Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/2TfNHNiJHhb_HvlzugUjA_z4wq0.roa
File: 2TfNHNiJHhb_HvlzugUjA_z4wq0.roa (raw, json)
Hash identifier: C15fQpvQD6GTqahArcvp2MVrzxD2mkIGyqxvbHsbi+A=
Subject key identifier: D9:37:CD:1C:D8:89:1E:16:FF:1E:F9:73:BA:05:23:03:FC:F8:C2:AD
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01942823294E449CECA46DDFC4D2284140A1
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/2TfNHNiJHhb_HvlzugUjA_z4wq0.roa
Signing time: Thu 02 Jan 2025 17:49:40 +0000
ROA not before: Thu 02 Jan 2025 17:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 83.136.212.0/24 maxlen: 24
83.136.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:29:4e:44:9c:ec:a4:6d:df:c4:d2:28:41:40:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 2 17:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d937cd1cd8891e16ff1ef973ba052303fcf8c2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:1d:e4:14:53:5e:bd:90:75:96:c8:1b:02:
f0:2e:44:57:af:f6:16:7d:f9:35:75:a1:b1:34:0a:
80:f5:f3:4d:83:1b:39:74:14:8d:25:47:96:4a:bf:
7f:c4:17:dc:b9:d0:57:fa:8b:fe:0e:8f:8c:06:04:
b4:b0:3c:27:c3:06:b4:a2:d6:7d:1b:b8:88:e1:8d:
aa:9f:4e:c1:e3:cb:aa:f5:15:ff:79:65:89:64:af:
68:f5:0d:1b:3c:f2:f0:2d:c2:e0:ee:75:7e:e6:df:
f5:22:27:aa:25:f6:6e:8e:85:cb:2e:7b:4c:37:1e:
cb:9a:8f:e7:3b:4f:ce:4f:54:dd:ec:f8:89:ae:63:
91:d3:24:1c:ba:a3:6f:ba:34:87:84:44:f2:e2:a7:
9f:ab:70:95:13:fb:0f:19:ed:ff:7d:5c:85:62:42:
c0:d4:f2:fd:63:fb:77:aa:c0:0a:88:bb:53:84:c6:
ef:54:15:fe:09:eb:79:dc:39:8b:05:4a:9e:36:d2:
77:2f:2f:cc:8f:5b:15:e8:86:ff:99:d6:5c:45:d5:
03:f4:66:df:83:14:ce:6b:12:3c:4e:e7:ef:3f:eb:
d2:42:45:82:be:00:82:2e:18:c8:03:ce:0b:00:1c:
3f:9b:50:30:9a:51:33:03:77:31:cc:aa:d0:8a:c6:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:37:CD:1C:D8:89:1E:16:FF:1E:F9:73:BA:05:23:03:FC:F8:C2:AD
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/2TfNHNiJHhb_HvlzugUjA_z4wq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/24
83.136.214.0/23
Signature Algorithm: sha256WithRSAEncryption
26:f2:22:30:e5:e2:5a:82:0d:06:c3:fd:7e:b0:92:6c:10:a6:
78:60:5a:52:f2:2e:9c:cd:62:dd:5f:78:f8:9c:1e:59:d3:11:
4d:70:e5:b4:a0:4f:8e:86:30:1c:4b:fd:0e:25:e4:3a:69:27:
90:38:a8:44:b5:91:13:fe:4c:40:d1:76:db:f1:cd:df:e0:f8:
23:fa:66:65:7e:89:ed:d1:56:d2:49:f7:3d:69:d5:96:52:71:
d1:98:38:9f:bb:80:7f:96:c0:0a:8c:42:ba:5c:5b:9c:c6:59:
23:50:73:73:01:4d:57:d9:86:9d:10:eb:7e:9b:01:49:02:fc:
2b:14:39:a4:5a:f4:b2:57:f6:2d:4f:41:a8:c1:0e:82:d2:da:
3f:56:f9:6f:f4:65:c5:65:f2:49:4b:7a:b9:04:33:ca:19:28:
7d:8c:6e:0c:25:cb:e0:5f:2f:c6:37:f6:90:2c:d9:42:59:05:
bf:74:32:cc:97:0a:db:49:fb:d1:a0:bd:f9:f9:50:5e:dc:e6:
60:38:0b:11:44:60:4d:c5:88:71:83:12:72:d8:a4:89:3e:89:
94:28:8c:80:f4:62:25:60:63:a5:97:bb:bf:dc:e4:83:14:1d:
9d:1b:26:33:48:b9:01:2d:89:c9:2a:78:62:71:b9:4c:18:62:
22:e7:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:42 2025 by rpki-client