Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/_xVJ1hQmic9FLrcgVmh-KAZfgtA.roa
File: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (raw, json)
Hash identifier: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=
Subject key identifier: FF:15:49:D6:14:26:89:CF:45:2E:B7:20:56:68:7E:28:06:5F:82:D0
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 01941F8C4B93776EDDFBA320AB9CC70BE0AB
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/_xVJ1hQmic9FLrcgVmh-KAZfgtA.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 82.117.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:93:77:6e:dd:fb:a3:20:ab:9c:c7:0b:e0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff1549d6142689cf452eb72056687e28065f82d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:6b:3f:7b:3b:92:71:85:e6:db:a3:22:18:
74:8e:12:60:37:1a:af:39:6c:e9:2f:77:09:50:e3:
0f:d2:6e:29:37:e8:f2:00:06:c3:69:92:d3:e5:68:
e9:97:f9:31:eb:9f:a9:15:53:63:73:07:35:d3:10:
fd:8a:45:d7:4c:61:7b:25:58:ed:d7:23:77:1b:51:
1a:ce:05:2f:6c:43:11:b7:83:e4:ae:10:9f:7a:06:
b6:d1:19:16:16:e1:f4:ec:22:23:a0:08:f2:14:9d:
28:af:5a:21:a6:f2:23:56:de:64:fd:99:ec:12:11:
40:57:1f:bd:19:3e:ec:f2:e5:62:4c:ca:9d:f4:83:
6f:2c:e6:84:47:b4:57:88:53:6d:c5:b2:a0:fd:4d:
fa:23:e2:01:70:3c:ca:50:71:36:65:d2:1a:1e:ab:
9d:81:f9:f8:4d:7a:a0:56:8b:83:56:aa:93:34:b1:
55:bb:44:b6:65:08:a7:03:2f:69:aa:f6:2c:fc:09:
a5:00:90:00:34:6a:32:a0:89:62:3c:53:a8:e5:51:
a9:3f:3a:0a:bc:20:c8:c2:9e:6a:a8:83:f1:f9:f4:
45:f4:e2:1f:ea:c9:8a:cb:08:86:3a:ec:29:8c:7b:
0d:cc:19:49:5d:f9:a8:d9:00:cd:77:53:14:63:18:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:49:D6:14:26:89:CF:45:2E:B7:20:56:68:7E:28:06:5F:82:D0
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/_xVJ1hQmic9FLrcgVmh-KAZfgtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
65:83:3f:df:9c:b3:3c:bf:a3:71:87:71:22:6b:b7:84:ca:83:
52:a4:35:49:9f:36:2a:32:3b:21:93:4d:84:a7:cd:1b:c2:8d:
1c:f7:60:d3:bd:ce:79:ba:b5:89:35:4a:00:68:18:be:ae:57:
54:21:d4:a0:67:d9:9c:49:8a:57:4f:f8:1a:dd:64:5e:1b:9d:
c8:7f:62:66:ef:a9:3a:ca:dd:e3:b6:a3:4d:a2:88:cf:2d:51:
c3:60:4b:4b:4c:a2:c7:d9:01:71:36:36:35:cc:59:0c:49:0c:
c8:97:c7:97:26:59:fa:06:4b:aa:ad:9c:3a:60:a8:49:e0:1e:
33:33:43:ff:bc:04:66:1b:c5:ee:92:50:12:56:c7:91:02:f5:
d9:5c:f6:84:41:38:8c:09:c7:cb:cc:17:d4:b7:c6:46:9b:9b:
23:dc:a7:ae:27:c2:b1:af:63:c2:e8:47:e1:1b:23:2c:72:ba:
82:3f:4a:19:17:db:12:5f:c8:43:9c:30:39:5c:95:50:03:8a:
dd:fd:17:34:7d:58:e8:7d:e3:30:0b:3a:9b:7d:90:1f:05:98:
8a:56:b7:a8:92:03:d8:e7:7c:4b:e0:38:da:c8:a2:12:d0:02:
2c:75:f4:11:b9:aa:b0:c7:66:29:60:8d:a2:e6:cb:fe:60:41:
7c:ab:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:22:26 2025 by rpki-client