Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/aavUCeaqGsuo5nwd-mihXXwQfiI.roa
File: aavUCeaqGsuo5nwd-mihXXwQfiI.roa (raw, json)
Hash identifier: OxgGdErcFeJc0UOAsG6nZs2JDUonjF0ySqzr57PwuHk=
Subject key identifier: 69:AB:D4:09:E6:AA:1A:CB:A8:E6:7C:1D:FA:68:A1:5D:7C:10:7E:22
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 019425203DFC6D41CA946020BFD97138216B
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/aavUCeaqGsuo5nwd-mihXXwQfiI.roa
Signing time: Thu 02 Jan 2025 03:47:37 +0000
ROA not before: Thu 02 Jan 2025 03:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20574
IP address blocks: 178.21.80.0/21 maxlen: 21
185.119.100.0/22 maxlen: 22
193.108.42.0/23 maxlen: 23
2a03:900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:3d:fc:6d:41:ca:94:60:20:bf:d9:71:38:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Jan 2 03:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69abd409e6aa1acba8e67c1dfa68a15d7c107e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:4e:30:5c:ee:ba:b1:8a:19:bb:a5:50:0d:
29:dd:7b:d2:68:fc:85:46:57:3d:84:d9:f0:1d:b6:
c1:63:cb:a7:b0:c8:17:02:25:95:fc:4e:b2:7e:96:
e3:2e:56:6b:27:68:44:a3:b5:e5:11:a7:db:73:4e:
fe:05:17:74:ea:d3:85:4b:6f:fd:a5:f0:d9:59:46:
bc:2e:63:d5:e3:8d:ab:14:91:19:e3:89:6a:38:18:
19:62:2d:79:21:2b:66:f4:77:81:38:33:ba:db:69:
24:df:7b:18:ea:3f:8c:e5:97:e3:2c:f8:74:40:4b:
8f:18:d3:87:12:b4:69:48:11:a9:70:dd:f4:6e:2b:
e4:95:ae:3a:fc:e2:3e:2e:a5:1d:67:14:c9:0e:35:
63:c2:ae:75:ba:ce:aa:1b:64:9d:f9:ce:d3:50:2c:
3b:a0:12:ac:75:4b:25:19:07:e3:7f:4b:19:ba:0e:
2d:8a:ff:a9:1b:99:b2:7e:7e:bd:e8:01:8b:6d:44:
3c:55:f6:9c:10:0b:3d:6e:93:13:d4:1c:f3:de:8b:
1f:d5:d1:6b:8c:ce:4d:2c:c2:41:b7:c3:01:d6:de:
f7:d9:33:d5:21:6d:ca:51:a7:fc:81:10:60:0c:80:
f5:fd:8d:a0:07:51:0a:69:99:92:6a:f4:ca:39:e0:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AB:D4:09:E6:AA:1A:CB:A8:E6:7C:1D:FA:68:A1:5D:7C:10:7E:22
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/aavUCeaqGsuo5nwd-mihXXwQfiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.80.0/21
185.119.100.0/22
193.108.42.0/23
IPv6:
2a03:900::/32
Signature Algorithm: sha256WithRSAEncryption
4d:7d:b8:f0:79:8b:3e:94:56:0b:8d:1f:0a:4e:99:f3:1e:25:
98:e2:13:75:27:71:fc:fd:74:4a:76:ee:65:75:5e:4c:52:d8:
01:fa:e2:02:49:08:dc:da:02:eb:6d:b7:a6:ad:d1:29:d9:5e:
ae:b0:48:94:fb:d9:0e:25:ef:95:9d:32:57:1d:73:38:19:8d:
03:a1:51:09:16:97:d3:bc:54:5d:6a:a3:d4:ee:d0:a9:c3:7b:
c4:ed:b7:a6:ea:0b:5f:c1:eb:de:77:68:4f:2f:ee:6a:d3:3e:
ec:5a:2c:4f:78:1d:e8:aa:45:07:64:c4:67:81:1c:ac:39:5a:
46:ac:38:7f:df:fb:12:40:3e:83:2c:82:8d:8b:e0:ab:d4:77:
58:9d:3f:85:d5:b2:6c:5b:6d:65:32:aa:20:42:a5:b0:fe:30:
0f:c5:ed:4a:71:ba:43:d0:64:90:0a:5b:96:1e:e2:91:06:1e:
3f:8d:80:eb:1e:85:22:87:8d:14:63:8b:15:4b:8d:06:b2:50:
6c:66:c3:01:a1:95:ad:5f:a0:11:8c:e5:1d:89:2a:88:a4:06:
5f:c9:95:b5:34:c5:05:c1:46:7b:ae:d0:3c:2c:fb:4e:89:66:
c6:4f:59:55:aa:af:66:9b:8c:e8:9f:8d:73:da:b3:4d:a7:d7:
71:9c:fd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net