Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ANCBIMX3Y4oybUfdoUmenlbBjLg.roa
File: ANCBIMX3Y4oybUfdoUmenlbBjLg.roa (raw, json)
Hash identifier: YkTLfHkkrbWVuYJqkM4Zw+I/FaK8KMcP1mXrRub/5bY=
Subject key identifier: 00:D0:81:20:C5:F7:63:8A:32:6D:47:DD:A1:49:9E:9E:56:C1:8C:B8
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01955B7047DA923DF8B3D74C2531ED50F513
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ANCBIMX3Y4oybUfdoUmenlbBjLg.roa
Signing time: Mon 03 Mar 2025 09:57:19 +0000
ROA not before: Mon 03 Mar 2025 09:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 82.206.80.0/22 maxlen: 22
82.206.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:70:47:da:92:3d:f8:b3:d7:4c:25:31:ed:50:f5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Mar 3 09:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00d08120c5f7638a326d47dda1499e9e56c18cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:49:84:9f:a3:4a:45:75:1f:82:9a:68:8f:d8:
73:a9:c9:bc:07:99:58:bb:4b:4e:5e:28:a1:b2:07:
91:98:cb:9d:8b:80:01:1b:ed:e8:ce:1b:89:d4:dc:
c8:ed:34:12:ce:73:aa:21:f3:29:f3:fe:b4:b2:4d:
e0:21:c9:3e:27:3c:df:5e:1f:81:df:71:b5:bb:2a:
06:ca:1c:8a:69:20:1d:9c:19:d8:87:ce:f0:be:07:
05:7f:b5:44:19:b2:c1:7c:9c:1f:84:a0:41:07:c1:
b4:3b:f9:2c:c2:df:c1:8a:65:1e:36:7d:76:25:90:
87:7c:74:87:df:c3:d2:2c:a7:8e:46:61:74:11:bb:
9d:70:31:e5:ad:fb:e2:e3:d7:fb:f0:8e:34:b7:2e:
63:93:a8:9b:b2:c3:5f:5d:dd:71:94:7d:4d:aa:9c:
4a:d8:4e:c9:2e:dd:2c:e8:f8:4a:40:3d:45:85:8d:
2d:1b:24:5b:7f:99:b9:58:82:ea:6a:25:bb:c7:55:
84:4d:d1:1e:14:fd:a5:61:e3:f5:c4:3c:ee:93:f0:
a1:65:e6:29:09:61:1a:9c:70:28:31:77:c3:ce:99:
93:36:31:9d:2c:fd:fa:03:85:95:30:4e:fc:76:67:
71:9c:59:43:8a:22:e1:8c:ba:e0:5f:0b:16:8e:4c:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:81:20:C5:F7:63:8A:32:6D:47:DD:A1:49:9E:9E:56:C1:8C:B8
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ANCBIMX3Y4oybUfdoUmenlbBjLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.80.0/21
Signature Algorithm: sha256WithRSAEncryption
49:a7:48:68:ef:64:f9:e1:08:ef:e4:f7:a5:fb:87:e3:94:8a:
8c:29:33:0d:a9:82:74:ea:69:ff:6f:7f:55:99:4e:c4:6b:6d:
e8:16:fc:98:ba:ae:4d:2d:7d:80:70:54:0d:37:da:20:d0:9b:
a5:5f:82:fb:11:a5:d9:02:e5:1d:45:74:40:f7:9b:e6:52:d8:
ba:ef:d6:24:23:bb:43:9b:40:20:7e:44:0c:e1:01:18:89:29:
a1:19:44:11:c0:3e:d2:69:75:f8:29:28:1b:d2:e0:47:54:05:
cd:54:b8:6b:d5:18:6e:ef:56:a7:b4:4f:37:fb:d7:66:ce:11:
a9:49:03:13:fc:12:c1:81:a0:d8:13:ef:7b:5c:1a:4d:29:75:
82:ba:f1:9a:14:67:7d:d3:70:1b:f7:1c:bc:4c:56:cb:5c:b2:
74:ca:f9:92:3a:f3:b0:81:86:02:ff:70:95:ab:89:e4:c9:1b:
84:91:54:3c:8f:ef:4b:24:15:65:4c:e8:fa:39:02:81:21:90:
20:b7:15:cb:df:99:e6:84:c9:2b:b6:b1:03:a8:64:1f:c3:4e:
de:fb:27:cd:40:18:80:2c:12:e4:2a:e4:19:a7:bd:87:8f:62:
54:8c:d4:62:5a:bb:73:be:9d:00:2c:9a:b7:54:94:04:db:7b:
39:35:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:53:45 2025 by rpki-client