Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/3-CNHKGdJXMpTXntAh-s3qj--cM.roa
File: 3-CNHKGdJXMpTXntAh-s3qj--cM.roa (raw, json)
Hash identifier: 2BpPHYt1k/l10pBcIexz0ktK+xFvs5F87gVofFcEgls=
Subject key identifier: DF:E0:8D:1C:A1:9D:25:73:29:4D:79:ED:02:1F:AC:DE:A8:FE:F9:C3
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 0195A96BCFBDE1C705ACEE8536EB1C14AD02
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/3-CNHKGdJXMpTXntAh-s3qj--cM.roa
Signing time: Tue 18 Mar 2025 13:22:49 +0000
ROA not before: Tue 18 Mar 2025 13:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48579
IP address blocks: 88.80.8.0/22 maxlen: 24
88.80.12.0/22 maxlen: 24
91.197.40.0/22 maxlen: 24
185.24.132.0/22 maxlen: 24
185.141.30.0/23 maxlen: 24
212.237.144.0/22 maxlen: 24
212.237.148.0/22 maxlen: 24
217.61.244.0/22 maxlen: 24
2a07:2180::/32 maxlen: 48
2a07:2182::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:6b:cf:bd:e1:c7:05:ac:ee:85:36:eb:1c:14:ad:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Mar 18 13:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe08d1ca19d2573294d79ed021facdea8fef9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:a5:90:ad:4f:24:ed:63:4d:f6:ad:22:6f:
36:c7:2d:76:81:74:00:ae:90:56:97:d1:da:ca:57:
98:3b:1c:5c:ea:89:54:70:c9:72:48:0d:fb:de:90:
13:57:7a:db:24:de:27:af:d7:c4:a0:89:05:7b:ea:
ae:a4:fb:57:ed:f3:39:4b:7b:7c:eb:0e:f0:f6:e4:
2d:b5:9c:45:b6:3f:d0:09:89:88:ae:8b:33:d8:18:
9f:5d:cc:a7:09:0e:fc:20:0e:cd:d0:e7:2a:85:70:
47:7d:51:d3:d9:40:c7:7f:ee:17:67:7f:b4:29:ee:
31:4f:60:9b:f6:c1:5e:7b:df:0b:b6:fc:19:d5:8f:
6c:82:f9:ee:58:ce:cd:0d:1c:ae:a3:93:6f:9e:24:
af:96:53:c1:cb:a0:7d:91:4c:57:e6:25:64:76:b5:
ac:17:f4:7b:72:4a:60:d0:f3:dd:84:77:0d:f8:fc:
4f:83:53:5f:f0:c7:05:57:64:49:27:f4:b0:ef:f9:
33:0e:09:87:9f:fd:10:0a:42:0c:8b:80:18:1d:e3:
0f:e0:86:29:b1:e9:09:f6:4c:69:4a:89:cf:c0:f2:
46:0f:2a:62:3f:da:0c:bb:78:37:98:84:18:da:ab:
ed:4b:d6:fb:25:41:95:8d:35:ff:ba:4f:be:48:ad:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E0:8D:1C:A1:9D:25:73:29:4D:79:ED:02:1F:AC:DE:A8:FE:F9:C3
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/3-CNHKGdJXMpTXntAh-s3qj--cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.8.0/21
91.197.40.0/22
185.24.132.0/22
185.141.30.0/23
212.237.144.0/21
217.61.244.0/22
IPv6:
2a07:2180::/32
2a07:2182::/32
Signature Algorithm: sha256WithRSAEncryption
5b:cd:dc:8a:f7:08:9a:09:d5:62:a8:f7:8e:c0:8f:a9:69:d3:
27:f4:ef:5e:d9:2b:10:6f:c6:85:60:ce:d1:72:5a:5d:24:1b:
f0:c7:5e:81:9f:a6:2e:ba:3d:27:5f:88:3c:22:5b:08:79:57:
97:6b:e8:ea:71:e0:3b:85:1c:81:f5:49:c1:31:5d:99:1f:08:
a6:31:26:dd:97:6f:c8:b1:10:f1:db:ec:20:19:b4:56:e6:73:
6e:76:f9:8f:8a:27:7b:c5:da:51:03:85:11:da:89:a4:c8:3e:
bf:97:5a:c9:31:65:ab:03:8c:dc:22:4b:4a:13:9f:8d:3b:99:
05:ec:e6:03:3d:7e:eb:24:69:33:6c:6e:fa:cd:48:38:7b:bb:
b6:85:88:2a:7e:8f:44:d5:de:dc:1b:e9:d5:95:15:90:2d:45:
85:3a:d0:5e:df:55:c3:a9:17:33:53:d9:a2:e9:59:ba:e3:4a:
15:d4:88:a4:eb:27:40:3f:30:8a:41:fc:64:47:03:1e:b5:3d:
35:df:75:e8:5b:95:60:0b:4c:72:f2:37:39:68:18:38:d8:c8:
a2:4e:32:cf:1f:53:3f:77:06:79:a0:0f:8d:3a:72:08:c1:79:
47:ca:d1:c7:fc:82:5b:0a:26:75:6b:78:f7:28:ea:47:da:30:
44:dd:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net