Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa
File: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (raw, json)
Hash identifier: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=
Subject key identifier: 78:2F:C3:A8:12:57:50:BD:1B:67:73:46:06:E1:FD:CE:A7:D0:1A:0E
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4F3C1557AD114F5ADB72F26D68FF
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200093
IP address blocks: 83.125.24.0/24 maxlen: 24
83.125.32.0/22 maxlen: 22
83.125.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4f:3c:15:57:ad:11:4f:5a:db:72:f2:6d:68:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=782fc3a8125750bd1b67734606e1fdcea7d01a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:8d:0d:9b:e0:c4:3f:ab:88:e5:a9:b2:37:
9c:1c:b9:fb:69:2d:f8:2c:6b:24:d1:0f:b8:74:ed:
03:d5:a7:b5:4d:c1:f4:97:14:15:ec:be:1a:0d:9a:
1b:bb:05:af:d7:6a:b4:e8:6f:d3:cd:39:c4:89:68:
52:57:4b:61:91:93:f1:95:75:c0:a7:86:1f:c6:28:
d5:4d:3c:51:07:2f:b7:37:1b:bb:d1:34:23:6c:6d:
9e:db:90:d7:32:6f:60:ce:7e:2a:14:c5:08:fd:5e:
df:e3:2c:10:ec:04:05:ca:79:49:2a:5d:be:d9:76:
66:37:e3:2c:0b:1d:a4:80:08:23:a1:fc:d2:22:ea:
5c:62:fe:4d:fc:39:8b:84:6b:0a:dd:74:15:6e:6e:
95:65:39:49:c1:af:05:c6:f5:eb:11:15:23:08:42:
a6:4c:53:36:b1:e6:a3:fe:af:44:4e:f0:b0:24:ae:
65:cc:be:8c:13:73:b5:82:f8:20:b7:39:6c:e0:21:
7f:be:50:12:4e:a2:51:e3:5c:dd:86:a4:30:93:c8:
9d:e0:d8:fc:1b:ca:19:ac:78:3f:83:41:ee:14:9d:
6a:4a:31:31:e6:dd:c8:ee:10:4b:3f:dc:15:46:f2:
13:4a:98:f2:93:bd:1c:4a:a7:2d:d3:24:95:a7:06:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:C3:A8:12:57:50:BD:1B:67:73:46:06:E1:FD:CE:A7:D0:1A:0E
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.24.0/24
83.125.32.0/22
83.125.118.0/23
Signature Algorithm: sha256WithRSAEncryption
11:91:7b:94:9b:cf:b3:3b:29:fb:d2:3e:4a:3c:80:35:d2:f4:
f5:98:a6:1a:00:6a:9d:24:22:f1:9d:b4:0b:85:36:bd:ad:d6:
15:d5:c3:96:9c:b2:da:b6:74:2c:d4:60:09:5d:c2:da:b4:b8:
3a:8e:36:a2:11:d4:1f:16:8e:42:5f:c3:ec:a9:5e:7b:7f:c7:
73:a5:ab:35:b9:b5:0f:e5:bb:70:ec:e0:fb:e0:c1:e7:c9:27:
af:32:4e:3a:ac:4f:b6:f8:eb:04:ca:65:dc:ee:6f:7d:98:c2:
b6:d3:36:e2:27:74:e3:f1:42:4f:36:d8:88:48:cf:21:88:5d:
a0:da:76:db:fc:ff:a9:66:c1:5d:21:12:86:6b:c9:bd:c0:29:
a5:4d:bd:53:c6:ce:24:00:be:2b:cf:a1:bf:87:90:a2:d4:18:
af:2b:25:5a:67:18:72:a9:93:1c:df:11:ec:25:1b:c9:64:7d:
f1:03:28:58:b5:7b:fa:ab:26:3d:6b:9a:21:2f:8a:25:d6:b0:
2c:f9:94:86:95:8a:69:ef:9f:39:f8:90:a0:d8:0a:3c:76:eb:
c3:f9:7e:fb:23:69:f7:c0:25:04:44:4c:12:e1:a7:70:01:96:
94:c3:a3:4a:6f:d8:1b:66:f8:47:ad:9e:a9:87:aa:d2:fd:00:
0b:21:84:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:50:45 2025 by rpki-client