Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/AoQYABlbiRY1s0Gu3McHV58zrpk.roa
File: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (raw, json)
Hash identifier: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=
Subject key identifier: 02:84:18:00:19:5B:89:16:35:B3:41:AE:DC:C7:07:57:9F:33:AE:99
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 0194404EE22AEB6AFA00546DC261C4006F86
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/AoQYABlbiRY1s0Gu3McHV58zrpk.roa
Signing time: Tue 07 Jan 2025 10:28:19 +0000
ROA not before: Tue 07 Jan 2025 10:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209201
IP address blocks: 83.150.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:4e:e2:2a:eb:6a:fa:00:54:6d:c2:61:c4:00:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 7 10:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02841800195b891635b341aedcc707579f33ae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:63:b3:aa:ac:b5:ab:2f:6e:1d:d7:55:aa:
81:3c:cc:5d:70:28:a5:53:f4:07:d5:e7:c7:23:8e:
ff:35:4b:54:20:da:d5:62:66:f3:a0:14:81:d5:7b:
fa:1e:d1:83:7b:30:43:11:ec:52:42:ba:55:47:33:
9e:ef:35:0e:e2:ae:5b:4f:21:57:16:d5:67:5d:71:
26:a8:b8:30:37:d6:45:24:64:f8:8d:cf:76:8d:72:
56:91:41:50:1a:f9:fc:80:62:b8:e9:24:e9:05:07:
ea:1b:b3:7e:31:3c:c5:f7:00:ef:21:7a:31:ad:60:
6f:3e:14:ab:8e:0e:ee:d8:ec:e9:15:22:91:b4:c0:
fa:e4:f7:c5:c8:28:8b:7e:51:cb:10:d0:15:28:a9:
a5:bc:ac:d6:1f:94:26:97:10:e2:78:b9:f6:e3:c8:
ac:7f:80:eb:18:cc:22:b6:30:b4:7b:86:50:4b:17:
27:38:4f:82:45:82:60:02:cc:a2:6d:6d:e0:db:f4:
03:79:d8:a1:8e:5f:79:8b:bf:8d:2b:f9:0a:85:6f:
89:f7:c6:44:38:ed:6d:21:3f:83:a8:32:44:86:c6:
ed:43:0a:93:fe:cf:1c:2e:d9:cd:bd:dd:27:57:b8:
b2:28:9a:a4:b2:3d:4f:a8:44:81:cd:d3:e0:47:59:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:18:00:19:5B:89:16:35:B3:41:AE:DC:C7:07:57:9F:33:AE:99
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/AoQYABlbiRY1s0Gu3McHV58zrpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:14:df:36:8a:7f:93:ec:5f:b4:15:7e:44:80:ad:81:c0:e3:
42:8c:a4:40:5a:86:22:c5:51:3a:81:43:21:0e:8c:c4:ab:37:
1f:6a:29:92:14:4e:0c:d4:42:6a:d1:13:68:48:4d:2a:a5:77:
7a:f4:5c:96:dc:d7:52:3f:31:11:43:42:a4:49:95:c7:43:e6:
e7:49:cf:41:e0:6b:4c:ba:4b:6c:8f:f6:b0:13:e1:33:0c:e6:
15:d2:57:f4:a1:57:28:06:5a:e0:f3:37:3b:b8:e0:7e:7e:95:
69:71:a6:bc:9e:8e:65:31:85:e0:a9:1f:91:cb:d7:0b:55:4f:
93:ac:7d:18:52:94:60:b1:27:be:12:f7:ca:62:fe:b8:ab:30:
22:71:81:c3:a4:78:9f:c4:5d:62:69:b9:18:b4:3d:c2:c8:e4:
c0:30:4b:cb:b6:36:90:0f:7e:31:89:cf:15:d9:e6:b7:a9:3f:
ad:df:bc:6e:b7:cd:53:e0:98:14:7e:20:e5:11:59:5a:e8:4a:
ae:90:53:c3:23:93:32:47:e7:98:27:e3:4c:5f:43:53:17:0a:
b9:b7:15:56:15:b1:2e:0c:3c:d7:bd:6e:5a:84:ea:c8:d5:e4:
3d:39:c3:5e:9f:46:90:3a:f0:51:b1:bd:70:23:2b:9c:dd:05:
14:db:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:20 2025 by rpki-client