Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/g8YSxO_8Ip9UBLYet8A0GL5zXR0.roa
File: g8YSxO_8Ip9UBLYet8A0GL5zXR0.roa (raw, json)
Hash identifier: sivOq0uVyUFZk0M3eQF/V08mpS5FONf5vLTU66PZnoE=
Subject key identifier: 83:C6:12:C4:EF:FC:22:9F:54:04:B6:1E:B7:C0:34:18:BE:73:5D:1D
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0194266C28A4E3F71176483925E32A544991
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/g8YSxO_8Ip9UBLYet8A0GL5zXR0.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:a4:e3:f7:11:76:48:39:25:e3:2a:54:49:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83c612c4effc229f5404b61eb7c03418be735d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:4b:1a:f9:7b:fe:e7:b0:92:8c:12:6c:28:
29:d3:77:5c:8e:9d:32:79:3c:ff:ff:de:79:05:f0:
9c:aa:54:78:0f:5a:2f:00:25:7d:5f:0b:a8:de:d1:
b9:b3:c1:93:52:0d:87:38:ab:2e:a5:e3:8b:33:99:
ab:95:1d:44:99:50:10:30:58:1d:59:a3:88:9c:0a:
63:79:26:3c:71:45:39:80:20:6f:65:2f:e8:1d:91:
5e:9a:97:5f:63:6d:5d:ce:bc:d8:80:1b:3a:63:57:
08:b3:70:fa:30:b0:d6:13:37:fc:e8:bf:c3:00:7c:
cb:fc:df:74:1c:91:c4:25:03:2c:5e:e4:9f:65:3a:
39:1b:83:6f:b5:80:5b:38:1d:57:55:4d:59:05:d1:
76:16:0f:83:33:06:b0:93:75:3f:b1:56:d4:6b:bf:
91:da:d6:3f:84:db:4d:9b:9e:9f:a2:41:2c:e4:4b:
6f:77:4f:18:ba:59:16:e6:18:2d:50:38:5c:ab:04:
c6:9d:31:99:9c:e7:e0:3e:76:9b:c4:f9:d2:89:0f:
05:8a:d0:cc:25:8f:1b:b5:2a:c2:54:9c:8b:e4:fc:
dc:52:f7:85:d7:e9:51:e1:aa:60:74:ba:46:ed:fe:
02:f4:94:69:89:54:4e:d8:e1:30:bd:5f:3a:31:5c:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:12:C4:EF:FC:22:9F:54:04:B6:1E:B7:C0:34:18:BE:73:5D:1D
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/g8YSxO_8Ip9UBLYet8A0GL5zXR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
14:97:ef:70:ee:56:7b:14:28:19:0a:ac:3a:ca:1a:02:b6:55:
c7:02:0f:9f:24:fb:d0:00:94:f3:c2:17:d9:69:15:c6:9c:59:
42:03:47:0c:1c:f3:8d:ae:a3:c0:6e:a4:02:5d:c4:95:76:98:
94:79:96:dc:0b:3a:99:00:5d:1b:d3:e8:f8:7d:34:01:ed:c3:
ae:85:2b:07:bb:41:b7:49:a9:ad:da:d4:c4:f1:ec:c0:c6:66:
01:59:e3:91:50:f5:10:ab:4e:b3:f7:01:91:75:bb:06:8a:92:
f8:fd:29:ea:c2:f3:fe:8a:d2:ab:1c:ac:b1:e3:3b:68:c8:3f:
5a:2a:38:8d:90:75:c9:e8:a7:d9:cf:e7:64:5f:ff:95:a2:1d:
6b:60:33:2e:0f:0f:d3:c2:77:c2:c7:df:3d:96:84:0f:93:9a:
66:2a:23:97:ea:d8:78:1e:66:99:61:11:f3:8a:0b:2a:7b:8c:
a0:d4:d7:10:4f:16:44:09:bb:6b:28:00:87:9e:7c:9e:d3:b3:
d0:c7:d3:5c:af:3d:07:08:30:d1:86:ee:b7:be:60:11:7a:b0:
6b:87:ba:9b:0f:c5:87:ca:4a:e0:d8:a1:30:f8:f5:1b:05:dc:
6e:16:2e:4e:a1:b3:b8:5b:8e:8d:e5:b2:2e:f6:6c:9b:b4:fc:
12:7c:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:01 2025 by rpki-client