Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3FMmXKmqoDTazuHeok6UpnFgx9o.roa
File: 3FMmXKmqoDTazuHeok6UpnFgx9o.roa (raw, json)
Hash identifier: GKB5SVzWVpG3h+74qOYQZjbFsyaxugklwU8bLLNXml8=
Subject key identifier: DC:53:26:5C:A9:AA:A0:34:DA:CE:E1:DE:A2:4E:94:A6:71:60:C7:DA
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 04561A
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3FMmXKmqoDTazuHeok6UpnFgx9o.roa
Signing time: Mon 07 Mar 2022 16:39:10 +0000
ROA not before: Mon 07 Mar 2022 16:39:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210512
IP address blocks: 138.124.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284186 (0x4561a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Mar 7 16:39:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc53265ca9aaa034dacee1dea24e94a67160c7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:b1:58:aa:02:b7:7b:fe:3d:1f:bb:95:73:
b7:c3:1c:a5:ae:83:8d:15:b4:a0:31:c0:20:5d:2d:
88:a5:7f:8c:89:b8:8b:c6:80:7e:71:c0:f5:03:91:
25:32:7b:db:08:1b:91:63:25:e9:27:22:86:21:c4:
31:75:5a:7b:2d:f0:dc:30:e6:60:09:8d:a2:ef:7f:
ee:94:f9:ca:b0:fb:0b:4c:23:7f:6a:14:23:0d:f2:
02:15:94:d8:d6:ed:d0:1a:c6:fb:c2:d6:4a:e3:ee:
21:d1:b4:da:0c:56:c7:4c:d4:9a:06:f9:26:28:dd:
30:c4:9a:e4:88:df:02:30:19:4f:78:a6:14:26:f6:
1b:07:b4:09:69:10:1d:b0:ad:89:52:9f:9c:a9:73:
b4:84:dc:e7:4d:e2:61:dd:47:dd:83:5e:8c:36:4d:
5b:de:c5:43:b1:08:ab:36:81:5d:88:ce:b1:cc:3a:
8e:a2:6b:40:84:21:d1:8c:cd:bf:31:13:e9:b3:fc:
84:ea:74:dd:50:d2:57:09:d3:08:82:01:a9:48:f9:
23:ad:6d:20:50:d4:1d:e4:93:f6:89:9c:ad:5b:af:
d4:ac:79:fd:98:82:5f:7d:31:9f:a8:48:dd:a2:e0:
7c:c8:b3:60:aa:6a:52:0c:a5:3f:24:d7:0d:f9:ae:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:26:5C:A9:AA:A0:34:DA:CE:E1:DE:A2:4E:94:A6:71:60:C7:DA
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3FMmXKmqoDTazuHeok6UpnFgx9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.186.0/24
Signature Algorithm: sha256WithRSAEncryption
34:23:6f:c8:e4:71:08:c5:76:bf:19:ba:2e:63:69:0b:43:0e:
ea:4c:e4:38:31:26:1b:e8:f7:af:eb:f8:51:86:60:b6:92:b5:
b2:2c:7b:14:23:87:b9:12:6d:5b:d0:68:ac:80:d1:a0:51:1b:
d3:54:1e:b4:36:60:ae:53:01:43:a1:f8:4b:a6:24:63:56:a5:
46:3f:db:e8:34:db:d1:f6:45:55:45:3e:5d:a4:0e:34:ed:b4:
a1:99:8e:8f:a1:c2:58:b1:f3:9f:e0:a6:f8:ed:51:cc:12:df:
f7:05:3b:8f:1e:be:01:52:37:dd:07:08:3b:c2:40:de:dc:7e:
d8:8e:81:b5:c5:9e:cf:32:47:19:d1:4e:06:62:24:18:e6:54:
27:89:59:4d:fd:6e:d1:0b:fd:48:9b:37:35:90:de:54:86:e8:
68:a3:66:85:95:0d:2e:d8:08:d8:8c:2b:3e:0f:9e:23:dd:69:
50:f2:72:02:bd:6d:49:e7:3a:01:7e:15:d6:87:a5:0d:8f:1f:
94:86:8a:5c:89:56:b4:33:66:5f:d2:46:56:20:fd:88:6a:19:
fd:46:c6:ec:21:ee:6b:ed:b3:86:0f:bb:98:50:a7:fa:57:1b:
04:52:e4:21:9b:b0:15:27:21:37:d4:78:5b:a8:d9:1a:b3:f5:
12:f3:d2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:51:51 2025 by rpki-client