Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa
File: ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa (raw, json)
Hash identifier: 3E2wFt0mctq9eZeC5gr+9q8G9wNZ7Xmn3ppu8VejkKA=
Subject key identifier: AE:E9:3D:A0:A0:B0:E7:3E:0D:2E:72:7D:C8:6C:AB:FD:40:9F:A0:46
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 0194252158BFF17477C3E8B921C5E9D32ED0
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50494
IP address blocks: 83.150.204.0/24 maxlen: 24
193.105.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:58:bf:f1:74:77:c3:e8:b9:21:c5:e9:d3:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aee93da0a0b0e73e0d2e727dc86cabfd409fa046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:3a:fb:97:cb:6b:4a:49:2f:51:64:02:f9:
81:ef:0c:8c:87:1a:de:4c:c7:88:b5:5a:1c:dc:99:
cf:48:d3:b9:5d:f3:ea:b8:87:8e:52:15:44:b9:3b:
47:0f:70:7d:cc:fa:e9:ce:38:53:40:03:37:46:ad:
81:60:5e:40:08:8f:6d:f6:53:3f:a1:e9:2e:e2:37:
ad:b6:2c:bb:d3:54:46:7f:24:1b:c2:f3:d2:d7:ea:
3b:f0:f1:55:db:04:88:06:43:c2:e5:c0:52:27:b9:
27:c2:3f:74:26:fb:92:5e:7a:ad:95:a0:87:17:fd:
8a:41:52:d4:8c:ac:40:17:35:6b:0e:07:37:7a:e3:
83:a8:35:0d:0e:9a:75:4b:5a:1d:1e:ed:be:62:df:
b5:52:90:4e:45:61:da:98:9b:b5:ef:21:94:29:49:
5f:1a:2e:e2:67:ae:a7:e2:01:56:14:93:ab:50:44:
06:26:76:1e:21:bf:30:11:f3:9c:98:e4:60:36:00:
fe:b9:70:7f:5a:52:85:ac:fe:16:1e:b6:b4:2b:44:
32:f7:34:29:38:37:fa:1b:65:f4:29:84:ff:b6:35:
c0:9b:8c:e8:ab:f1:80:9b:c4:bb:40:73:6d:8b:54:
0d:0e:40:a8:38:d5:12:71:3c:eb:0b:f1:3d:a7:f6:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:3D:A0:A0:B0:E7:3E:0D:2E:72:7D:C8:6C:AB:FD:40:9F:A0:46
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.204.0/24
193.105.70.0/24
Signature Algorithm: sha256WithRSAEncryption
99:11:96:b9:71:ec:30:c1:cf:2a:6f:16:3a:8f:af:ba:c9:5a:
bb:c8:0b:e1:63:94:2c:a9:dd:54:e1:f7:81:27:0a:23:aa:73:
87:b7:a2:82:3a:3b:12:21:4d:bd:ce:ed:de:d9:db:4e:c9:51:
7f:d3:cb:9a:09:70:57:7c:5c:87:88:a2:c3:b3:5a:13:c9:5c:
7c:aa:30:ea:9e:af:a0:82:1f:dc:68:be:75:e9:8c:51:88:15:
ba:00:7f:b3:33:6f:e2:ba:a2:6b:f6:73:bc:dd:1c:75:9e:b4:
c1:d5:f0:f6:39:2e:26:93:16:f6:2f:25:09:d6:23:5e:b9:b9:
5f:c3:6f:d5:2a:bd:92:56:da:45:a0:0b:51:51:09:10:43:40:
90:2b:7e:85:ba:a6:a5:a1:25:b0:24:24:2a:a5:ea:e8:d8:6f:
06:0e:23:aa:d2:c9:ae:43:a9:95:c8:ce:03:67:24:5b:92:9e:
1a:0c:7e:2a:06:06:34:8c:2c:7f:d8:7e:ad:98:af:f6:92:aa:
b5:9b:21:07:b3:09:72:33:5d:95:24:e1:43:bc:5d:8a:db:84:
c5:a6:7f:7c:4d:8f:f5:e5:13:27:80:62:8d:4a:14:a7:73:bd:
c2:72:00:7c:d3:6c:14:06:f3:c5:ef:38:ef:27:1e:b5:32:9d:
3b:bf:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:24 2025 by rpki-client