Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/C3GOPDMyPcTACLSR4lnMvrSZtEU.roa
File: C3GOPDMyPcTACLSR4lnMvrSZtEU.roa (raw, json)
Hash identifier: u4H3HfcAKGgVnxJNRptkVNjLoN+PcylQ3s0I3I3Y5Ck=
Subject key identifier: 0B:71:8E:3C:33:32:3D:C4:C0:08:B4:91:E2:59:CC:BE:B4:99:B4:45
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F022BB3E0CC4DDDABC579EF0B4E4F76
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/C3GOPDMyPcTACLSR4lnMvrSZtEU.roa
Signing time: Sun 01 Jan 2023 20:24:51 +0000
ROA not before: Sun 01 Jan 2023 20:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399734
IP address blocks: 83.231.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2b:b3:e0:cc:4d:dd:ab:c5:79:ef:0b:4e:4f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b718e3c33323dc4c008b491e259ccbeb499b445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:4c:0f:59:8d:df:46:0e:d5:dc:37:6c:53:
3b:08:23:59:b9:64:39:9e:8d:4a:15:5a:51:73:a9:
5e:25:55:58:46:99:dd:d3:2b:8f:1f:0c:e8:41:c0:
62:eb:b3:3f:91:ed:a1:5f:de:39:ad:00:95:2d:9a:
b4:23:bd:d1:e7:2d:f0:39:0f:2a:84:53:dc:58:d7:
73:45:88:fe:00:02:38:12:e2:2b:0e:5f:e3:90:a0:
41:72:fd:cf:39:b7:aa:91:63:77:90:19:55:64:ad:
f0:2e:e0:c2:8f:e0:34:55:fb:f2:a9:7e:14:08:a4:
43:bb:04:40:a7:de:87:06:7d:fb:5e:46:f8:45:78:
92:2a:b9:d9:ec:16:83:50:79:f9:d0:31:7c:a8:94:
84:af:d5:77:ec:83:18:26:8c:0e:34:02:53:bb:27:
23:3c:88:18:26:51:ae:a2:09:77:93:28:96:29:ac:
06:28:31:45:6b:d7:c3:17:08:e0:e4:39:f8:f7:4d:
ec:63:69:a8:3c:53:39:0e:f6:a2:29:36:9a:04:ab:
89:be:88:1d:11:0c:c7:05:25:20:40:8d:e1:b3:fa:
57:e0:3c:28:75:fc:eb:69:36:40:16:55:1f:bd:18:
68:5d:12:ca:ad:1b:b3:8a:f5:c5:f8:e8:a5:49:91:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:8E:3C:33:32:3D:C4:C0:08:B4:91:E2:59:CC:BE:B4:99:B4:45
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/C3GOPDMyPcTACLSR4lnMvrSZtEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b6:11:3b:64:36:f3:e1:10:ed:5c:58:5b:df:5d:4d:67:50:
76:ad:49:d8:6f:b5:29:cc:ba:71:2e:1c:2f:55:d1:f4:f8:38:
2c:95:47:81:5d:f1:c3:f8:74:ef:72:be:f6:e6:db:3c:d6:be:
e6:de:cd:3b:d9:9e:97:e4:f1:c2:fc:8c:f9:25:0a:22:c0:d4:
53:a3:61:de:7e:2f:27:8d:2a:f1:cb:fc:cd:55:b2:5e:cc:1b:
03:f1:ca:09:40:0e:2c:b2:46:9a:c4:ee:71:26:0a:df:c4:a8:
85:18:45:ca:fb:32:ab:94:dc:1e:2d:69:7b:f7:fe:15:61:5f:
b2:bb:18:0d:6b:d5:68:eb:20:05:3e:32:22:8d:36:31:e6:a8:
3d:45:f5:2e:c3:a4:fa:8b:8d:c2:4a:23:8c:51:9b:52:18:5b:
1b:84:81:b3:1e:2c:44:fa:7e:c0:76:fb:d3:2a:65:88:d7:a3:
a0:fb:64:a9:0e:3e:10:1e:e9:bd:78:92:05:63:da:36:7a:d5:
44:ea:0b:1c:3f:1a:89:f9:4f:d0:9c:85:fe:81:aa:c5:74:8d:
61:0e:f4:44:6a:b7:2d:12:fd:77:2d:fc:b7:a0:e9:b2:89:a9:
f0:4f:0e:a3:e9:ca:a7:8e:05:15:d4:cb:6d:ca:16:87:2e:b0:
94:0c:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:49:55 2025 by rpki-client