Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/82RnvdgDzrlh9PpN27KyeUoeB2E.roa
File: 82RnvdgDzrlh9PpN27KyeUoeB2E.roa (raw, json)
Hash identifier: tchQPb8o/hCW6+vSrUYPlL3smW02r8s7VQYn1nid3bs=
Subject key identifier: F3:64:67:BD:D8:03:CE:B9:61:F4:FA:4D:DB:B2:B2:79:4A:1E:07:61
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824EC44F340355665335F143C09B297
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/82RnvdgDzrlh9PpN27KyeUoeB2E.roa
Signing time: Thu 02 Jan 2025 17:51:35 +0000
ROA not before: Thu 02 Jan 2025 17:51:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 192.124.183.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ec:44:f3:40:35:56:65:33:5f:14:3c:09:b2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f36467bdd803ceb961f4fa4ddbb2b2794a1e0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:88:6a:45:bc:1f:07:ea:bc:0f:98:8f:65:
61:fd:a3:13:3f:fb:27:fd:4a:e1:1d:e3:bd:a6:95:
56:5c:9d:41:c6:5f:b7:fc:11:27:27:a2:c0:b1:d9:
f6:55:5d:3b:93:cb:6d:17:3a:b8:db:40:77:2d:c2:
cb:07:61:27:51:21:7b:08:d5:ab:ad:9c:0f:03:26:
d8:7a:d0:4c:61:16:0f:5f:47:b1:a2:29:6a:01:0f:
0e:ca:cd:0a:8f:b8:3d:50:c8:da:22:2f:ed:b6:a3:
14:dc:23:e0:29:68:a0:fa:f0:2b:84:16:aa:b1:b7:
f8:fa:8e:de:f6:c2:c1:06:a3:bb:7a:88:58:9f:39:
fd:39:e6:39:28:02:47:cb:92:31:98:83:0a:e2:9d:
2a:9f:8f:50:2e:24:bd:b3:96:b0:3f:2b:98:07:6c:
ae:64:cb:80:0d:7f:b2:8f:85:32:d7:01:aa:d0:5f:
7e:ad:b5:f4:24:10:b2:ba:ec:a6:5e:80:8a:24:83:
ee:f9:73:65:20:1e:52:43:7d:19:ba:3d:5c:51:39:
a9:48:41:a4:34:b6:13:a3:f5:d8:9f:d6:aa:1e:38:
93:36:c6:c1:39:45:ad:5f:e0:e4:5f:92:4c:67:e9:
d3:6f:13:89:58:77:fa:a6:8b:11:5e:fb:39:94:a1:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:64:67:BD:D8:03:CE:B9:61:F4:FA:4D:DB:B2:B2:79:4A:1E:07:61
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/82RnvdgDzrlh9PpN27KyeUoeB2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
195.133.56.0/23
195.133.60.0/23
Signature Algorithm: sha256WithRSAEncryption
56:41:24:b7:ff:15:36:97:bf:e5:d7:4a:e9:b8:4c:2a:25:aa:
f5:92:d7:0a:2c:fb:e5:2b:04:94:2b:89:1c:16:9f:7d:a0:84:
2d:5c:25:d6:18:0d:83:0c:a3:60:eb:a6:69:b8:74:f2:f8:bf:
34:72:c1:5f:3b:1c:5a:0a:4c:b3:12:af:95:e5:3d:06:4c:e9:
01:fe:66:42:b0:47:b7:03:26:24:a9:c2:d0:e4:7c:8a:b9:62:
06:bc:79:b1:be:c5:19:37:9a:81:3a:3a:a5:1c:a8:6b:ee:75:
c4:c7:69:39:ad:1a:a7:f8:b8:ce:73:fb:f8:4b:90:d8:e7:0f:
d6:f8:36:3c:e7:4a:b6:10:0f:e7:40:ed:68:58:51:da:fb:b4:
69:5b:c2:28:cd:de:3b:98:9a:5c:b2:0a:66:31:45:80:fd:0f:
dd:9a:fd:12:bb:8a:56:04:6e:52:06:a2:8e:a4:b6:8a:c7:19:
b0:66:d9:af:77:3c:2f:0b:fa:2f:b5:d6:ab:be:23:91:42:18:
f4:91:d6:92:e5:98:91:d8:3a:b5:2c:5b:ec:3b:b9:a4:c0:eb:
d0:f0:15:be:1e:e7:79:05:91:dc:88:1c:6f:35:98:46:38:87:
90:ea:9d:b0:b2:45:5c:92:5c:18:3a:7e:a0:d9:ff:f9:3f:02:
ef:23:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:57 2025 by rpki-client