Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/A3cro303aEaFxdmMJmty6fmNFPA.roa
File: A3cro303aEaFxdmMJmty6fmNFPA.roa (raw, json)
Hash identifier: NsT5V4B94HNWnHLUrlDprsDYOaXhf4Qbe6uBs598XHg=
Subject key identifier: 03:77:2B:A3:7D:37:68:46:85:C5:D9:8C:26:6B:72:E9:F9:8D:14:F0
Certificate issuer: /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial: 0193C642BC23E9CC3F389061FEB1240920D4
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/A3cro303aEaFxdmMJmty6fmNFPA.roa
Signing time: Sat 14 Dec 2024 17:41:22 +0000
ROA not before: Sat 14 Dec 2024 17:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.135.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:42:bc:23:e9:cc:3f:38:90:61:fe:b1:24:09:20:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Validity
Not Before: Dec 14 17:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03772ba37d37684685c5d98c266b72e9f98d14f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:a1:89:05:72:8f:73:4e:02:3d:8c:67:39:
ac:bb:b2:a3:c7:f9:c9:d2:cc:e3:9a:c9:81:42:42:
a7:75:37:00:13:98:e5:f0:5e:2a:02:18:b3:fb:bb:
e2:b2:97:a3:15:4e:76:b6:32:be:14:91:70:26:04:
43:a1:1e:c7:9c:60:1d:89:98:49:14:34:3c:c1:5f:
dc:cf:f3:69:4e:38:d9:bd:e4:21:fc:a6:51:66:6b:
b0:87:f8:05:c1:1d:8f:0e:95:ad:36:a1:01:83:95:
fa:a6:df:96:18:2b:75:3a:7d:a8:27:b1:c1:48:33:
fd:f2:4f:40:11:2d:de:da:0f:5f:00:b6:1e:c7:cb:
58:53:d5:18:3a:50:1f:a0:f5:7a:7f:7b:e0:b2:60:
6e:42:bd:fd:7b:c4:27:f6:04:04:5f:f9:58:06:d0:
10:f6:c6:3b:98:14:be:4f:e7:4c:9c:be:6e:ea:1c:
a5:b0:77:53:35:b8:08:08:f7:3c:7e:57:70:15:31:
82:43:b5:5d:61:d1:24:85:0b:3a:43:aa:23:ec:7c:
c7:6d:d1:53:67:20:9e:2b:c1:45:07:ca:05:81:e4:
b0:7d:89:5b:9c:b1:15:08:72:d1:4d:ae:c0:e9:6a:
cb:7c:67:42:b8:52:b1:79:2a:fe:f2:0c:de:91:19:
70:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:2B:A3:7D:37:68:46:85:C5:D9:8C:26:6B:72:E9:F9:8D:14:F0
X509v3 Authority Key Identifier:
keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/A3cro303aEaFxdmMJmty6fmNFPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2d:55:0b:99:e6:99:10:b2:c1:86:e5:59:15:bf:43:56:f3:
56:87:9f:98:d0:48:4b:58:5d:c3:62:89:e4:a1:8b:9f:83:e2:
f0:5f:ed:19:0f:1c:96:60:07:c6:49:a2:12:d3:d4:3f:2c:69:
b9:b1:ba:b4:1e:cf:2d:64:81:34:e0:93:63:cf:b4:04:aa:e7:
f5:9d:c7:e7:a9:c8:c7:a8:b4:d3:3a:29:70:c3:da:26:1e:6d:
ce:ab:0a:bb:b1:7a:36:f4:b2:3b:f6:00:53:51:96:b2:46:fb:
6e:ed:1e:06:c2:b2:80:03:04:91:e9:8d:0e:af:e2:91:32:0f:
f4:bd:75:4e:0d:d7:64:8e:8d:4e:5d:9d:cc:35:b9:49:98:55:
17:32:f5:9c:b3:f9:3c:cd:0e:3d:21:9d:d2:b3:61:af:8d:d7:
62:6e:52:22:78:c8:6e:51:a3:ca:fa:69:2d:a5:af:fa:eb:e3:
6f:f6:33:24:46:94:55:43:c3:99:6e:9d:d2:a6:f8:b4:99:ce:
84:e2:6c:01:68:f4:d0:a0:cc:18:7c:f1:1b:42:a0:f3:cf:ac:
ae:b7:ce:6f:65:ee:d2:76:d1:c6:85:15:72:aa:e4:d0:6b:a0:
ee:5e:d1:21:8f:94:c1:fe:ee:61:9d:cf:f5:5a:6d:d9:4c:3e:
f0:bd:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:16:09 2025 by rpki-client