Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/RLbe6cMXVc-yAzPx21AiL05w5LI.roa
File: RLbe6cMXVc-yAzPx21AiL05w5LI.roa (raw, json)
Hash identifier: ocpmqEV/7h2LCW9N0VbwV4omM+cwSHdCItrgbXrjmU4=
Subject key identifier: 44:B6:DE:E9:C3:17:55:CF:B2:03:33:F1:DB:50:22:2F:4E:70:E4:B2
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01946F8DBA0DFED17E8C81A849E633E73E51
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/RLbe6cMXVc-yAzPx21AiL05w5LI.roa
Signing time: Thu 16 Jan 2025 14:39:06 +0000
ROA not before: Thu 16 Jan 2025 14:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 82.206.80.0/21 maxlen: 24
82.206.88.0/21 maxlen: 24
82.206.96.0/20 maxlen: 24
82.206.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:8d:ba:0d:fe:d1:7e:8c:81:a8:49:e6:33:e7:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 16 14:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44b6dee9c31755cfb20333f1db50222f4e70e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:05:ef:f0:ed:0c:60:67:71:79:89:9f:e9:
6a:c0:d5:ee:ba:2e:89:d1:82:57:cf:59:07:f3:c3:
9a:43:69:d0:6d:00:26:2d:1c:cc:34:f0:fd:0e:60:
74:91:30:80:78:f3:c0:04:b0:97:7f:7e:96:3e:1a:
06:36:d9:1c:ef:07:64:7c:53:a6:35:2f:2d:5f:fc:
b1:09:e7:ac:94:ff:59:ff:69:f1:a3:31:34:db:1b:
17:ac:8b:29:b3:5e:84:7f:99:7b:77:ab:d6:75:26:
98:06:99:3b:5d:ed:e7:de:d4:eb:b3:91:6b:0c:f8:
e7:13:6c:a5:24:1a:17:8f:d6:6a:ff:e8:bb:04:99:
6d:76:f9:66:6c:70:93:cf:c5:48:7e:1c:d4:9a:90:
18:01:02:9c:62:d9:ca:6b:f9:d2:22:c4:f7:80:e6:
38:76:60:ab:6c:37:7a:cd:2c:88:bb:98:55:0c:6c:
d5:8f:a2:3f:cf:c8:9a:a9:d4:f2:43:1f:b1:f7:fd:
11:d6:3b:67:80:99:06:e1:2a:26:7d:a6:ea:40:33:
21:25:bc:86:34:c2:86:70:0a:d7:df:bc:72:3e:e5:
7c:2d:5c:2c:f2:b7:06:c3:87:f9:70:aa:7c:9a:b1:
ba:79:94:18:7d:5c:f3:ee:34:35:76:c3:69:1c:ee:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B6:DE:E9:C3:17:55:CF:B2:03:33:F1:DB:50:22:2F:4E:70:E4:B2
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/RLbe6cMXVc-yAzPx21AiL05w5LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.80.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
2d:46:01:34:f6:8a:9d:30:d7:2a:e4:51:d2:0e:d9:c2:88:ff:
d5:d2:fb:f8:ad:2f:85:71:1f:c9:31:13:33:ac:8c:ce:ca:ab:
36:fe:db:df:f4:43:19:b0:93:3b:44:53:2c:fe:d0:a8:74:80:
5c:2f:d1:ab:c7:8f:9b:88:98:a4:f6:f8:64:3b:91:93:aa:f9:
56:8d:1d:0b:33:86:9b:45:f2:54:8d:36:f5:ec:6f:e9:49:2f:
ce:0a:dc:37:7d:33:29:52:31:e3:25:b8:38:09:4a:ae:07:e8:
8b:f2:11:25:3f:c4:c7:76:f1:0b:ff:50:6b:3c:d0:7f:f4:e0:
77:50:a5:73:63:1a:9b:5c:a5:68:84:99:fc:4f:7b:3d:72:34:
4c:b9:88:65:89:67:1f:ab:b7:d7:3b:2d:9d:c3:cf:bc:db:6c:
1a:48:8a:7b:e1:25:45:6f:3b:b7:8a:e8:77:58:df:f7:8b:89:
2d:21:47:05:aa:81:50:f7:60:a4:f0:ca:f6:60:7f:e3:a8:87:
d7:f7:02:28:a1:7f:9a:15:6e:db:96:36:84:7e:3e:f1:52:61:
46:d1:3b:0b:dd:78:6a:69:3b:ff:d7:85:82:80:98:66:a1:29:
d3:b9:3e:34:9a:ee:a8:98:db:ba:9f:a3:41:e8:7c:4b:64:62:
2a:7d:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:46 2025 by rpki-client