Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/aRgkkoUQYvgPCtGv2BB93BFwEIw.roa
File: aRgkkoUQYvgPCtGv2BB93BFwEIw.roa (raw, json)
Hash identifier: LEiXPd5A6FhyJ2P7tzFOJ/ATZ6rcHMikGfi6tw/hcdE=
Subject key identifier: 69:18:24:92:85:10:62:F8:0F:0A:D1:AF:D8:10:7D:DC:11:70:10:8C
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018CC2DB1354759B4A75C39795A35638C7C6
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/aRgkkoUQYvgPCtGv2BB93BFwEIw.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 82.206.48.0/21 maxlen: 24
82.206.80.0/21 maxlen: 24
82.206.88.0/21 maxlen: 24
82.206.96.0/21 maxlen: 24
82.206.104.0/21 maxlen: 24
82.206.112.0/21 maxlen: 24
82.206.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:13:54:75:9b:4a:75:c3:97:95:a3:56:38:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69182492851062f80f0ad1afd8107ddc1170108c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:46:08:6d:73:e7:d2:4f:15:3a:be:50:be:01:
a2:bb:29:34:d0:22:dd:cd:ec:9f:95:81:c7:50:a3:
b2:57:84:3b:03:d4:db:26:1e:6e:ff:36:10:20:1e:
92:82:68:d1:f9:d9:07:b5:47:46:f6:03:24:2a:1d:
a5:69:a2:ff:2d:0e:b9:d9:ec:79:1b:43:da:83:28:
d8:05:15:f4:cd:33:16:7c:55:d3:d4:2a:de:4c:c6:
5d:52:9d:2c:96:8e:39:10:06:fa:da:4e:73:d5:21:
76:11:b1:df:29:24:fb:a0:42:f8:26:32:9f:09:42:
85:58:e0:7c:86:cb:6c:05:1a:ab:f2:f2:4a:a3:44:
07:b5:d6:74:d7:0a:e2:0c:aa:55:e0:08:ed:29:c8:
58:a0:a5:4a:61:f0:3a:6a:de:22:40:1c:e1:fe:cd:
2a:b9:f4:41:97:a3:3d:a8:c4:16:3c:7a:90:04:99:
cd:70:a2:40:73:89:9b:81:d1:e6:e7:a1:90:6a:82:
cc:3b:7d:44:cf:44:ee:c0:82:17:60:17:d0:8d:32:
9e:e9:2a:84:72:2e:9f:0e:cf:a2:49:a6:5d:36:07:
6c:54:56:a4:46:f0:68:e8:67:a5:43:4f:00:50:b7:
31:87:37:22:05:5d:e9:72:d3:6f:29:58:20:c5:e0:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:24:92:85:10:62:F8:0F:0A:D1:AF:D8:10:7D:DC:11:70:10:8C
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/aRgkkoUQYvgPCtGv2BB93BFwEIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.48.0/21
82.206.80.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
7c:59:62:af:9a:72:93:e7:d1:d4:13:47:e3:89:e9:dd:68:9b:
29:f7:19:64:70:cd:ad:cd:f9:e0:ac:76:2b:29:36:a8:b8:10:
b6:e8:dd:b6:11:40:2f:58:9a:c2:94:df:ea:c3:33:4e:11:02:
2a:c1:e0:e4:62:6e:30:8f:f2:cf:14:95:f6:79:0a:cd:46:4c:
39:89:82:a1:91:1f:e9:77:4f:1e:4c:57:52:68:b2:cd:71:8f:
13:1a:23:66:3f:5a:37:60:81:66:3b:57:46:02:1a:2b:a2:59:
b7:ca:ba:4f:81:65:02:93:8d:8a:ef:fb:e5:64:be:0a:0d:fa:
24:19:5f:cd:30:c2:f3:ba:46:8c:f8:16:66:4e:62:ef:47:7b:
e7:37:ce:6a:dc:a6:63:db:54:62:23:4c:ee:aa:fd:91:73:22:
80:53:53:b9:2f:09:32:0a:4e:4d:e8:f0:21:74:73:6b:f5:dc:
62:9e:ee:3a:26:c9:8a:f5:e8:23:a8:9b:1e:53:45:20:27:ee:
14:15:7e:a3:a3:be:c9:5d:44:e6:e5:17:d0:76:68:28:29:04:
e6:bb:25:df:81:12:8f:3b:08:ba:58:02:0d:0f:91:fb:69:02:
af:b7:33:62:53:81:44:ab:f9:55:36:41:56:e4:58:25:ae:83:
83:cc:e7:80
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzC2xNUdZtKdcOXlaNWOMfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjQwMTAxMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTE4MjQ5Mjg1MTA2MmY4MGYwYWQxYWZkODEwN2RkYzExNzAxMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEYIbXPn0k8VOr5QvgGiuyk00CLd
zeyflYHHUKOyV4Q7A9TbJh5u/zYQIB6SgmjR+dkHtUdG9gMkKh2laaL/LQ652ex5
G0PagyjYBRX0zTMWfFXT1CreTMZdUp0slo45EAb62k5z1SF2EbHfKST7oEL4JjKf
CUKFWOB8hstsBRqr8vJKo0QHtdZ01wriDKpV4AjtKchYoKVKYfA6at4iQBzh/s0q
ufRBl6M9qMQWPHqQBJnNcKJAc4mbgdHm56GQaoLMO31Ez0TuwIIXYBfQjTKe6SqE
ci6fDs+iSaZdNgdsVFakRvBo6GelQ08AULcxhzciBV3pctNvKVggxeB8SQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGkYJJKFEGL4DwrRr9gQfdwRcBCMMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvYVJna2tvVVFZdmdQQ3RHdjJCQjkzQkZ3RUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDUs4wMAwD
BARSzlADBAdSzgAwDQYJKoZIhvcNAQELBQADggEBAHxZYq+acpPn0dQTR+OJ6d1o
myn3GWRwza3N+eCsdispNqi4ELbo3bYRQC9YmsKU3+rDM04RAirB4ORibjCP8s8U
lfZ5Cs1GTDmJgqGRH+l3Tx5MV1Joss1xjxMaI2Y/WjdggWY7V0YCGiuiWbfKuk+B
ZQKTjYrv++VkvgoN+iQZX80wwvO6Roz4FmZOYu9He+c3zmrcpmPbVGIjTO6q/ZFz
IoBTU7kvCTIKTk3o8CF0c2v13GKe7jomyYr16COomx5TRSAn7hQVfqOjvsldRObl
F9B2aCgpBOa7Jd+BEo87CLpYAg0PkftpAq+3M2JTgUSr+VU2QVbkWCWug4PM54A=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:43 2025 by rpki-client