Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa
File: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (raw, json)
Hash identifier: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=
Subject key identifier: DC:25:BC:66:B0:62:71:76:7E:DD:7A:36:AC:5C:1F:1E:D4:9E:90:0B
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 019427B53DA5ED3736369B265BBE56D5A4F9
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa
Signing time: Thu 02 Jan 2025 15:49:36 +0000
ROA not before: Thu 02 Jan 2025 15:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205111
IP address blocks: 213.244.146.0/24 maxlen: 24
217.163.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:3d:a5:ed:37:36:36:9b:26:5b:be:56:d5:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 15:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc25bc66b06271767edd7a36ac5c1f1ed49e900b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:b5:aa:98:4a:52:ea:f8:ee:0e:bc:90:5e:
db:a6:ee:5d:ad:d5:0b:99:1d:30:b2:79:a6:9d:57:
64:3c:07:16:f8:9c:78:02:10:c9:a7:54:2f:4b:77:
19:9c:7c:f1:57:c3:00:bb:1a:81:49:1a:f9:ce:45:
ca:99:36:eb:66:83:17:47:0a:5d:28:31:b7:50:b8:
ab:20:d7:d8:8e:96:cd:a5:da:55:52:ef:9d:be:41:
94:cf:5c:72:f3:b5:c5:a3:e6:a9:ff:0e:3c:bc:9b:
c2:83:4d:5a:7a:8a:bb:ff:69:73:ea:3a:d8:de:31:
1d:67:12:9a:4c:df:9e:16:ce:08:a7:f0:cd:7a:27:
4f:47:50:0c:e6:10:4e:1a:25:68:50:fa:3f:61:2a:
1f:28:77:08:2e:de:25:83:80:58:81:7a:84:8b:62:
e8:cc:59:81:8c:6c:ae:d0:35:f6:73:d3:56:61:d0:
6f:34:c0:b8:50:f6:0b:16:09:31:04:f7:df:d3:76:
a2:da:d0:a8:25:14:4a:27:4e:2d:ed:c1:d9:cd:b9:
66:ac:97:61:eb:5c:9a:fc:d6:44:44:a3:7d:f2:2c:
18:8c:f1:d1:ff:ad:db:21:91:ab:5a:d7:b3:22:9a:
62:77:ac:80:d5:2c:57:38:66:84:a0:d7:6d:fb:64:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:25:BC:66:B0:62:71:76:7E:DD:7A:36:AC:5C:1F:1E:D4:9E:90:0B
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.146.0/24
217.163.72.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1b:c2:1c:6e:18:e9:da:71:70:b8:fa:94:40:09:81:02:10:
9b:b7:41:38:7c:80:90:66:36:8b:df:50:65:88:5d:15:09:2e:
42:ef:86:0c:94:18:34:6c:6c:9f:23:bb:8a:79:02:74:95:df:
bb:34:bd:bf:ff:3a:da:6b:0e:87:0d:27:cb:26:fd:32:67:29:
73:b4:5e:16:7b:c3:ed:6f:ae:34:23:dc:23:7a:55:05:08:3b:
ae:7a:87:60:18:b5:78:df:f4:9f:33:15:b9:6f:dc:b1:51:1d:
90:fc:16:41:e7:08:eb:ef:9d:41:6b:42:ff:d4:71:f1:35:ea:
63:cd:97:19:b7:5e:02:65:a7:c4:38:85:0f:36:ac:4b:89:21:
d9:5d:d2:0f:cf:a1:d4:5a:0e:e0:9b:63:00:44:af:44:c8:9b:
e7:ab:68:e0:1f:d2:ad:ca:dd:14:b2:a6:26:b0:6f:b9:a2:49:
39:ae:a8:16:aa:61:ba:e1:9f:cc:66:86:dc:28:30:e6:db:40:
72:18:8e:c0:ab:61:92:ef:0b:72:39:73:f2:6d:39:a7:52:3b:
b5:72:e0:d4:a7:9b:48:1c:3b:c0:bc:8e:38:ef:10:73:9e:d2:
4e:e9:b0:38:69:e7:fe:ee:a4:df:82:8d:57:ab:48:d0:21:c4:
24:f5:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net