Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/3jSOaatFzz9swrZhXqD6jHzeDww.roa
File: 3jSOaatFzz9swrZhXqD6jHzeDww.roa (raw, json)
Hash identifier: tVwdSKcBd6/2MH/mbR0mS1QlYqRRE3gqHsHq5WvFQFw=
Subject key identifier: DE:34:8E:69:AB:45:CF:3F:6C:C2:B6:61:5E:A0:FA:8C:7C:DE:0F:0C
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 019515A49710A2B1B471E1CC14F81C8FA670
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/3jSOaatFzz9swrZhXqD6jHzeDww.roa
Signing time: Mon 17 Feb 2025 20:41:02 +0000
ROA not before: Mon 17 Feb 2025 20:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51115
IP address blocks: 81.161.98.0/23 maxlen: 24
178.248.232.0/21 maxlen: 24
185.65.148.0/22 maxlen: 24
185.94.108.0/22 maxlen: 24
2a03:70c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:a4:97:10:a2:b1:b4:71:e1:cc:14:f8:1c:8f:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Feb 17 20:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de348e69ab45cf3f6cc2b6615ea0fa8c7cde0f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:46:d6:59:d7:1c:4a:97:5b:e2:43:c6:23:
8c:c4:5c:2c:d7:aa:dc:f8:e9:ba:df:1d:c1:bc:ad:
76:36:ad:6d:97:a2:97:99:f7:bc:10:fe:0d:76:ab:
f8:2b:dd:30:31:75:fe:78:0b:d7:0b:d0:2a:9a:c6:
00:e7:be:82:21:13:b8:c0:2b:d4:90:3e:e0:25:00:
6b:91:76:7f:c1:4b:21:6a:9d:44:d8:95:eb:de:d0:
56:9f:da:f7:74:8f:f6:9d:ab:1d:33:fc:f0:d1:48:
3c:70:eb:04:90:7a:ca:57:0f:20:8a:33:73:d6:fa:
db:ab:a6:c0:92:2f:a0:f0:0d:03:e7:62:bd:82:4d:
f9:ed:d5:1e:de:9b:10:4f:a9:17:a9:dd:4f:2a:75:
7d:2b:a1:62:dd:e8:1f:00:99:a7:d3:9f:50:84:c7:
a7:53:71:ee:41:4e:1c:34:b7:fd:17:b4:94:e7:55:
72:89:5f:a0:9c:e5:76:1b:0c:80:74:dd:10:f1:d1:
23:e2:49:c8:61:09:91:2a:82:10:92:57:81:05:1d:
15:5b:e7:51:42:77:4d:d2:c9:b4:48:b5:e7:d8:a2:
29:90:3c:79:1c:2e:0e:8c:ac:80:ba:ad:07:6e:5d:
1a:da:0c:a6:7d:e8:06:7d:28:b6:ef:97:fb:f5:88:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:34:8E:69:AB:45:CF:3F:6C:C2:B6:61:5E:A0:FA:8C:7C:DE:0F:0C
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/3jSOaatFzz9swrZhXqD6jHzeDww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.98.0/23
178.248.232.0/21
185.65.148.0/22
185.94.108.0/22
IPv6:
2a03:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:9c:b5:62:54:11:6b:de:15:a8:5e:d6:4e:d3:cf:84:f2:ab:
d9:06:cf:d6:7e:1f:18:7a:cc:9f:23:73:7a:d3:70:a4:18:c6:
a7:af:b0:09:ab:42:95:44:51:89:a9:b8:c4:22:1c:2d:4a:3d:
b8:5f:8e:b9:cc:8b:b7:3f:55:ff:29:35:ac:44:8b:c1:64:df:
08:14:7a:ea:59:ff:d0:d7:6c:b0:bc:69:78:1e:e4:7e:89:4c:
5e:5f:49:5d:df:98:0e:bb:6f:82:b3:73:83:cc:e6:3b:c0:1a:
55:f1:81:13:4d:2f:68:08:6a:73:1d:96:9a:07:04:25:6c:6e:
a8:a9:af:01:de:17:68:67:91:6a:8d:ed:06:f4:a9:83:ab:30:
04:c5:92:66:75:a3:52:28:b6:4d:ad:5c:a4:8d:85:54:e3:b9:
4e:07:72:e5:2c:29:9d:37:dc:67:2c:8f:2c:de:a8:8a:4e:eb:
c1:5e:e5:30:24:34:45:12:e1:78:6e:87:99:86:20:0f:b0:c9:
66:cf:9c:4c:31:98:65:17:97:cc:80:67:f0:7a:fe:d2:a4:73:
48:59:20:39:41:e4:6b:07:0e:be:81:b0:a2:9f:3f:f1:0b:5f:
88:4b:f5:b2:69:7e:93:15:f8:89:b4:70:bd:d9:0b:02:9e:4e:
22:3f:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net