Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/X3YTVO9RvUjm8JcGIM_QOFbDRMk.roa
File: X3YTVO9RvUjm8JcGIM_QOFbDRMk.roa (raw, json)
Hash identifier: /LRq69RbEzu/WcJsMrD+uXOmPaltuM3v3f2umkTunMY=
Subject key identifier: 5F:76:13:54:EF:51:BD:48:E6:F0:97:06:20:CF:D0:38:56:C3:44:C9
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0194266BF04FFF572F7423CC4FCE74761684
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/X3YTVO9RvUjm8JcGIM_QOFbDRMk.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212263
IP address blocks: 83.167.184.0/22 maxlen: 22
185.222.21.0/24 maxlen: 24
2a10:f300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f0:4f:ff:57:2f:74:23:cc:4f:ce:74:76:16:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f761354ef51bd48e6f0970620cfd03856c344c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:d3:98:3b:33:e8:9e:32:77:c7:40:f4:b5:
55:a2:39:07:6e:7e:ea:ae:6a:b7:b8:17:2c:3f:09:
2d:4c:77:52:33:c3:48:af:ad:60:68:e3:73:fb:38:
d5:50:af:62:92:1d:07:32:07:5d:13:28:99:23:31:
5d:e4:62:84:54:00:88:e0:9e:b8:e5:fd:15:74:4e:
d2:f6:69:2a:22:d5:9f:6e:1e:e7:f0:94:19:a6:09:
55:10:59:dd:92:0f:5d:38:20:7e:12:e2:8e:65:3b:
2d:5f:1d:39:72:75:4d:dc:97:87:6e:b2:f8:e6:5d:
e1:de:0d:ef:54:e7:ce:b8:8d:7f:b6:12:65:cb:69:
8b:35:1e:a1:5d:8a:08:03:e9:62:03:12:6f:09:d3:
09:99:79:ae:dd:8c:1f:17:f9:27:6c:79:77:d4:a9:
97:54:c6:55:92:53:8d:13:6d:fa:9a:0f:58:5f:68:
6f:4a:0e:bf:ed:96:2a:85:3a:3f:75:ea:51:0b:17:
fb:ec:9c:b3:4d:cd:96:9c:14:ab:ab:6d:2d:cc:33:
f0:e4:98:28:70:50:46:b1:1c:6a:e7:9d:f5:88:dd:
dd:51:c5:9e:0f:dc:cc:3f:b1:b8:25:fc:ab:d7:11:
8f:ed:5b:ce:2f:69:c6:a9:27:ae:90:f8:39:7f:69:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:76:13:54:EF:51:BD:48:E6:F0:97:06:20:CF:D0:38:56:C3:44:C9
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/X3YTVO9RvUjm8JcGIM_QOFbDRMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.184.0/22
185.222.21.0/24
IPv6:
2a10:f300::/29
Signature Algorithm: sha256WithRSAEncryption
75:32:7f:04:89:99:80:1c:06:f5:f5:13:dc:2e:d4:33:7d:87:
04:0e:db:a5:13:31:78:b1:fc:0f:bb:97:58:42:28:e2:de:04:
be:c2:3b:d7:a8:5b:13:5b:cb:71:71:2c:b6:ea:ec:75:32:1e:
8f:62:12:64:e9:2e:a2:29:62:53:b0:4f:ed:c3:a8:68:48:8e:
cb:50:7e:47:fd:5d:2a:f0:15:e0:cc:1f:3d:4c:6e:59:c1:f4:
62:df:2a:7c:8b:1e:d9:02:db:ff:28:93:b4:69:a9:c2:fa:13:
1f:6a:e8:b9:00:42:56:31:c1:50:14:90:eb:c8:3b:56:ba:21:
6a:19:70:73:9e:3c:0a:0c:c5:32:a7:82:cd:89:37:ab:d4:b1:
02:c0:e3:5e:52:b3:c4:81:9e:a4:30:e9:a0:3a:b0:2d:83:dc:
d7:57:8d:95:b4:14:93:98:b0:65:fb:4f:50:d1:58:d0:7a:ef:
18:ea:bf:49:64:b2:84:b9:ce:41:ec:33:af:ed:ed:c6:28:1e:
b6:44:3d:4e:e2:29:01:04:26:83:ec:0b:05:89:bb:86:f5:80:
a6:35:4b:25:48:04:25:65:5b:f0:30:f7:25:a9:5f:cd:4b:da:
e3:44:0b:4f:36:98:c6:d5:8b:fa:41:27:ec:84:7a:29:f4:75:
62:e9:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:42:34 2025 by rpki-client