Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/BC1UkG4QMkw1Ll4wuG83J20xnpU.roa
File: BC1UkG4QMkw1Ll4wuG83J20xnpU.roa (raw, json)
Hash identifier: NI9TjwRhh7PjQRmQFxBvtNuQ2hZjm4ANhXnKiuiony4=
Subject key identifier: 04:2D:54:90:6E:10:32:4C:35:2E:5E:30:B8:6F:37:27:6D:31:9E:95
Certificate issuer: /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial: 0185713099C97EF871020DC5EBA71BD1F58F
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/BC1UkG4QMkw1Ll4wuG83J20xnpU.roa
Signing time: Mon 02 Jan 2023 06:34:47 +0000
ROA not before: Mon 02 Jan 2023 06:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 83.150.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:99:c9:7e:f8:71:02:0d:c5:eb:a7:1b:d1:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
Validity
Not Before: Jan 2 06:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042d54906e10324c352e5e30b86f37276d319e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:2d:c4:4a:95:3a:1b:fb:56:b7:3b:cb:c3:
d3:83:76:59:5f:92:83:22:ca:c9:97:7f:a0:5e:c4:
c4:e6:21:01:f6:d9:5b:02:b2:33:d5:5b:f1:4c:fe:
61:82:30:a0:34:1c:37:fd:bf:fd:7b:0a:08:21:73:
d5:d4:c9:f3:70:7f:42:95:d9:72:8c:9c:01:92:12:
1d:85:1a:fa:74:8a:e5:b8:ea:a7:c1:cf:3c:d6:f6:
65:c9:0a:ac:07:44:bf:64:7e:59:49:d0:4c:b5:49:
af:ab:44:09:25:8a:83:36:80:8c:51:0b:91:0e:56:
74:70:5b:1a:0d:d3:bf:d1:2d:5d:c1:f2:50:4e:09:
8a:7d:aa:b8:62:8d:99:f5:a9:0c:ec:48:ef:bc:c1:
dd:79:a5:01:33:f1:a6:8e:53:b1:a7:44:a4:37:d2:
56:6b:e9:28:a2:c9:d2:96:6d:96:01:a1:e8:2e:53:
22:58:64:0d:6e:25:da:19:81:8c:63:db:cc:33:85:
0a:9c:7f:8b:65:95:f0:d2:93:b5:d1:c5:6e:d0:a8:
ee:0f:70:ff:eb:87:30:54:6e:13:93:07:75:32:20:
1c:29:38:6f:e2:b2:89:e3:b7:95:9a:ad:91:45:e0:
52:3d:4e:26:0c:42:b5:da:da:5c:8c:93:8c:7f:d9:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:54:90:6E:10:32:4C:35:2E:5E:30:B8:6F:37:27:6D:31:9E:95
X509v3 Authority Key Identifier:
keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/BC1UkG4QMkw1Ll4wuG83J20xnpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:79:d5:97:75:f4:f9:96:13:b8:56:67:27:9a:88:ce:2a:61:
ba:0a:24:12:94:75:fd:97:39:08:35:12:b2:4b:38:df:da:c5:
99:5f:fa:a5:b6:b1:a3:7f:6e:cc:d3:83:b4:44:92:ef:0c:24:
62:ac:d5:08:46:18:11:dd:3b:b7:c7:95:7a:59:63:cd:62:04:
df:01:a0:1e:fe:09:14:f0:8d:93:37:4f:44:71:34:f6:8c:9a:
3f:5f:e5:72:22:e7:fc:69:75:b6:f7:8d:29:4d:48:3e:d4:2b:
ff:0d:e7:ba:02:e4:1d:8c:78:ff:a6:bb:1f:0b:47:09:8b:d2:
1a:4f:b9:e1:06:6e:a7:73:7f:a2:a4:3f:a6:bb:4c:f6:40:2b:
a0:84:eb:a4:7b:7c:29:48:22:66:80:2c:24:42:c9:5f:59:be:
e7:bd:3d:f2:d5:78:55:bb:68:0f:26:cc:41:1c:ff:ff:46:60:
4f:30:b1:49:66:71:4c:cd:01:05:3f:56:b0:ea:96:13:c7:05:
26:2a:ff:d5:ff:c3:a0:22:47:3c:6f:26:7f:29:41:7a:b6:e3:
63:1b:27:2e:90:e6:6c:8f:95:68:d3:55:07:a9:c6:34:41:17:
29:62:07:79:c9:d0:5a:03:cb:35:ee:23:3d:66:f4:7f:f8:91:
95:61:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:17 2025 by rpki-client