Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3aVRP7JWmlQeS6GMnwExznrGXvk.roa
File: 3aVRP7JWmlQeS6GMnwExznrGXvk.roa (raw, json)
Hash identifier: iw4httKjY4KjzYFx4fJCKYqI36dyq/lGMEi+lqn8nD8=
Subject key identifier: DD:A5:51:3F:B2:56:9A:54:1E:4B:A1:8C:9F:01:31:CE:7A:C6:5E:F9
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77947CA10C2E268FD493851F3A007
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3aVRP7JWmlQeS6GMnwExznrGXvk.roa
Signing time: Wed 01 Jan 2025 21:48:31 +0000
ROA not before: Wed 01 Jan 2025 21:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12443
IP address blocks: 213.175.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:79:47:ca:10:c2:e2:68:fd:49:38:51:f3:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dda5513fb2569a541e4ba18c9f0131ce7ac65ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:97:91:b8:04:b9:9d:b0:4e:9c:5a:2f:3d:
23:5f:ca:bb:d0:7f:11:ff:df:6b:49:fe:df:9a:2e:
94:fe:33:59:43:9f:2a:88:7e:1d:7e:93:63:b6:ed:
b1:68:f5:59:06:14:1f:a6:6f:1c:23:62:59:4e:02:
59:2d:cd:fe:6f:30:49:13:9f:3b:b9:ae:00:f0:a5:
86:fc:d1:97:ef:07:34:e4:a1:ec:aa:73:a0:05:99:
6a:f6:58:af:f3:c6:1f:68:be:59:c4:36:fb:b4:86:
19:35:77:e1:b4:82:e8:f0:fc:f1:02:18:c1:3c:b9:
d8:b4:51:e8:da:d4:7a:54:b7:d1:6f:08:f6:b4:6b:
ff:85:d0:e5:ab:21:87:61:a7:15:98:a2:c4:54:de:
33:e6:7f:44:30:30:e7:17:63:bc:07:d8:27:a0:7b:
b7:62:81:5a:78:e1:ea:7c:4d:76:1c:ed:3c:16:6c:
03:e6:53:1a:08:f2:3b:d0:9f:1e:64:90:99:95:52:
58:7c:87:48:d5:f4:07:92:06:44:bb:4e:3e:53:3b:
69:c0:65:03:64:62:90:11:d1:d3:a5:f2:bb:58:fc:
f2:b8:54:6e:0e:e7:0a:f6:6f:36:07:0d:be:74:94:
f4:0e:10:f9:fa:7e:2e:f1:b6:0c:35:7f:6b:ce:16:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:51:3F:B2:56:9A:54:1E:4B:A1:8C:9F:01:31:CE:7A:C6:5E:F9
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/3aVRP7JWmlQeS6GMnwExznrGXvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:e0:c4:37:50:44:63:5c:c0:77:c6:5d:f5:d0:5c:08:7a:06:
a5:57:88:26:f8:66:e6:87:24:41:69:f7:d3:34:14:9f:3d:7c:
50:74:ce:5a:ad:04:b0:98:90:52:41:34:1e:81:b7:cd:e8:a3:
e4:91:cc:b3:24:eb:b5:80:e8:c2:6b:01:77:2f:5d:9b:3e:34:
ca:6d:c0:9a:ea:7d:86:a3:18:b9:a8:ec:fc:d7:a2:df:41:c6:
e7:1d:f3:08:3c:25:35:f8:2f:15:a6:91:2d:05:20:04:fa:60:
95:15:54:96:20:2a:8f:2a:3b:4e:b7:67:6e:9a:44:16:a1:c7:
ae:23:77:5c:fe:47:0e:62:88:74:f3:36:e9:12:e0:44:f7:a2:
00:0c:06:3b:23:07:ff:58:44:c5:c6:da:d7:f1:27:63:1b:84:
9c:27:90:83:29:b3:11:b8:26:1e:34:7a:35:6f:e7:59:41:d1:
d0:d0:bc:96:03:cc:b3:67:00:40:8a:62:35:e3:2e:e1:2f:94:
79:52:69:ce:f2:31:ff:84:fc:89:47:dd:44:08:23:33:00:72:
0b:be:83:89:e5:b2:f4:39:25:82:e8:4b:ce:2d:09:86:f7:39:
95:aa:ff:47:05:6b:d5:23:36:92:6c:f3:ca:71:95:e6:c2:c0:
3d:86:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net