Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/sQYUo1ZUP2-6cBF6ieqiyoKLrEk.roa
File: sQYUo1ZUP2-6cBF6ieqiyoKLrEk.roa (raw, json)
Hash identifier: dITun33ovpQj2SWbUCXcbr/RN/tcO5ATI1dlB2PTxfI=
Subject key identifier: B1:06:14:A3:56:54:3F:6F:BA:70:11:7A:89:EA:A2:CA:82:8B:AC:49
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018825498D6078CEA34468F58B105DD78663
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/sQYUo1ZUP2-6cBF6ieqiyoKLrEk.roa
Signing time: Tue 16 May 2023 15:59:17 +0000
ROA not before: Tue 16 May 2023 15:59:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 86.106.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:49:8d:60:78:ce:a3:44:68:f5:8b:10:5d:d7:86:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 16 15:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b10614a356543f6fba70117a89eaa2ca828bac49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:e5:96:4d:67:ae:ad:7c:b6:02:79:dd:0d:
67:33:6c:ef:67:78:5a:3f:03:4e:8e:39:c7:5d:bd:
b9:04:db:d4:80:12:65:a8:67:64:a1:7d:e4:b1:28:
f2:f0:65:5b:74:2e:f1:b3:10:3d:9c:c9:4a:11:0c:
36:89:af:c7:87:83:3d:25:12:86:fc:05:7a:01:72:
42:cf:06:4e:47:85:54:eb:12:1d:a2:de:95:18:a4:
53:9e:af:14:80:76:6b:40:69:87:a7:b0:85:af:ed:
83:bd:ad:5e:27:7b:5e:6e:4d:f2:5b:c0:fa:af:2e:
1d:f1:92:57:2d:d0:28:a5:1b:17:45:f6:c5:8c:ee:
65:9e:ae:4e:dd:2d:dc:ca:6f:ee:77:5f:9b:b1:1f:
2d:49:3a:b5:42:c1:90:1e:f7:b2:7a:b8:b9:a2:d8:
70:e3:0f:4a:25:14:48:c6:cf:cf:13:d1:22:87:1b:
ca:f8:20:62:00:65:1d:5a:de:32:90:08:29:63:2a:
a8:00:5d:c7:dc:82:4b:80:db:7d:97:d8:0f:11:93:
85:03:d4:3c:25:38:55:29:e8:a3:37:af:f5:2e:af:
7d:42:96:ea:24:34:80:31:95:9d:6c:33:55:46:56:
45:b2:8c:43:6c:7a:96:7f:51:ec:31:74:66:5f:60:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:14:A3:56:54:3F:6F:BA:70:11:7A:89:EA:A2:CA:82:8B:AC:49
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/sQYUo1ZUP2-6cBF6ieqiyoKLrEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.108.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c3:d4:74:d3:87:16:97:97:1c:2b:98:ca:f4:c2:ff:73:62:
76:95:ff:00:86:c3:fe:51:3d:28:4c:e4:b8:54:e2:5e:ac:9e:
66:b3:34:08:e5:e1:0f:51:46:d1:fe:08:e0:a1:27:21:ee:73:
42:5b:bb:03:82:b7:db:a7:34:01:57:dd:23:99:40:08:50:c5:
34:e5:ce:09:32:c8:a9:2a:56:cf:d8:3a:7e:2f:3c:b7:72:f0:
4e:01:af:fe:22:a0:be:1a:f5:53:ac:97:2a:70:85:c8:65:5e:
61:14:9b:c5:03:02:9c:ea:10:62:21:d1:63:8f:8f:48:bf:8d:
d4:8d:72:78:35:3e:fe:1a:fc:20:26:e7:bd:6f:c8:84:56:0a:
c7:8a:53:19:34:cf:de:36:d5:fe:5e:86:84:59:63:e0:4e:32:
bf:7f:7a:fc:52:a5:1d:9d:c2:72:46:9e:87:e2:c4:6b:fa:18:
0d:43:21:47:5d:c2:1f:52:50:dc:2d:5d:93:ba:b8:9e:ae:76:
19:16:38:e3:ee:c9:57:66:51:df:88:20:dc:44:f0:e0:73:da:
89:1e:6c:93:67:29:a8:ca:82:53:4c:4b:6e:81:f2:29:02:07:
7d:c5:6b:26:b3:57:b0:da:a9:27:74:95:13:f4:1f:91:33:8f:
7e:50:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:26 2025 by rpki-client