Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/TmI7Mg0osOv9bcSkbnpna9M6d0g.roa
File: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (raw, json)
Hash identifier: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=
Subject key identifier: 4E:62:3B:32:0D:28:B0:EB:FD:6D:C4:A4:6E:7A:67:6B:D3:3A:77:48
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 0194221FBAA69EA978AB8A993279D145794F
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/TmI7Mg0osOv9bcSkbnpna9M6d0g.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61980
IP address blocks: 83.220.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ba:a6:9e:a9:78:ab:8a:99:32:79:d1:45:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e623b320d28b0ebfd6dc4a46e7a676bd33a7748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:ad:82:cd:ed:d4:13:4d:ca:d0:6c:2d:d5:
df:fa:b3:a0:cb:ec:67:78:b5:63:88:09:1a:0c:87:
fc:31:bb:dd:0f:30:07:6d:e2:72:77:0c:aa:3f:0e:
ae:fb:b1:72:3a:19:d8:ec:8c:e6:f2:67:2b:34:26:
89:19:40:26:4c:10:d3:af:76:03:77:db:eb:7f:c0:
ce:b3:79:df:ff:5b:d8:53:ea:da:46:8b:c5:48:82:
54:3d:52:38:22:c3:22:65:f9:9d:dd:6c:a3:3c:95:
26:d2:08:67:52:11:62:8d:26:97:05:8e:83:25:3e:
9e:21:b0:2a:68:1b:76:84:05:a9:39:6c:af:d1:d3:
b4:1f:da:d6:92:30:ec:83:c3:c9:c8:e4:a1:f7:27:
a9:fb:af:39:52:93:d2:ae:25:7b:75:ce:35:e3:7d:
a4:23:c2:26:4b:eb:c3:e5:51:48:0e:42:ae:fe:db:
c3:42:db:5b:2c:08:59:ee:29:d9:7a:f3:6e:fa:d9:
73:63:fc:92:e0:ec:df:21:73:42:c4:7a:5f:22:40:
93:04:ac:97:f4:5f:ea:d8:3d:f1:4d:b9:93:40:b1:
db:29:9f:15:d4:62:0d:a3:ae:0f:9a:bd:5c:53:2b:
b6:ec:43:30:29:f8:11:0c:cc:cf:5d:33:2c:01:46:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:62:3B:32:0D:28:B0:EB:FD:6D:C4:A4:6E:7A:67:6B:D3:3A:77:48
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/TmI7Mg0osOv9bcSkbnpna9M6d0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.166.0/24
Signature Algorithm: sha256WithRSAEncryption
19:df:0c:c7:ae:ae:1d:89:da:a4:c2:c9:be:91:0c:7e:2a:b6:
42:65:16:d1:c7:48:94:47:0d:98:79:0b:f6:d2:69:af:d9:75:
fc:0a:29:3a:8d:12:82:f9:a9:38:9a:0a:4b:a7:0e:29:a5:20:
de:ba:b3:80:63:3d:c6:ce:13:66:da:a1:e9:ed:ff:38:a7:32:
f5:f4:aa:a4:47:b0:d0:43:7b:fe:f2:4c:bd:9f:ea:70:8c:91:
f1:38:f2:a1:23:b7:4e:50:84:57:87:ca:65:2b:80:56:c9:73:
32:32:da:c4:57:a8:52:81:84:96:bb:a7:90:6a:ad:63:22:4a:
c4:2c:03:51:e6:97:47:7b:b4:ec:e2:ff:c8:9d:ef:36:33:ab:
f4:76:11:07:48:81:90:ab:0b:19:91:8b:34:54:b4:4c:46:ad:
c7:71:f3:8f:1a:d0:c9:d4:35:73:fc:18:ed:24:8c:45:14:d8:
e3:2e:aa:cc:77:7a:45:2b:e4:a8:3d:35:df:8c:d9:a8:2e:03:
09:b3:e6:06:0e:33:45:c8:40:1d:af:49:c4:14:f5:1e:fe:f5:
42:e1:a7:90:4a:4f:39:bd:ae:7f:37:9e:42:6b:99:7c:d4:62:
6f:9a:5e:4a:68:81:cf:1c:9d:bf:9f:e5:0f:a0:3d:36:c3:46:
63:d7:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:59 2025 by rpki-client