Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/3pVIAec85BKtsk9TgvQ5YZOeva4.roa
File: 3pVIAec85BKtsk9TgvQ5YZOeva4.roa (raw, json)
Hash identifier: f5rUhip/d8c5UbR1KvTXvR+VmlbVfbc+n3T/cMd3/as=
Subject key identifier: DE:95:48:01:E7:3C:E4:12:AD:B2:4F:53:82:F4:39:61:93:9E:BD:AE
Certificate issuer: /CN=619c48fedb770291f876eb6e18031291edb4149b
Certificate serial: 0C7EC086
Authority key identifier: 61:9C:48:FE:DB:77:02:91:F8:76:EB:6E:18:03:12:91:ED:B4:14:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZxI_tt3ApH4dutuGAMSke20FJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/3pVIAec85BKtsk9TgvQ5YZOeva4.roa
Signing time: Sat 01 Jan 2022 05:04:24 +0000
ROA not before: Sat 01 Jan 2022 05:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198551
IP address blocks: 185.238.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209633414 (0xc7ec086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=619c48fedb770291f876eb6e18031291edb4149b
Validity
Not Before: Jan 1 05:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de954801e73ce412adb24f5382f43961939ebdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:65:75:fa:69:c6:3a:2c:65:3d:73:e8:2a:
c1:aa:c2:4e:23:17:30:5e:d2:f0:46:1a:19:f8:e3:
a3:45:6c:d0:93:54:ed:36:5f:cc:cf:12:55:b9:42:
ea:f8:39:48:17:3e:fb:a8:b9:9a:56:19:54:f5:79:
4d:66:e8:65:15:b6:e4:8d:09:2f:17:8b:51:b3:fe:
b6:dd:10:3a:dd:ac:a7:aa:8e:30:16:b6:13:7c:08:
61:30:36:78:18:e5:09:76:d5:a1:f7:50:ed:45:3d:
8a:20:ad:44:4d:33:a7:09:31:1f:1d:3d:55:ac:f5:
48:c7:a2:11:c5:21:3c:7b:18:90:de:b4:25:d9:67:
74:ba:47:db:b8:59:ab:3c:70:3f:7a:76:94:e2:9d:
da:78:2e:0f:4e:78:af:98:8e:d1:54:6a:ec:22:0f:
4f:68:53:f4:1e:17:87:79:1a:f2:8b:66:a0:b9:78:
2a:d8:08:86:a2:f9:f5:97:47:97:61:61:17:73:e4:
28:fa:0f:ff:99:30:43:f0:a2:77:46:cd:cd:19:bb:
fe:3a:c4:23:34:a1:63:63:0c:87:a9:80:df:c0:d3:
3f:71:28:bc:b2:72:fe:e8:b0:41:41:2f:d2:82:15:
f8:f3:cc:27:2e:bd:e5:23:fe:5e:07:1f:03:33:d3:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:48:01:E7:3C:E4:12:AD:B2:4F:53:82:F4:39:61:93:9E:BD:AE
X509v3 Authority Key Identifier:
keyid:61:9C:48:FE:DB:77:02:91:F8:76:EB:6E:18:03:12:91:ED:B4:14:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZxI_tt3ApH4dutuGAMSke20FJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/3pVIAec85BKtsk9TgvQ5YZOeva4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/31af9c-e791-4553-8495-15b8a6b1fec2/1/YZxI_tt3ApH4dutuGAMSke20FJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.36.0/22
Signature Algorithm: sha256WithRSAEncryption
56:ae:a2:e6:06:d5:8c:bb:0f:86:5e:ab:e1:2f:d4:0a:e7:34:
0e:3f:b6:f3:e0:93:2e:df:a2:14:12:a5:9a:76:95:7b:02:11:
a6:2e:97:b2:c4:81:6c:f2:d8:0c:58:19:1a:4b:83:bd:68:1f:
74:a7:f3:22:07:53:22:46:70:9c:8a:2d:c8:c5:22:89:02:68:
a8:64:7b:5a:03:dd:b3:a6:1d:77:a8:76:64:14:89:f2:d4:29:
ac:20:8c:6e:a5:e9:d7:10:02:f1:9a:53:e5:90:af:85:a5:a9:
0f:c7:a8:49:4d:e4:c6:9a:88:30:53:48:81:89:5d:4d:ff:c5:
82:85:d3:24:b3:de:db:0c:93:01:7a:25:2e:c7:8a:bb:7c:b5:
8d:7b:d2:e0:5b:ab:a0:77:c1:65:fd:d5:c9:13:be:28:51:95:
6e:02:84:6a:c3:e5:38:f7:e6:39:ca:a9:7e:d3:17:1b:2f:98:
e4:34:cc:13:49:4e:ad:94:30:a0:bc:97:ec:13:61:2f:a4:65:
8c:68:fe:84:0c:42:0c:bd:52:d4:10:72:66:db:72:8c:73:cb:
eb:a0:d0:c6:cc:37:4e:40:c1:a5:0f:0a:ce:13:dc:4c:32:05:
c1:98:61:43:84:a0:f5:52:14:ef:ab:de:6f:07:9d:bc:62:ce:
02:b8:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:50:29 2025 by rpki-client