Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/MIdNBGm4gncs1PzT3cvorr-h_Wo.roa
File: MIdNBGm4gncs1PzT3cvorr-h_Wo.roa (raw, json)
Hash identifier: 27Zrzym6x/MZXwKzakq+Zh+/pCyid6oEjXeyRNcwedo=
Subject key identifier: 30:87:4D:04:69:B8:82:77:2C:D4:FC:D3:DD:CB:E8:AE:BF:A1:FD:6A
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018DC0D5A0825DE47D4BF8F20E05A3E95421
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/MIdNBGm4gncs1PzT3cvorr-h_Wo.roa
Signing time: Mon 19 Feb 2024 10:07:22 +0000
ROA not before: Mon 19 Feb 2024 10:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 82
IP address blocks: 82.206.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:d5:a0:82:5d:e4:7d:4b:f8:f2:0e:05:a3:e9:54:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 19 10:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30874d0469b882772cd4fcd3ddcbe8aebfa1fd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:8f:c6:a9:63:3d:eb:76:b3:75:8d:9f:3c:
15:8c:96:6b:d6:c5:99:f1:a5:2e:0a:fe:35:a7:1f:
2c:e6:52:c9:b0:43:d9:39:c1:be:5f:6d:a8:4e:7e:
08:40:be:2f:fb:03:c9:24:a8:73:a5:37:b1:28:79:
66:eb:59:05:52:90:32:73:f5:a5:37:99:af:ab:bf:
6e:d6:a5:58:cd:96:21:73:86:7b:8d:3f:98:a5:19:
53:ab:59:d3:7a:ff:11:1c:98:b6:74:99:9e:f7:be:
69:f6:61:66:9f:91:a4:9e:1a:3f:8d:71:62:81:c9:
1d:77:b3:54:65:e1:3e:3d:e3:2c:65:26:c4:d7:11:
a6:b1:43:1e:b4:67:d2:74:dc:22:2c:9c:ad:4b:92:
d5:2a:5a:a4:bb:4b:f2:52:b6:4f:27:93:92:5f:52:
3c:f0:f3:64:28:b8:11:10:b8:78:5c:fc:07:1c:a4:
6f:59:04:67:b2:1f:95:50:a1:8c:96:2f:d0:70:13:
de:e9:3f:bd:5d:c6:de:3b:eb:b1:ad:53:8a:fd:39:
0f:23:0e:a0:08:b7:11:5d:1a:af:a5:63:d3:8c:19:
a2:00:dc:22:4e:c6:d0:a0:47:a2:44:ec:65:aa:7f:
99:b4:67:85:54:c6:b5:48:02:da:08:42:85:0c:1e:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:4D:04:69:B8:82:77:2C:D4:FC:D3:DD:CB:E8:AE:BF:A1:FD:6A
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/MIdNBGm4gncs1PzT3cvorr-h_Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:33:69:83:73:25:be:f4:83:1e:32:3f:29:c1:66:4a:4b:94:
1d:a2:ae:76:21:63:c7:6e:67:90:9c:cb:c0:1a:9e:20:f4:6c:
1b:aa:ab:e5:ce:ff:a2:cb:38:e5:1f:80:e3:28:11:b5:15:ad:
1f:e5:cd:d2:94:90:cd:5a:d0:aa:fe:04:8f:e1:e9:b5:75:6d:
7e:92:5b:d4:ec:ad:69:71:7d:c8:31:5e:7d:93:db:92:11:3b:
bb:34:0e:f1:d5:cc:e5:82:af:5d:32:7e:32:c6:e8:40:b3:97:
0c:aa:0e:21:75:1f:e3:dd:05:54:ea:f0:0c:7d:69:5f:b8:66:
fe:cb:1a:1f:36:f0:07:cb:77:49:58:34:65:b0:7a:88:19:16:
a0:52:fe:88:f8:8a:ea:09:b0:b3:ed:d4:d2:4e:f2:39:8f:78:
3f:81:b8:c3:71:26:92:de:44:38:78:93:55:f8:f9:6e:69:a3:
a2:02:c1:40:f7:ea:60:55:b1:11:a3:c3:71:e3:d8:f9:06:5b:
3e:c1:c9:ac:ec:d9:07:69:40:11:9d:52:aa:c3:63:6d:96:7e:
c5:25:3a:e0:7e:21:e9:c0:18:90:86:12:84:8d:60:52:92:c3:
2e:e3:e4:79:d7:2e:05:c0:70:8b:ae:32:65:27:f9:63:61:41:
1b:22:ba:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:20 2025 by rpki-client