Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa
File: 3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa (raw, json)
Hash identifier: Qs6GoxmPBIC7HGNuig2kfn3Fl73wnKTFpil8h4rBNO4=
Subject key identifier: DE:9C:95:0F:0A:74:C7:78:58:F6:84:4F:72:9F:A9:1B:C3:E1:B6:BD
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 01953D065F65C89DFDA4C952EC841BDBEF95
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa
Signing time: Tue 25 Feb 2025 12:13:02 +0000
ROA not before: Tue 25 Feb 2025 12:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.42.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:06:5f:65:c8:9d:fd:a4:c9:52:ec:84:1b:db:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Feb 25 12:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de9c950f0a74c77858f6844f729fa91bc3e1b6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:a1:a8:8b:fa:76:b6:5c:0d:07:32:8b:3c:
da:25:5f:d1:95:f6:8b:ad:c9:e3:14:26:df:31:fc:
60:82:c4:36:6d:54:c8:36:31:31:dc:4b:08:36:17:
97:0b:f3:b6:c1:cb:57:da:15:d8:bc:0a:7f:d8:ba:
c2:41:00:9b:18:92:b5:9e:2e:ad:15:1b:f7:04:73:
c8:ac:3e:38:28:1f:e4:60:dd:69:55:26:6d:af:c2:
91:11:0d:75:ec:80:76:93:87:bc:b1:78:b0:73:a9:
15:35:02:cd:d3:4c:6b:70:7a:e1:30:1d:a1:96:e2:
5a:f5:a2:e1:07:00:bd:3e:01:6f:29:23:a4:eb:0d:
13:3f:b8:41:3e:1f:6d:7a:62:5c:4b:64:5a:66:f0:
0d:31:a1:e2:06:7e:3a:94:e4:55:3c:65:f3:d0:97:
ce:39:70:99:8a:b6:71:65:ea:9e:8b:21:45:f9:a9:
b9:a1:07:84:8a:58:a9:97:bf:bc:97:b8:28:84:48:
87:57:74:4b:59:f9:92:85:71:e9:6e:94:73:04:03:
3e:16:44:80:e0:a9:7d:2f:79:01:af:ba:55:10:51:
cd:99:dd:db:35:d1:33:45:9e:19:cb:23:2d:ed:9a:
04:3b:ce:2b:39:f4:b5:fc:39:c3:b7:f6:35:c7:73:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:95:0F:0A:74:C7:78:58:F6:84:4F:72:9F:A9:1B:C3:E1:B6:BD
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/3pyVDwp0x3hY9oRPcp-pG8Phtr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.70.0/24
Signature Algorithm: sha256WithRSAEncryption
95:49:5d:7c:a2:37:4d:f6:e4:2e:0a:1d:05:c4:64:0d:73:8b:
53:c4:f8:ca:ea:a5:63:86:68:0e:c8:32:94:a2:1d:77:a4:e6:
dc:1c:20:f7:bd:6b:68:1a:9e:db:cd:14:10:b4:5b:e1:33:ab:
5a:0f:01:4a:c3:61:bf:84:6e:4c:06:0b:4f:6b:c2:69:10:ae:
67:a4:37:79:9b:31:c7:10:7b:ed:e7:01:f7:b8:36:d0:77:1e:
0e:0a:39:f1:8d:33:15:77:a6:aa:0a:9d:82:18:e8:eb:df:bb:
25:15:26:26:ec:24:5c:17:c9:36:83:d5:c4:9c:23:13:2b:3f:
cb:84:ea:1a:bf:f5:1e:d0:54:b4:8a:39:c5:89:23:60:76:8e:
5e:e2:cc:11:be:c0:1f:f5:49:63:15:63:9a:11:2f:b0:34:b8:
c7:6b:4d:09:a3:ac:1e:3b:ca:d3:80:d6:bc:5b:f2:38:9c:c3:
e8:71:a4:e7:32:e9:94:bb:49:1f:31:af:e3:42:03:69:93:82:
58:7e:35:fc:3c:54:ce:82:2b:51:b7:14:84:1f:95:ee:0f:8e:
ea:f6:f4:cf:e8:33:21:ee:89:27:8b:a8:b4:da:1a:b1:e3:82:
a7:d0:5c:9e:2c:47:2e:6a:52:e6:e8:1f:df:72:2c:a5:18:2f:
9f:53:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:29:55 2025 by rpki-client