Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/GWuRNScxtrzO8_nSAwKtJ8krFKo.roa
File: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (raw, json)
Hash identifier: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=
Subject key identifier: 19:6B:91:35:27:31:B6:BC:CE:F3:F9:D2:03:02:AD:27:C9:2B:14:AA
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 0194258F85DCD824D7AF280B1255124D9AE9
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/GWuRNScxtrzO8_nSAwKtJ8krFKo.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213961
IP address blocks: 83.220.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:85:dc:d8:24:d7:af:28:0b:12:55:12:4d:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=196b91352731b6bccef3f9d20302ad27c92b14aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:65:51:78:bc:4d:78:3b:d9:5e:ca:85:e2:9b:
81:81:78:27:ad:b1:d5:d2:e3:e8:42:bd:29:64:fd:
8e:31:ff:25:55:76:f9:9c:95:ce:12:64:d9:98:46:
60:e6:6b:29:46:e9:74:e0:f6:05:d1:da:4a:5d:b4:
8e:21:45:d8:90:a7:0e:f9:c3:95:42:28:5c:ea:c3:
ac:85:e3:59:61:4f:7e:0a:7f:85:b8:f3:22:49:9b:
ed:d8:fb:b3:fc:bc:12:c0:f4:5f:08:ff:30:78:ba:
19:c7:32:d1:bb:5b:96:d3:1a:90:e7:d8:46:e1:52:
21:c4:9e:b8:38:05:91:cb:f1:e0:10:df:a8:cc:b9:
e8:2d:21:dc:d0:fe:8c:c0:50:f8:b6:07:b7:e1:f6:
70:79:50:ff:6d:58:f6:e7:62:c2:bf:eb:c0:7b:b8:
84:03:98:30:07:3f:3e:9d:dc:b2:a7:be:0a:25:81:
17:ed:6d:db:28:6a:7a:28:59:25:e2:6b:3d:15:65:
ac:dc:b3:66:56:be:44:e2:72:c0:8b:1f:e8:3d:52:
cc:f3:8a:24:0b:ad:01:12:51:80:05:dd:13:47:14:
bd:23:25:d2:74:e2:4e:9a:79:ee:8d:58:c3:7d:58:
b6:19:67:95:8f:c1:b5:bf:da:79:cd:70:b1:4d:ec:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6B:91:35:27:31:B6:BC:CE:F3:F9:D2:03:02:AD:27:C9:2B:14:AA
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/GWuRNScxtrzO8_nSAwKtJ8krFKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ef:ca:61:b2:71:ef:20:64:3a:4a:37:ea:1e:6d:d9:ab:c8:
0d:e5:75:3f:a1:6f:5d:7a:77:47:f0:f9:09:00:2c:60:70:3d:
5f:1d:cc:b0:04:59:cf:01:3a:b1:f3:01:37:d8:65:43:56:bc:
65:90:8e:a4:05:a6:ed:54:de:c3:46:c4:f9:32:43:a4:df:0a:
58:40:d3:e5:fe:fb:d1:90:b1:23:db:36:de:8b:a3:58:dd:3b:
36:4f:fa:35:ec:7a:2a:5f:11:57:05:3d:4d:1a:de:91:14:fb:
72:14:dd:94:de:e1:cb:dc:ae:12:8b:77:72:08:c0:49:70:82:
a7:c1:f8:11:55:49:b0:5b:06:99:4f:8d:07:72:7b:07:c0:3e:
07:a4:2c:ca:90:11:32:bf:3b:2d:9f:c5:cc:58:25:ad:31:00:
7b:72:74:48:e6:11:ee:83:12:ce:e7:40:0a:af:9a:9a:08:5c:
28:b1:31:9e:e6:55:06:49:17:6d:b6:85:56:d7:51:51:ec:b1:
22:f4:87:32:ba:07:cc:8c:13:a8:cb:1f:ba:06:df:fe:c6:67:
29:3a:b1:35:d1:28:c1:91:3f:3b:7b:1c:81:82:25:16:da:19:
44:04:08:ae:41:28:1b:1c:56:4c:c3:d7:9e:e4:e8:35:fa:61:
f6:a4:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:36 2025 by rpki-client