Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w33lweoorMU-BHbCCazdby0CjZc.roa
File: w33lweoorMU-BHbCCazdby0CjZc.roa (raw, json)
Hash identifier: lFsNzKkdO773LTH0Lsg55wvcIEcdhfA2xw470pRExNk=
Subject key identifier: C3:7D:E5:C1:EA:28:AC:C5:3E:04:76:C2:09:AC:DD:6F:2D:02:8D:97
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01955314CE318FB832A2B3FD93D474FCBB93
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w33lweoorMU-BHbCCazdby0CjZc.roa
Signing time: Sat 01 Mar 2025 19:00:27 +0000
ROA not before: Sat 01 Mar 2025 19:00:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 973
IP address blocks: 82.153.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:53:14:ce:31:8f:b8:32:a2:b3:fd:93:d4:74:fc:bb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 1 19:00:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c37de5c1ea28acc53e0476c209acdd6f2d028d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:8b:70:fe:a2:c7:d7:f0:ac:30:51:3c:37:
3f:7e:8e:73:a6:9a:5a:9b:ee:45:fa:2c:3a:a0:2f:
5d:27:16:4e:6f:22:ae:96:b4:ff:9d:ae:1f:e5:0a:
6d:7f:39:9c:e8:2e:87:7f:9f:1d:e9:08:f2:cd:d3:
e2:75:64:be:67:94:f1:74:19:df:ae:5e:79:75:89:
0b:1e:2c:82:be:a8:d4:a2:c2:cc:e7:8b:b2:8c:4f:
38:11:c6:83:cc:df:45:a4:4e:a6:66:f8:fd:e9:37:
7b:25:e7:4d:cb:9a:1d:08:01:8b:db:c0:5d:0f:e3:
92:1d:fb:a8:26:e5:2c:92:34:2f:b5:0e:39:3d:cf:
18:73:c0:a7:27:dc:50:9d:63:ff:d2:17:cd:41:8c:
d3:85:e2:98:f1:84:2b:aa:26:e6:bc:70:7d:5e:bf:
00:12:cc:aa:ba:5e:42:22:5c:46:12:89:1f:74:ec:
96:c3:93:bc:6b:61:19:34:26:b4:88:f1:9a:40:3c:
64:06:59:d7:d7:a7:34:56:27:0f:70:74:d0:df:7e:
9d:04:ea:13:f3:53:92:bb:8e:b5:92:1e:9c:f6:42:
00:bb:66:cd:0e:d5:19:fc:26:43:0d:88:77:ea:11:
f8:6c:c9:e8:25:c1:65:67:d8:05:e6:7d:0c:5b:c4:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:E5:C1:EA:28:AC:C5:3E:04:76:C2:09:AC:DD:6F:2D:02:8D:97
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w33lweoorMU-BHbCCazdby0CjZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2e:40:cf:f1:ef:38:01:94:2c:a1:05:42:fe:03:27:d5:20:
af:fc:8b:44:77:3e:5c:c1:f8:ef:ef:76:62:93:e3:19:5d:ba:
9b:a4:62:0b:a3:36:d6:db:7f:46:9e:a2:96:ea:56:c3:50:ff:
12:b4:6d:78:5e:cb:f7:20:e4:e2:27:40:77:08:8a:56:35:fc:
2b:f1:c9:da:cf:74:8a:07:7a:11:07:0f:72:72:ca:12:3e:0f:
c0:5e:39:39:b3:a6:a5:3a:ac:ec:2b:ce:4b:4c:c5:b7:59:6b:
c9:1b:a5:70:9b:26:bc:fc:05:ee:5d:69:14:44:85:63:2b:42:
b9:55:73:91:35:f4:6a:19:32:38:9f:20:10:f4:d8:04:35:32:
fe:a9:b0:e6:36:fa:99:4c:4e:12:0a:87:b6:e3:ad:82:ce:c1:
4c:ed:4a:ac:15:dd:30:b0:ee:65:13:80:ba:7d:3b:61:0c:13:
04:64:52:9f:72:9e:7c:6f:37:d2:44:ba:58:fe:17:88:cb:90:
1b:02:2f:8a:50:e6:a2:0a:c8:b0:86:ca:18:ba:e0:8d:e3:74:
2d:9c:ad:b7:bb:f9:60:a5:85:e6:23:41:81:7d:af:32:4e:25:
1a:e2:04:89:f0:0e:0c:2f:7f:e5:a2:d3:79:50:ee:f3:de:3e:
a8:71:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:45:06 2025 by rpki-client