Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/cyPQGsSRJOZZBelVTet1lI5LqBk.roa
File: cyPQGsSRJOZZBelVTet1lI5LqBk.roa (raw, json)
Hash identifier: 69z/adX/ecnpJJ5afhme9iLohPG+YWz9SY7d85zrWaY=
Subject key identifier: 73:23:D0:1A:C4:91:24:E6:59:05:E9:55:4D:EB:75:94:8E:4B:A8:19
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018B7247969E8AF8EAABBDDB2424C113754A
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/cyPQGsSRJOZZBelVTet1lI5LqBk.roa
Signing time: Fri 27 Oct 2023 17:56:16 +0000
ROA not before: Fri 27 Oct 2023 17:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21106
IP address blocks: 82.206.0.0/21 maxlen: 24
82.206.8.0/21 maxlen: 24
82.206.16.0/21 maxlen: 24
82.206.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:47:96:9e:8a:f8:ea:ab:bd:db:24:24:c1:13:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Oct 27 17:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7323d01ac49124e65905e9554deb75948e4ba819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:a0:74:f4:7c:c4:26:34:8a:5e:a9:c2:9b:
c6:41:aa:71:63:95:4b:4c:17:c1:16:bf:a3:84:86:
c5:85:85:b0:62:df:31:f6:0c:f9:94:43:43:35:0b:
8e:ea:3d:2f:df:ba:47:db:c4:ef:21:db:ef:dc:5a:
c8:db:14:66:2d:e1:ad:03:86:b0:1f:04:e8:1d:7b:
35:be:eb:c1:f2:98:90:9f:41:ff:01:f6:f5:d5:2c:
9c:e2:80:d6:72:b6:b7:37:23:24:0b:32:77:c1:5c:
b9:f5:58:94:da:78:88:44:ec:ec:9d:33:e0:f5:7d:
6c:4d:6f:92:41:8d:e9:7b:c0:56:17:e4:d8:2a:68:
a5:db:15:f5:77:4f:83:f8:1d:7c:e9:70:ca:bd:9e:
70:41:72:c7:6c:d4:bb:52:e3:cd:eb:05:e9:cf:a8:
cb:c5:a3:2e:57:1c:53:f6:cf:f4:bc:6c:34:64:61:
2d:90:1f:3a:49:2e:93:9f:98:b7:53:8b:63:55:d6:
65:8b:70:e0:76:d5:a8:b8:a3:5b:b5:e2:de:7f:1a:
fc:6b:e4:aa:1f:58:59:ac:5c:d0:13:a3:8d:98:f8:
b5:89:12:c5:43:33:08:e6:af:ae:a3:b7:c0:5c:4e:
36:68:aa:c1:2e:de:c5:57:5a:73:61:7d:f6:a3:b1:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:D0:1A:C4:91:24:E6:59:05:E9:55:4D:EB:75:94:8E:4B:A8:19
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/cyPQGsSRJOZZBelVTet1lI5LqBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:df:71:fb:39:11:52:3b:7a:14:cb:0e:22:7a:f3:f7:8e:9a:
bf:52:f6:b3:52:cb:3f:54:b3:5c:e6:90:b5:ba:1b:68:b2:7e:
fc:5d:05:ec:9a:39:71:70:8b:78:b8:1c:57:4b:e7:20:89:4f:
d0:7e:51:5a:85:46:ad:49:63:a5:57:23:67:2f:9b:6b:7f:53:
ad:67:78:fd:98:8e:8c:58:84:7d:d6:bf:d1:dd:9a:11:f7:82:
ee:83:f1:8b:a3:27:82:54:65:d8:38:7c:e0:18:26:52:bc:36:
77:53:da:79:4f:a1:e4:00:56:ca:51:8c:ec:b9:18:db:2a:42:
bb:97:cd:f1:ca:46:40:ab:1b:03:3a:23:91:73:18:e7:41:22:
d4:4e:ce:f9:24:c4:a0:3f:bd:3a:04:cd:66:97:db:40:75:7f:
eb:8b:cb:a9:7d:ff:58:c4:b4:0e:8f:18:ac:67:4c:c6:bb:8d:
50:a3:19:2a:8b:b0:0a:69:f3:c3:89:c1:bb:ba:1a:45:cc:3b:
08:7a:76:b4:8e:7f:a6:37:a6:9a:12:b9:9b:03:9a:cd:23:fc:
8b:03:28:1b:f3:3c:63:56:d9:53:68:16:8d:d9:f9:08:88:dc:
24:b0:46:87:83:9b:01:d0:60:a0:a1:13:e9:ee:4c:74:c5:39:
dc:a1:64:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtyR5aeivjqq73bJCTBE3VKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjMxMDI3MTc1NjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzIzZDAxYWM0OTEyNGU2NTkwNWU5NTU0ZGViNzU5NDhlNGJhODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyagdPR8xCY0il6pwpvGQapxY5VL
TBfBFr+jhIbFhYWwYt8x9gz5lENDNQuO6j0v37pH28TvIdvv3FrI2xRmLeGtA4aw
HwToHXs1vuvB8piQn0H/Afb11Syc4oDWcra3NyMkCzJ3wVy59ViU2niIROzsnTPg
9X1sTW+SQY3pe8BWF+TYKmil2xX1d0+D+B186XDKvZ5wQXLHbNS7UuPN6wXpz6jL
xaMuVxxT9s/0vGw0ZGEtkB86SS6Tn5i3U4tjVdZli3DgdtWouKNbteLefxr8a+Sq
H1hZrFzQE6ONmPi1iRLFQzMI5q+uo7fAXE42aKrBLt7FV1pzYX32o7GJyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMj0BrEkSTmWQXpVU3rdZSOS6gZMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvY3lQUUdzU1JKT1paQmVsVlRldDFsSTVMcUJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUs4AMA0G
CSqGSIb3DQEBCwUAA4IBAQAe33H7ORFSO3oUyw4ievP3jpq/UvazUss/VLNc5pC1
uhtosn78XQXsmjlxcIt4uBxXS+cgiU/QflFahUatSWOlVyNnL5trf1OtZ3j9mI6M
WIR91r/R3ZoR94Lug/GLoyeCVGXYOHzgGCZSvDZ3U9p5T6HkAFbKUYzsuRjbKkK7
l83xykZAqxsDOiORcxjnQSLUTs75JMSgP706BM1ml9tAdX/ri8upff9YxLQOjxis
Z0zGu41Qoxkqi7AKafPDicG7uhpFzDsIena0jn+mN6aaErmbA5rNI/yLAygb8zxj
VtlTaBaN2fkIiNwksEaHg5sB0GCgoRPp7kx0xTncoWRB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:25 2025 by rpki-client