Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/1-t-clxlx4vHi76xBwGIh0Y5orug.roa
File: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (raw, json)
Hash identifier: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=
Subject key identifier: FA:DF:9C:97:19:71:E2:F1:E2:EF:AC:41:C0:62:21:D1:8E:68:AE:E8
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 0194244581B1F677F0AF5E061962A0B9AC54
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/1-t-clxlx4vHi76xBwGIh0Y5orug.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 83.150.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:81:b1:f6:77:f0:af:5e:06:19:62:a0:b9:ac:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fadf9c971971e2f1e2efac41c06221d18e68aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:ce:3c:17:e1:9c:83:b7:59:ef:4c:50:fd:
69:e0:fd:fb:a9:a6:46:10:50:8f:ef:84:92:a7:36:
f5:1b:e1:86:53:df:fb:09:e3:d8:b2:e8:61:1a:2f:
fa:d0:8a:bd:0b:23:6d:a4:88:88:36:b2:ab:59:43:
1a:29:cb:0f:8c:e3:7c:77:53:36:c2:b2:f8:21:db:
01:96:db:b4:ab:0a:37:e3:dc:a7:ca:31:3e:ff:9d:
ae:43:3b:94:1a:3c:61:b6:62:1f:f3:e7:c9:23:5e:
36:2b:41:33:71:cb:df:6d:ab:e0:cc:74:46:f0:e8:
89:0b:67:35:09:91:a4:cb:15:11:fe:f9:e9:22:19:
39:70:bb:f8:9d:84:57:77:d3:72:26:43:e0:57:05:
05:e0:81:c9:ba:03:3e:8a:a7:cc:c2:7c:dc:2b:9a:
6e:74:f4:98:6d:90:f4:9e:21:ca:47:a5:10:c0:6d:
aa:02:93:76:32:76:4c:a2:b8:2c:50:e0:8d:96:c8:
b8:bc:6c:9e:6d:1f:d4:3e:84:b0:06:6e:f1:65:12:
1f:4a:ae:a8:c7:32:4a:73:cb:43:29:c9:3c:41:93:
f8:44:27:e7:a8:d1:a8:7d:03:15:c8:35:f8:58:bb:
2b:8c:6b:44:d2:4d:ca:25:d9:22:a4:34:12:04:fa:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DF:9C:97:19:71:E2:F1:E2:EF:AC:41:C0:62:21:D1:8E:68:AE:E8
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/1-t-clxlx4vHi76xBwGIh0Y5orug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.236.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2d:75:95:22:42:af:29:36:f1:4a:ab:d4:30:58:a6:20:9c:
53:5c:80:44:d6:55:c3:7d:60:ba:8d:fd:2e:8d:37:85:ac:eb:
c2:7f:a6:2a:fc:cd:73:34:38:cb:31:f1:2f:29:0c:3d:3c:87:
5b:3f:29:61:b2:cd:63:d1:d0:ba:db:06:04:40:c1:20:6d:e7:
f8:f5:70:e6:20:41:ca:a9:b5:c0:8e:03:0c:db:d7:7f:e8:5b:
a4:f6:c9:96:b9:18:56:8c:e6:be:f1:c9:c9:8e:77:a5:1d:d8:
c0:9b:0a:26:25:69:4c:cb:3f:4f:87:c8:2b:e1:3c:a7:07:2c:
7f:68:3f:4b:77:00:31:47:5d:e1:81:8a:e8:78:c6:93:d0:a9:
d6:ff:14:bf:c0:e1:4e:b4:13:04:9e:ad:7f:83:40:5e:19:68:
60:9c:5a:df:76:4c:40:e3:e8:77:ce:d7:bc:0c:bb:d2:7f:ac:
df:bd:78:13:7b:09:6a:92:21:f9:6b:cb:91:8c:03:fb:04:b2:
07:f7:f6:4c:77:ab:7c:7b:15:af:59:25:b1:41:c1:b2:28:35:
cf:6c:1f:9d:53:c3:cd:f5:6b:93:58:da:4b:f2:5a:6d:8c:4d:
ad:df:b9:b2:b8:07:11:93:ea:ce:15:c0:73:8f:75:7f:65:43:
a2:bc:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:21 2025 by rpki-client