6b:d2:82:df:55:37:ec:24:14:8f:
dd:f1:d9:5b:7f:33:d6:a6:bd:ba:b7:f6:f7:b4:60:a9:8d:f3:
aa:e5:b0:e2:c9:71:38:53:f0:cb:88:f7:97:c5:10:e0:a3:a5:
78:18:05:33:c6:a3:2d:48:d8:34:de:ba:d4:fc:e0:1c:86:c2:
f2:95:f9:25:99:85:a5:da:c1:bc:79:93:b3:5b:c6:c6:1e:31:
c4:c3:7e:a5:46:10:29:2e:34:e6:72:ad:be:21:18:4d:40:43:
fc:76:cf:74:cc:78:f2:62:36:6c:6f:88:67:29:73:3e:63:94:
5f:01:75:6c:87:db:ea:ff:7d:98:eb:a9:64:1f:13:ea:64:a7:
75:91:a0:c4:16:de:1e:18:c6:c2:c3:53:89:46:22:10:8d:31:
ab:fb:13:7d:9d:6d:7e:e9:6b:32:2c:01:82:cf:6c:ae:fa:b0:
4e:bb:38:73:5f:03:55:c0:ac:de:37:0d:cd:da:ae:63:14:67:
b8:48:fa:9a:ab:74:86:91:02:3d:6b:45:8c:a7:57:a9:67:5b:
29:0a:ee:3d:98:69:0e:7b:95:56:0a:0d:8f:e6:bf:6f:b6:fa:
a4:5f:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:58 2025 by rpki-client