Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/_DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa
File: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (raw, json)
Hash identifier: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=
Subject key identifier: FC:3C:13:AC:9E:91:8F:53:D0:3D:0D:C4:67:B6:7F:34:79:A8:2B:CD
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019424B3CD9548C714F0328AD1F22EDE8A81
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/_DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 188.213.84.0/23 maxlen: 24
2a11:e687::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cd:95:48:c7:14:f0:32:8a:d1:f2:2e:de:8a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc3c13ac9e918f53d03d0dc467b67f3479a82bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:43:30:f3:98:8f:6d:8e:87:a7:da:a2:2a:
16:15:29:17:d8:a9:62:e1:43:7d:b1:0c:6a:ce:22:
a9:43:5a:6c:f9:33:76:5a:4b:98:51:fe:2b:04:28:
86:2c:9d:a9:8b:1a:23:5e:99:09:9c:4d:0b:29:bc:
e7:db:15:02:41:cd:14:a7:63:52:c1:fa:6e:5c:60:
e7:b1:71:de:8b:59:38:21:a1:ec:df:7f:47:8a:5c:
67:22:b0:9e:35:33:5b:04:db:29:1b:75:80:45:8a:
84:29:53:5f:b6:92:68:16:29:f1:f5:50:e0:19:a6:
b3:84:f5:9b:76:94:f1:a1:5d:2d:6c:3a:21:9a:0e:
95:74:f3:27:41:0f:d1:63:e3:42:a0:d8:93:04:4b:
c0:82:1e:b7:40:44:a2:88:04:e4:a1:22:dd:4a:e0:
0e:bf:7a:30:99:d3:12:12:48:b9:63:2a:6c:4c:cc:
de:09:f8:2c:b2:d7:a3:5a:44:c7:93:c1:9c:35:a5:
be:90:d9:59:07:c6:26:5e:82:9d:72:19:c6:ba:b1:
23:e1:34:e9:71:2c:2c:31:a4:3c:6f:e4:f9:7f:27:
32:e6:f9:cd:a3:c5:2f:fd:6e:ac:08:dd:c2:f1:9f:
03:42:0e:6c:0c:dc:28:27:24:d8:b2:1b:d4:6a:3b:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:13:AC:9E:91:8F:53:D0:3D:0D:C4:67:B6:7F:34:79:A8:2B:CD
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/_DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.84.0/23
IPv6:
2a11:e687::/32
Signature Algorithm: sha256WithRSAEncryption
06:13:b6:52:1b:48:13:e8:da:8a:b4:c0:54:7f:7c:98:75:3d:
a1:fe:44:a5:7e:64:34:7a:42:d6:57:a2:33:df:17:05:4b:89:
55:cc:b8:fc:82:59:2a:43:f0:83:f4:12:c3:c8:ce:89:11:2c:
b5:e5:be:9c:5b:5e:79:cf:e5:42:26:0b:bd:9b:1a:8b:83:ee:
64:b6:92:2e:2b:5d:f1:50:ab:6f:06:b6:12:cb:16:60:a3:1e:
11:7f:ff:1e:f2:34:c3:34:18:ae:2f:3d:16:87:a7:13:01:01:
b3:19:1e:35:92:87:47:c1:3f:cd:c2:57:cf:dc:96:90:f7:66:
fd:8c:62:ff:3b:20:4d:85:4b:ce:ec:e5:61:9b:00:86:78:00:
e2:1c:33:e9:41:04:25:1b:37:de:86:02:92:07:22:59:d9:9d:
c3:da:b4:96:1a:ab:0c:19:8a:38:8c:18:2b:ff:16:65:ef:37:
7b:5e:3d:9b:76:88:0e:fb:be:72:a1:2f:c2:c5:aa:12:b3:17:
43:e1:2a:80:6a:9d:fa:b6:ed:10:1c:01:2f:23:82:bf:24:9e:
3b:7b:5c:95:2d:cb:d9:45:68:0f:33:5c:50:2a:fb:ff:db:57:
5c:97:e8:6b:ec:17:c1:58:84:27:9e:24:bb:10:93:bb:45:b3:
f2:4b:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:02:14 2025 by rpki-client