Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/eWk2WvIGvufYh6GSD7WPRpEjVmk.roa
File: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (raw, json)
Hash identifier: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=
Subject key identifier: 79:69:36:5A:F2:06:BE:E7:D8:87:A1:92:0F:B5:8F:46:91:23:56:69
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F846BC849116CB04CE8896C3B3271
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/eWk2WvIGvufYh6GSD7WPRpEjVmk.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43366
IP address blocks: 82.150.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:84:6b:c8:49:11:6c:b0:4c:e8:89:6c:3b:32:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7969365af206bee7d887a1920fb58f4691235669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:d3:b9:d4:0e:9b:dc:60:b4:94:7f:6b:4c:
04:39:97:3f:78:2d:1d:94:41:ab:36:1e:6c:ed:be:
20:11:66:4c:2c:f6:fa:e9:8a:07:5c:1a:87:14:d8:
7f:01:0b:66:a2:26:c2:32:48:0f:61:4c:9a:25:c8:
0a:ee:f0:37:78:d7:34:a0:64:80:3b:1f:67:91:55:
a9:62:cc:8a:94:b7:5b:cc:52:13:70:13:e7:b8:90:
d7:41:04:de:6e:2c:9c:96:1b:b1:62:45:7f:a2:cb:
fe:46:51:19:61:74:d1:b9:d6:e8:8b:1f:29:9e:bc:
a1:74:e1:fb:fb:e8:17:7b:4b:59:4c:d8:98:09:63:
81:da:c3:ce:be:14:c1:05:00:01:b2:9d:37:89:82:
d7:ba:51:f6:e1:30:70:c1:a3:f9:c8:8d:19:55:ca:
13:87:d2:7f:63:5c:54:58:6e:87:c0:73:2d:a1:10:
cf:3f:62:c2:74:54:fd:d3:ce:dd:a6:dc:07:dc:31:
7c:d8:97:0a:ff:35:18:72:ae:80:02:2d:51:58:cf:
e1:8f:85:a4:e8:55:c3:a2:0d:61:21:46:52:18:f6:
d0:07:fa:7d:e7:65:09:43:24:31:af:d0:6a:32:30:
90:d9:33:a3:9c:fe:aa:a1:61:9e:5c:f2:2d:6d:aa:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:36:5A:F2:06:BE:E7:D8:87:A1:92:0F:B5:8F:46:91:23:56:69
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/eWk2WvIGvufYh6GSD7WPRpEjVmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:be:48:5d:1c:d9:a2:d0:b5:4b:82:42:65:3f:6a:40:76:cf:
f1:55:b7:21:a1:98:7e:4d:76:36:74:f6:f2:8c:2a:e7:0e:76:
02:45:7d:c6:02:38:0c:26:a0:c3:31:e1:86:30:0e:ec:55:d0:
49:eb:80:89:6b:6f:a8:7d:5e:4d:4b:51:6b:03:31:70:35:61:
5d:17:5c:1b:25:b6:c1:c5:0b:b9:23:30:c2:ea:a3:42:e1:a1:
58:71:52:e2:ac:46:97:d9:59:7c:53:ec:a8:94:61:ba:25:fa:
7b:d8:ba:b0:7a:c9:78:1f:7e:9d:e2:09:60:6b:29:b8:8f:59:
ac:d5:0f:ca:40:56:2c:99:a9:29:8e:7f:34:34:93:cf:a5:c0:
6c:a7:54:58:e5:a8:61:87:da:10:d1:bd:4e:2d:09:78:62:85:
c9:2d:4a:76:96:fe:25:e0:b1:0c:fe:31:8e:8a:60:ac:b9:f2:
dd:33:8f:25:71:ec:5c:4b:70:9e:30:7d:54:01:11:45:0e:1c:
b8:9b:d4:25:4a:06:de:e3:23:76:cb:90:ea:d8:82:fc:f8:75:
fa:50:8c:1c:29:7a:30:57:a9:f5:36:45:9a:3a:be:ba:82:02:
90:18:98:ad:50:51:40:0a:6c:c9:59:80:6b:83:c7:d7:b9:0e:
b5:ae:5d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:22:39 2025 by rpki-client