Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/n_oUnGPv_hh030LVtPBE8xyMcwc.roa
File: n_oUnGPv_hh030LVtPBE8xyMcwc.roa (raw, json)
Hash identifier: phabFIQirzsP7oEsbtt+R6gVWhC7HwlYDMHHDPuNsvA=
Subject key identifier: 9F:FA:14:9C:63:EF:FE:18:74:DF:42:D5:B4:F0:44:F3:1C:8C:73:07
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0194AC0576043361AB9D04BAB5D08929712B
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/n_oUnGPv_hh030LVtPBE8xyMcwc.roa
Signing time: Tue 28 Jan 2025 08:27:06 +0000
ROA not before: Tue 28 Jan 2025 08:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.136.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:05:76:04:33:61:ab:9d:04:ba:b5:d0:89:29:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 28 08:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ffa149c63effe1874df42d5b4f044f31c8c7307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:55:0d:1a:2b:c9:23:7f:23:68:03:b4:cc:
1c:a2:18:97:b4:4c:f4:c3:6c:61:7c:d0:ba:ba:27:
33:92:77:a4:39:78:94:e2:20:61:20:77:fb:09:7a:
22:a4:7c:ec:68:23:cf:56:d4:d8:f5:61:fe:07:f6:
8a:d6:6c:ab:dd:38:70:fc:ce:a7:34:a1:2a:57:92:
c1:5c:e4:59:35:cc:4b:6b:12:56:dc:f4:51:ee:8b:
50:ee:e4:fe:b6:da:2b:7e:ef:ea:9f:d1:2a:64:9a:
f4:6b:23:02:c0:e8:7b:b1:e3:d8:98:10:53:20:61:
b5:c8:75:5a:2a:dd:3d:28:f9:8f:e5:a7:a3:23:bd:
a9:f4:0b:51:c5:37:1b:56:e6:50:eb:49:ea:67:dd:
4f:16:0e:a1:2b:c1:76:20:07:29:f1:0f:45:74:7b:
38:26:b8:88:cc:90:a1:a5:5e:6f:38:80:9b:1b:fd:
95:1f:30:b8:ce:13:35:65:22:98:01:f5:fd:a3:92:
76:df:a3:e6:ce:5b:e3:24:c6:ec:11:6f:3b:14:f1:
03:1b:fe:3f:eb:06:cd:c7:12:46:2f:e1:df:50:19:
1a:72:1f:c6:e5:44:12:94:80:6e:24:d1:de:5f:37:
e2:ca:06:27:16:40:9d:84:00:77:75:7e:3b:49:e7:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:14:9C:63:EF:FE:18:74:DF:42:D5:B4:F0:44:F3:1C:8C:73:07
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/n_oUnGPv_hh030LVtPBE8xyMcwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:51:cb:39:12:54:10:27:57:01:d4:84:8c:13:9d:e0:c6:22:
7b:68:91:68:95:c2:9c:b7:b0:19:6f:a1:05:0a:1d:6d:20:22:
07:40:4b:c3:f9:8c:6b:52:b1:8f:bf:4f:a4:c0:41:ff:9e:87:
12:4f:c4:7a:0c:c0:5b:07:41:9a:d2:03:90:63:a5:d6:16:bd:
b1:e0:93:01:46:a7:b1:bd:cb:96:be:4f:04:ed:58:cf:ea:34:
58:26:f4:b3:32:a2:36:46:fe:3c:62:dc:ff:fb:a0:33:01:6f:
d9:ef:73:f3:f2:37:e6:a0:6e:11:74:cc:5b:67:2c:42:d3:32:
71:0b:5d:47:d7:8e:23:f8:db:8a:6b:f5:b7:e3:7f:4f:55:8a:
29:d6:3e:40:f8:8c:01:42:30:f5:15:8f:63:6c:e5:0d:55:a9:
6b:67:07:d1:9c:d9:7d:b8:d3:45:1f:54:c5:09:1a:55:65:8d:
f4:00:2e:26:b4:dc:04:51:38:e3:6e:ef:0d:cf:06:7f:6e:5d:
f8:81:cf:0c:df:ce:4b:6e:9c:56:39:d6:79:00:f2:cb:85:40:
d9:4f:94:2e:15:e2:bd:61:9f:da:06:4a:90:2f:50:f2:1b:2a:
e2:dc:d6:d5:7f:5a:12:97:0e:c0:3f:5f:36:af:09:d9:d4:ed:
43:83:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:34:58 2025 by rpki-client