Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fN0Kg5F7R676aQ0-4AGyu2aIgCw.roa
File: fN0Kg5F7R676aQ0-4AGyu2aIgCw.roa (raw, json)
Hash identifier: IQ1rSaWEmmfGk3MU/0ov4HOSF7xEQONMVWfZkHS0FkQ=
Subject key identifier: 7C:DD:0A:83:91:7B:47:AE:FA:69:0D:3E:E0:01:B2:BB:66:88:80:2C
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018D63E879AEE158C73621A1A14C0BE39DB5
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fN0Kg5F7R676aQ0-4AGyu2aIgCw.roa
Signing time: Thu 01 Feb 2024 09:03:16 +0000
ROA not before: Thu 01 Feb 2024 09:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 82.206.32.0/21 maxlen: 24
82.206.40.0/21 maxlen: 24
82.206.48.0/21 maxlen: 24
82.206.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:e8:79:ae:e1:58:c7:36:21:a1:a1:4c:0b:e3:9d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 1 09:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cdd0a83917b47aefa690d3ee001b2bb6688802c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ed:d3:d8:f4:07:31:d0:03:04:19:2c:9c:2e:
ad:09:40:97:6d:9b:b7:ed:f0:6d:bb:03:4f:82:88:
6a:d8:cf:f4:96:df:52:77:77:24:ec:ed:20:55:04:
77:04:ff:63:e5:d6:96:9c:13:42:a6:7d:24:24:61:
fb:9c:44:a8:6b:6e:17:ef:36:5b:49:51:2b:49:87:
83:ef:6a:d7:7f:d0:97:d5:65:3a:9d:1c:2a:ab:fd:
78:9e:78:42:30:a7:d7:94:c0:f0:7d:19:20:6c:16:
05:ee:ed:33:3a:a8:63:a9:e3:33:e9:d5:aa:55:7b:
fd:f5:43:f8:ea:93:5f:59:38:2a:0f:60:90:a2:f1:
20:5c:22:c3:68:26:86:3c:11:cc:d3:a2:d3:a4:20:
30:d9:6a:7c:4f:8e:bc:f3:61:62:ac:1d:61:01:da:
51:62:d8:7c:cc:40:30:07:9c:d9:9c:26:f2:ff:0e:
53:69:3b:3a:a6:66:cd:5e:01:df:e5:03:bf:72:17:
e4:43:e7:df:c6:31:ce:fa:06:c7:5f:2d:fe:37:c2:
0c:6a:64:e5:7d:fb:1c:fd:fb:fa:54:26:c7:9b:cd:
02:eb:2a:b9:72:7e:9e:50:07:48:95:fb:9f:a3:8d:
63:a7:6d:0b:16:3e:fa:6a:1e:f2:92:d3:01:84:1f:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:0A:83:91:7B:47:AE:FA:69:0D:3E:E0:01:B2:BB:66:88:80:2C
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fN0Kg5F7R676aQ0-4AGyu2aIgCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:7f:a0:73:4e:09:46:70:a3:a9:71:b6:64:5c:da:31:ad:b1:
01:8b:29:80:b2:ee:95:33:d8:97:5c:8c:5a:e0:43:73:61:c4:
07:0e:07:fc:a9:30:ad:4a:33:dc:8c:e8:46:4f:57:1d:91:f9:
9f:06:db:f7:dc:5c:54:88:f8:5c:66:2d:15:7c:27:8f:4f:1f:
ff:d1:77:0b:ac:6e:04:f5:bf:07:a4:0c:01:c2:c7:69:1a:2b:
d3:8e:a3:52:ca:8d:26:e8:99:da:fd:45:3d:aa:b5:a9:3e:f9:
ed:ca:5c:09:a9:3a:2e:85:85:95:23:77:10:0b:c2:f4:10:cc:
84:7c:dd:d8:06:6f:d6:db:2e:1a:0f:7e:33:52:8a:c3:df:23:
28:0c:d6:89:c7:91:3a:2a:b3:f4:7c:74:b6:91:82:91:d2:b8:
88:7a:8f:23:0f:4f:50:01:b5:6d:88:db:dd:a6:c2:f3:a4:18:
36:df:21:18:1b:80:bb:41:87:d9:3c:3e:c1:76:b2:45:59:9b:
a1:a5:6b:65:af:86:14:0a:d3:b4:64:e0:71:98:14:e3:10:e5:
34:e2:7f:d6:1f:08:8d:93:bc:a9:34:36:79:ed:44:0a:c5:85:
4c:e1:ea:be:ab:32:3b:72:bf:ce:e5:cd:70:92:85:88:41:c0:
3e:78:0f:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1j6Hmu4VjHNiGhoUwL4521MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjQwMjAxMDkwMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2RkMGE4MzkxN2I0N2FlZmE2OTBkM2VlMDAxYjJiYjY2ODg4MDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu3T2PQHMdADBBksnC6tCUCXbZu3
7fBtuwNPgohq2M/0lt9Sd3ck7O0gVQR3BP9j5daWnBNCpn0kJGH7nESoa24X7zZb
SVErSYeD72rXf9CX1WU6nRwqq/14nnhCMKfXlMDwfRkgbBYF7u0zOqhjqeMz6dWq
VXv99UP46pNfWTgqD2CQovEgXCLDaCaGPBHM06LTpCAw2Wp8T46882FirB1hAdpR
Yth8zEAwB5zZnCby/w5TaTs6pmbNXgHf5QO/chfkQ+ffxjHO+gbHXy3+N8IMamTl
ffsc/fv6VCbHm80C6yq5cn6eUAdIlfufo41jp20LFj76ah7yktMBhB8T1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHzdCoORe0eu+mkNPuABsrtmiIAsMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvZk4wS2c1RjdSNjc2YVEwLTRBR3l1MmFJZ0N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUs4gMA0G
CSqGSIb3DQEBCwUAA4IBAQBef6BzTglGcKOpcbZkXNoxrbEBiymAsu6VM9iXXIxa
4ENzYcQHDgf8qTCtSjPcjOhGT1cdkfmfBtv33FxUiPhcZi0VfCePTx//0XcLrG4E
9b8HpAwBwsdpGivTjqNSyo0m6Jna/UU9qrWpPvntylwJqTouhYWVI3cQC8L0EMyE
fN3YBm/W2y4aD34zUorD3yMoDNaJx5E6KrP0fHS2kYKR0riIeo8jD09QAbVtiNvd
psLzpBg23yEYG4C7QYfZPD7BdrJFWZuhpWtlr4YUCtO0ZOBxmBTjEOU04n/WHwiN
k7ypNDZ57UQKxYVM4eq+qzI7cr/O5c1wkoWIQcA+eA9w
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:57 2025 by rpki-client