Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/3ir5WkvJIRxtwZei2sctSN0sCz0.roa
File: 3ir5WkvJIRxtwZei2sctSN0sCz0.roa (raw, json)
Hash identifier: kbUd9aHqn6kQ8QUhYDDaCsn+6zI4AKFQfFGDo83vd6o=
Subject key identifier: DE:2A:F9:5A:4B:C9:21:1C:6D:C1:97:A2:DA:C7:2D:48:DD:2C:0B:3D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019426D97A07E40A6D1F7CAF6B5C50931BF5
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/3ir5WkvJIRxtwZei2sctSN0sCz0.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49173
IP address blocks: 185.141.240.0/22 maxlen: 22
194.146.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7a:07:e4:0a:6d:1f:7c:af:6b:5c:50:93:1b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de2af95a4bc9211c6dc197a2dac72d48dd2c0b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:94:a0:3a:ea:08:2d:f0:53:d3:5e:01:47:
8b:30:1c:a1:62:1f:68:40:85:37:00:7b:3f:68:83:
49:ea:4f:ee:24:ae:92:cf:92:4b:e6:b2:3f:a4:20:
5a:31:bd:f5:3c:4b:89:32:43:1e:ce:69:b1:85:ab:
97:14:ee:6c:6e:cb:4f:9b:dc:4e:49:99:48:82:c7:
dd:d9:99:0e:3f:85:3e:b7:54:0b:52:10:16:ce:73:
63:9a:92:62:80:f5:1c:ed:d6:78:48:13:be:4c:b7:
15:d4:a0:13:de:e4:a3:e1:69:33:ee:66:93:94:6f:
27:c2:76:2c:34:42:37:4f:82:f5:e9:ab:b1:fd:f1:
2f:6d:2c:53:6b:42:6e:16:38:ed:a8:cb:25:85:74:
59:fc:24:d8:2e:f9:13:83:d2:f1:40:66:00:97:3e:
46:80:be:f8:1b:36:cb:a4:cc:70:fd:ac:a3:29:4f:
03:78:99:23:95:0d:a0:9c:5a:5c:1a:0c:80:88:e6:
c2:b3:c1:3e:a1:fc:81:78:4d:99:2e:f4:be:38:31:
73:93:50:fc:64:1d:ae:4e:a2:6c:18:a4:94:0b:46:
c7:40:48:41:4a:07:ff:63:d5:a6:2a:0d:af:73:7d:
bc:82:13:d5:30:d3:eb:b3:58:62:10:62:61:61:1d:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2A:F9:5A:4B:C9:21:1C:6D:C1:97:A2:DA:C7:2D:48:DD:2C:0B:3D
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/3ir5WkvJIRxtwZei2sctSN0sCz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.240.0/22
194.146.28.0/22
Signature Algorithm: sha256WithRSAEncryption
27:79:bb:1e:ac:92:2b:b8:af:41:5d:ea:eb:95:30:4e:e1:1a:
4d:fe:0c:6b:67:9c:94:9a:00:2a:00:bf:3e:1a:88:be:ec:7c:
f8:ef:16:65:1c:3e:f0:9f:53:de:f8:76:a0:7b:f2:29:91:62:
dc:f3:8b:a7:3c:9b:6d:8a:f9:2d:7d:6e:bf:2e:38:28:ad:90:
b6:a9:ca:16:55:65:c3:e0:a7:fc:d4:e6:a0:a9:fb:ee:df:e7:
c6:f9:51:6f:d4:12:6a:3e:6f:09:d1:41:fb:6c:86:3b:d0:91:
4f:3e:91:25:b5:06:22:12:32:ad:8c:1c:e8:13:f6:7b:d3:83:
b5:c5:90:b0:44:3d:65:f5:f8:7a:26:8b:80:15:11:bd:98:5f:
12:d5:fc:70:c0:2d:1b:b9:83:43:f8:98:7d:81:e4:32:5f:54:
6e:95:56:57:f7:1b:cd:02:4f:79:f3:15:d4:7b:36:b7:90:d7:
9c:05:99:57:24:85:e5:3d:ad:19:5e:17:52:e4:4d:0c:41:b0:
78:b4:38:64:36:30:a8:13:d7:98:a5:c7:df:a1:5c:78:f7:19:
62:a7:0c:09:fd:32:a0:67:dd:d8:c2:af:f2:e5:e1:4e:21:b9:
42:37:6f:f6:ec:a6:77:6e:75:39:37:cb:56:89:ab:d2:54:20:
56:2f:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net