Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa
File: mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa (raw, json)
Hash identifier: WKtl9/rCVdqattn0ipGNumFRIFTCx0VUypyRv/GA3Gw=
Subject key identifier: 99:D3:43:1F:CB:4E:7A:67:5B:53:09:6A:44:6B:37:85:BD:47:AE:6E
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019427B60C283C4AFEEAAF8FE8A76BC8D09B
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28917
IP address blocks: 82.194.244.0/22 maxlen: 22
89.188.164.0/22 maxlen: 22
89.188.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0c:28:3c:4a:fe:ea:af:8f:e8:a7:6b:c8:d0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99d3431fcb4e7a675b53096a446b3785bd47ae6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:8e:d8:b7:2f:40:01:23:64:83:15:9a:0a:
a6:c8:6b:e0:22:fd:c1:b7:c6:ba:4a:e3:1c:b1:7e:
46:63:58:1d:d0:76:80:5b:f6:43:54:af:83:59:70:
e1:43:a1:2d:f8:c2:e9:10:7e:23:ec:38:0f:d9:aa:
26:59:a2:f4:5f:24:5c:2c:f9:26:92:ba:da:ad:91:
e5:29:4f:cd:e1:ff:45:1a:47:dd:60:2c:9d:e9:e1:
ee:04:e7:ed:ba:89:67:bc:b2:90:b7:62:ef:cf:5a:
c1:c5:ed:89:b5:c4:10:4a:61:b0:9e:f0:c6:6d:d1:
5d:fc:f8:37:f5:eb:b0:d5:05:f0:c0:02:17:1b:a2:
82:5b:ed:1e:01:e7:48:43:22:a0:45:38:1a:9b:a3:
3c:bc:be:25:11:a2:5f:68:49:a0:d9:3a:85:a2:c1:
3e:2e:74:52:f4:6c:02:d1:6d:28:40:67:12:43:d1:
3a:bc:ed:e7:7d:8c:bb:3f:41:45:ee:7b:51:3a:d6:
5f:76:f5:49:40:3e:62:ec:80:a9:ae:7d:60:a2:80:
48:17:1b:ce:be:7a:f6:81:ff:5e:7a:a0:03:75:0c:
e3:3f:d8:11:e5:fd:df:38:bd:2c:e2:54:99:4b:cb:
b0:ba:6f:3c:a9:26:5b:48:a7:cb:98:13:e1:71:6f:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:43:1F:CB:4E:7A:67:5B:53:09:6A:44:6B:37:85:BD:47:AE:6E
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.244.0/22
89.188.164.0/22
89.188.176.0/22
Signature Algorithm: sha256WithRSAEncryption
58:30:48:92:bf:77:5f:96:9b:61:4b:0d:49:96:e1:5e:e7:fc:
fc:34:e8:4f:cb:fd:d8:bc:e6:f6:da:63:d2:da:97:e1:3a:9a:
31:e5:c4:9a:14:e8:81:3b:05:2a:81:c1:25:c3:97:ba:ca:f6:
1a:0e:5c:15:4a:22:73:10:eb:8f:a3:df:02:d4:8c:f7:29:28:
56:b3:f0:c9:8b:92:55:f6:c9:0c:db:f0:ab:bf:cc:11:a3:8a:
1a:01:3e:66:19:79:7e:12:99:ac:01:3a:4a:c5:31:15:60:88:
af:e2:7a:0e:5a:d3:01:de:79:bc:02:34:d4:c9:21:19:49:32:
91:45:68:8c:b1:7c:27:6e:41:20:a3:5b:7c:f7:61:8b:1c:82:
8f:96:e2:84:8b:a9:90:51:a9:6f:55:3b:4d:e8:db:b3:0f:ed:
90:46:af:07:3b:b5:8e:ad:02:4f:e4:7f:20:9f:2b:de:ba:67:
71:2e:1c:75:f8:0c:34:6b:f3:a5:c3:9a:49:cb:8f:ef:7a:37:
fd:79:5d:1d:4c:56:a5:30:b9:fe:57:d5:15:77:a5:8c:1d:31:
11:45:02:62:f2:2d:77:aa:16:14:71:f6:67:ad:eb:ef:6b:47:
32:f6:af:b1:6a:8a:68:f4:e7:a6:d2:d6:42:d5:24:a7:43:c7:
64:04:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:00:01 2025 by rpki-client