Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/o5KPKjK-GHKQXFxcSgeXmMdfNLM.roa
File: o5KPKjK-GHKQXFxcSgeXmMdfNLM.roa (raw, json)
Hash identifier: JxdfeNIFkRervkDSq+fY3qGwjFR46Ob1RlhImZ2B850=
Subject key identifier: A3:92:8F:2A:32:BE:18:72:90:5C:5C:5C:4A:07:97:98:C7:5F:34:B3
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F0227603758BCCBD9BBC8AFD0B5ED7A
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/o5KPKjK-GHKQXFxcSgeXmMdfNLM.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49607
IP address blocks: 83.217.232.0/24 maxlen: 24
81.19.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:27:60:37:58:bc:cb:d9:bb:c8:af:d0:b5:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3928f2a32be1872905c5c5c4a079798c75f34b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:04:c5:5f:90:cd:65:24:b0:4b:60:3f:98:
7c:d1:1a:99:8e:33:9a:1f:c4:cd:ec:0d:c6:80:c5:
df:d2:59:d9:4c:76:c9:b8:74:0e:4a:b8:06:1d:51:
fe:02:31:e7:d3:81:b7:55:4a:d1:86:fb:72:3f:bc:
ba:d2:87:4b:8c:0d:7a:38:b4:ed:55:47:07:5b:66:
df:15:c4:12:00:53:f4:0e:04:56:fe:00:15:f1:6e:
50:47:1d:60:be:d1:bc:b3:d2:63:02:a4:50:f0:6f:
dc:9f:7b:06:6d:62:17:19:87:d6:4e:be:77:b2:27:
e5:db:2f:30:71:e1:3c:27:8e:07:56:8b:11:e7:19:
77:da:aa:f1:3e:04:23:ea:f4:bb:30:91:c7:00:56:
15:e9:49:c8:45:bc:ff:f1:48:10:10:72:8a:23:b0:
51:65:02:71:d2:f0:97:55:5d:78:78:54:bc:9c:8b:
8e:fb:fd:26:9a:03:34:ec:11:97:bb:e1:91:c2:f0:
27:62:41:99:cc:cd:b4:99:99:bc:d3:4c:70:9f:f6:
7b:ad:a5:21:18:e6:a1:dd:6d:9c:99:46:cc:f5:00:
59:29:9f:66:d6:20:54:f7:fb:00:76:7d:34:41:2e:
da:8c:ce:71:9a:18:ea:f2:2c:c8:c9:b9:ed:68:16:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:8F:2A:32:BE:18:72:90:5C:5C:5C:4A:07:97:98:C7:5F:34:B3
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/o5KPKjK-GHKQXFxcSgeXmMdfNLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.111.0/24
83.217.232.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b1:d6:41:b8:8b:91:38:90:50:b5:5f:24:c6:d6:4b:32:dd:
bb:0d:0f:53:c4:33:55:41:74:67:6f:1a:68:ba:62:9a:8a:d4:
97:a0:00:75:b0:e6:32:69:9a:51:c2:41:d4:78:e0:1f:19:1f:
64:0b:00:18:f5:59:62:7f:da:f3:68:df:99:c8:db:df:d0:71:
95:f6:52:47:54:4a:2d:de:a1:b4:84:ff:7f:95:54:2c:31:60:
34:04:48:50:c6:0d:8b:cf:ba:0a:88:a9:a7:51:f5:b4:47:9d:
2c:ea:0e:dc:fd:bc:b6:24:4e:5c:28:9b:32:c2:e0:0a:94:08:
79:e9:89:39:5d:ae:2f:b4:b7:25:c5:5d:3e:64:28:f3:b7:18:
02:13:d6:9c:b0:78:21:cc:1e:9f:ef:46:4f:96:d5:80:87:50:
3b:56:ac:c1:ac:97:4a:fe:29:0c:49:83:59:e0:7d:0d:d1:87:
28:b4:1d:e7:48:fd:61:e4:66:f2:51:86:c5:f2:1c:b7:ac:b8:
35:d1:df:c8:b2:aa:a6:63:e5:27:33:0b:14:03:46:22:0e:41:
b0:77:8c:b7:fa:27:e1:dc:6f:78:6c:ce:bf:be:4f:43:34:be:
54:38:a5:ae:fd:47:a7:4b:da:d9:a1:23:0d:45:ce:b3:85:7c:
79:1a:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:35 2025 by rpki-client