Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/dA9mnK7u8SrMJvStuVXROxjQcrs.roa
File: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (raw, json)
Hash identifier: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=
Subject key identifier: 74:0F:66:9C:AE:EE:F1:2A:CC:26:F4:AD:B9:55:D1:3B:18:D0:72:BB
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 0194266C13C004623ADB62B25206FE4A0E7E
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/dA9mnK7u8SrMJvStuVXROxjQcrs.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205559
IP address blocks: 185.206.34.0/23 maxlen: 23
185.206.34.0/24 maxlen: 24
185.206.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:13:c0:04:62:3a:db:62:b2:52:06:fe:4a:0e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=740f669caeeef12acc26f4adb955d13b18d072bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:0d:a5:33:de:fb:36:9d:e8:19:71:3b:01:
d9:98:55:97:86:84:e0:a8:d6:73:5e:2d:83:01:02:
e8:21:1b:4c:31:0e:3d:55:bd:0c:a4:48:63:25:27:
bc:2f:7b:7e:be:ac:38:f8:75:76:27:42:5a:46:5a:
7b:fe:90:2f:c1:eb:b3:2e:e9:60:17:d5:bf:03:2a:
b3:4f:6d:c3:14:16:1b:c9:78:b4:27:24:51:81:41:
db:a9:bc:50:4c:d8:e2:88:1e:31:57:38:94:19:16:
98:b4:a3:0f:e9:88:1e:de:af:7c:e3:cd:c8:3f:de:
4c:a3:90:5a:af:27:0f:59:2f:93:d6:93:22:68:2e:
1e:a8:12:35:13:56:f2:5f:8c:68:06:75:9f:06:5a:
73:8d:45:85:5b:bf:fa:f0:dc:e7:f8:1e:c9:ad:89:
ea:86:2c:e8:92:0c:40:dc:f2:3c:75:90:85:d4:3d:
97:ce:55:81:69:be:4a:07:68:1c:62:38:ef:03:7c:
69:2a:e0:dc:29:6c:c6:af:5c:6f:a5:c1:17:03:46:
ae:c8:e0:53:b7:c0:d9:bb:94:20:a1:ec:5f:b2:db:
12:3e:d8:f2:72:f6:d4:20:41:e7:9f:17:cd:0a:8e:
8e:91:4e:42:cd:65:29:75:3e:a8:27:25:96:3e:af:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0F:66:9C:AE:EE:F1:2A:CC:26:F4:AD:B9:55:D1:3B:18:D0:72:BB
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/dA9mnK7u8SrMJvStuVXROxjQcrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.34.0/23
Signature Algorithm: sha256WithRSAEncryption
04:0a:ca:e9:23:db:c9:10:0b:d1:86:a1:cb:d0:63:dd:95:48:
44:b0:6f:79:eb:f8:73:bd:eb:e4:8b:97:41:1c:c6:d8:47:c7:
4e:c8:36:12:4e:ed:5c:5a:05:b9:42:3b:9d:f8:16:ae:15:45:
ca:8e:64:07:e9:0f:3f:93:11:c7:d0:4d:43:a1:54:19:ac:3a:
72:a1:1e:09:d6:b5:48:57:a8:d8:6d:c9:13:21:1b:e4:95:52:
b4:43:5d:e3:ef:f7:15:9d:7a:94:a6:a2:92:6e:12:5f:aa:bd:
b0:c8:98:95:cc:6c:00:ad:75:1b:8d:b1:72:22:8a:84:1e:52:
e0:65:93:80:28:e6:68:9f:af:df:b4:df:e9:e6:e5:87:05:f1:
19:a2:1c:41:11:59:1b:3e:3f:77:6a:a3:f2:f9:fc:c4:28:c1:
a7:db:6f:a2:68:60:61:ea:08:a1:2b:3e:c6:f3:c0:e4:20:24:
a7:d2:d1:f5:e5:98:46:83:09:e9:5d:08:1c:a6:62:d6:9a:14:
c2:93:b0:6a:20:07:89:94:f5:71:dd:0a:88:32:33:0d:2b:8e:
1f:6c:0a:ba:cc:2f:51:05:2b:b9:82:bd:3f:d6:f1:c5:82:50:
2d:58:a4:64:6f:56:07:ba:4c:40:7c:08:2f:59:ec:90:a1:bd:
62:cf:f5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:45 2025 by rpki-client