Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Mx1N9oz-gWto9-seXtCsBi1wxdk.roa
File: Mx1N9oz-gWto9-seXtCsBi1wxdk.roa (raw, json)
Hash identifier: WLQmk4zlboCDUFasKMsbR6d4YYZ0ZWnvYT9RH1qumsI=
Subject key identifier: 33:1D:4D:F6:8C:FE:81:6B:68:F7:EB:1E:5E:D0:AC:06:2D:70:C5:D9
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194236A14BF5FA005C3C5FFE10D4DF8AA9F
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Mx1N9oz-gWto9-seXtCsBi1wxdk.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 82.206.48.0/21 maxlen: 24
82.206.80.0/20 maxlen: 20
82.206.80.0/21 maxlen: 24
82.206.88.0/21 maxlen: 24
82.206.96.0/19 maxlen: 19
82.206.96.0/21 maxlen: 24
82.206.104.0/21 maxlen: 24
82.206.112.0/21 maxlen: 24
82.206.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:14:bf:5f:a0:05:c3:c5:ff:e1:0d:4d:f8:aa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=331d4df68cfe816b68f7eb1e5ed0ac062d70c5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:26:85:1c:28:cb:30:c8:13:e9:d0:40:27:
04:18:84:b9:2a:17:21:6e:28:ca:6c:59:7d:3a:c1:
bb:91:38:e9:a3:2b:b8:ab:2b:ed:9e:ad:cc:bf:07:
0d:27:21:a2:4c:4d:6f:7e:23:28:df:f7:68:00:5e:
a8:c0:2b:07:08:8f:6a:12:39:6a:28:99:6c:29:f4:
60:8e:c1:2e:d4:30:b0:78:56:d6:c4:2c:77:61:15:
2b:fe:d0:28:5e:16:8d:d1:b4:22:0d:d1:06:97:c7:
d3:10:f2:b8:9e:d6:be:78:65:1d:60:0c:f6:4e:5e:
9c:a3:f1:ff:c2:cf:6f:6d:27:a7:73:88:dd:ab:55:
eb:ba:57:21:74:a6:f4:91:fe:53:45:f2:29:5b:bb:
f3:0f:24:6d:53:ab:73:e3:8f:cd:3f:2f:5a:2b:75:
ff:f6:bb:b2:61:71:ea:e6:18:d7:46:1a:a7:ce:44:
14:95:cb:cf:b3:78:aa:cd:fc:79:59:ab:d9:8c:55:
ed:5b:12:b1:01:3c:73:f8:dd:e1:18:cc:45:aa:dd:
c8:4b:cd:bf:cd:b2:39:2b:cc:f2:f8:1d:05:f9:f5:
72:7b:13:41:2d:11:ed:7b:58:1e:64:92:4a:2e:b4:
4e:96:19:72:d2:11:9b:d8:ea:c0:d8:af:1e:f6:ce:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1D:4D:F6:8C:FE:81:6B:68:F7:EB:1E:5E:D0:AC:06:2D:70:C5:D9
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/Mx1N9oz-gWto9-seXtCsBi1wxdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.48.0/21
82.206.80.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
12:da:06:97:e7:aa:29:ba:b2:b9:d4:08:b8:cf:a4:a1:5b:5c:
51:fd:21:61:ca:23:db:c6:1c:e9:56:60:74:f0:9c:dc:5c:86:
95:08:b0:3e:5c:f0:3f:2c:9a:a3:1d:62:4c:9a:68:7b:b3:86:
74:ab:1c:08:7d:ed:3c:64:44:38:20:0c:de:8c:c5:96:ce:14:
64:e4:50:91:c3:97:33:37:49:5f:b9:26:5d:5c:c1:f3:4a:b0:
e3:30:7c:78:a9:21:02:4c:0c:f9:07:cc:e8:0d:79:c1:39:94:
fe:5b:27:a4:1f:2e:81:43:62:af:e8:f6:a9:ae:07:85:d4:76:
63:e3:0d:86:bc:0b:3d:5c:cc:9b:0c:d0:29:83:a5:4d:45:ea:
c0:43:bf:c2:81:4a:1a:f1:13:c3:e8:0e:7a:58:92:7d:9c:7c:
84:35:6a:b0:d1:4d:4e:2f:82:ec:ec:55:20:7f:e3:7b:d6:72:
f7:b8:af:3b:1c:8d:c3:30:5c:51:c1:d2:a8:b3:6e:e8:fa:dc:
a9:1f:31:b2:b0:ef:89:f3:9f:90:01:cc:b0:c3:14:bc:18:5a:
9c:9b:48:1b:dd:55:fb:b0:88:7a:4a:de:d0:4d:91:40:14:6d:
e0:6f:56:d4:22:c4:d3:25:3d:a1:3c:f8:d4:12:e0:39:63:6d:
6f:4e:bc:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:48 2025 by rpki-client