Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/853516ELX-RyZjDXKKakErI_a0U.roa
File: 853516ELX-RyZjDXKKakErI_a0U.roa (raw, json)
Hash identifier: O6jsxrrBIthO1xik6xH4oQrdwmP/73M/uv5Y2YBF/mE=
Subject key identifier: F3:9D:F9:D7:A1:0B:5F:E4:72:66:30:D7:28:A6:A4:12:B2:3F:6B:45
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018E9DE92224F8B771EC2A0D891433DA52DB
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/853516ELX-RyZjDXKKakErI_a0U.roa
Signing time: Tue 02 Apr 2024 08:24:45 +0000
ROA not before: Tue 02 Apr 2024 08:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.206.4.0/22 maxlen: 22
82.206.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:e9:22:24:f8:b7:71:ec:2a:0d:89:14:33:da:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Apr 2 08:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39df9d7a10b5fe4726630d728a6a412b23f6b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:93:83:12:9c:55:15:2d:3b:10:29:9d:a4:
70:06:21:42:3b:8d:41:2a:db:73:c4:2e:52:d4:c6:
f2:fb:96:9d:d6:24:ae:f7:ae:8e:a3:5e:41:6c:51:
57:5e:9b:48:45:d5:4d:4e:7a:da:f7:f3:54:94:f4:
2f:cd:7c:68:1b:fe:15:32:5f:67:2f:c2:ee:af:5c:
4c:50:88:11:1e:51:f9:4b:64:33:d8:4f:1a:44:8c:
a3:60:8b:cd:10:68:d2:45:3b:57:db:0b:88:4b:6f:
ab:73:9a:82:9e:d2:08:ed:97:a0:19:3c:b1:91:21:
60:03:59:0a:01:91:ea:2f:f9:88:d7:01:fe:44:73:
ca:f1:63:ad:80:18:80:89:1a:92:35:de:93:a8:d3:
44:35:99:fe:12:c6:e3:7c:99:60:1b:da:7a:bc:8e:
4c:0a:f9:63:2b:44:ec:c3:06:3f:e8:07:2e:3a:ce:
f3:5f:4e:52:98:8a:18:5e:e7:4c:09:50:9d:58:40:
3a:68:a2:36:55:e2:7f:38:09:94:9a:ec:2a:dc:9a:
cc:1c:04:31:0b:63:4a:5a:ce:19:93:5c:ba:b9:ab:
9c:6d:95:71:7b:8b:c7:4b:73:39:b0:e4:26:5e:9c:
bc:67:00:81:05:c9:c1:ed:5c:a4:4d:d8:5b:a1:8a:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:F9:D7:A1:0B:5F:E4:72:66:30:D7:28:A6:A4:12:B2:3F:6B:45
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/853516ELX-RyZjDXKKakErI_a0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.4.0/22
82.206.64.0/21
Signature Algorithm: sha256WithRSAEncryption
10:5a:eb:64:66:43:6a:b4:94:c7:26:f6:59:d5:10:bb:72:63:
84:cd:a6:5f:d3:2c:56:9d:9d:3f:25:3a:9d:83:7b:7d:85:64:
99:ff:f9:54:cc:eb:e2:89:8b:ca:06:74:12:fd:6f:3d:41:55:
64:8c:53:2f:28:23:f6:61:87:96:9b:75:b1:56:43:09:6f:77:
fb:c1:a6:13:ad:b8:71:93:7c:08:ab:94:d2:56:2b:e3:e2:48:
52:59:ec:47:54:89:54:c2:e9:6b:91:f7:73:e6:64:02:09:8d:
3a:10:34:70:ab:96:a0:56:8a:ba:ff:cc:de:7b:df:7f:5f:f4:
2d:75:19:ba:84:77:0d:8f:19:db:0d:35:db:34:c6:5c:2e:7c:
81:a7:bc:c2:09:76:6a:fd:47:4e:0c:97:0f:06:80:1e:f9:8d:
5d:92:0c:b0:0a:84:d0:d0:d8:22:40:9d:82:7a:36:82:d4:9f:
0e:29:ac:85:e4:04:84:22:7d:85:89:d7:17:c9:e4:f0:73:10:
e9:21:ea:36:78:eb:da:37:8d:56:e0:82:9e:9f:2d:10:2f:be:
63:ec:8a:cb:2f:bf:8a:be:b6:4f:39:06:a2:7f:62:6f:fe:8c:
cd:7e:5e:33:bb:3b:29:24:85:c8:19:fb:8e:31:62:d9:8d:ea:
e0:03:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:49 2025 by rpki-client