Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/x1qi7vT6XlkpDqHOF8EBAKymy_8.roa
File: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (raw, json)
Hash identifier: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=
Subject key identifier: C7:5A:A2:EE:F4:FA:5E:59:29:0E:A1:CE:17:C1:01:00:AC:A6:CB:FF
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019428240D2B0B260E8F5C3D5C09EAF4D8F0
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/x1qi7vT6XlkpDqHOF8EBAKymy_8.roa
Signing time: Thu 02 Jan 2025 17:50:38 +0000
ROA not before: Thu 02 Jan 2025 17:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 82.163.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:0d:2b:0b:26:0e:8f:5c:3d:5c:09:ea:f4:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c75aa2eef4fa5e59290ea1ce17c10100aca6cbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:e2:a3:52:41:8a:ed:6b:df:b3:4a:58:f8:
d1:95:cf:fd:64:82:f5:07:91:e2:40:38:f2:35:95:
cb:8d:46:1b:67:39:25:8e:67:61:e3:5d:d6:2c:23:
8a:1a:73:4e:ac:49:7d:6d:12:11:d0:75:86:3c:6c:
a8:68:16:2d:80:64:93:32:fa:30:45:a1:90:1d:b2:
d4:67:7e:c4:b0:72:46:3b:c7:73:52:22:01:ef:de:
db:3a:47:26:7d:8d:7d:43:1f:d1:fd:dd:bf:77:ca:
42:c4:84:84:2a:f6:00:eb:b2:25:39:08:3b:1b:7a:
24:75:f6:24:e9:d9:19:d0:26:b8:93:73:11:33:2d:
85:c0:1f:0a:04:e2:e2:cb:7f:fb:60:eb:db:28:d7:
d3:27:e6:a8:c9:b2:eb:1c:90:cf:ec:98:5a:f6:1d:
10:93:d6:22:56:4b:fd:e4:6d:bc:e8:69:43:ed:08:
80:5e:a6:99:0f:f9:79:36:45:e3:01:78:be:84:26:
f4:10:24:7b:74:c1:2b:a3:27:41:d3:d5:57:a8:b1:
93:05:94:d0:b7:b0:d0:85:71:55:2a:f2:2e:d0:47:
28:fc:f0:56:1e:4b:44:f6:3e:36:b2:c1:db:49:82:
5d:d1:49:cb:24:52:23:b0:c7:d3:21:ab:5a:94:04:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:A2:EE:F4:FA:5E:59:29:0E:A1:CE:17:C1:01:00:AC:A6:CB:FF
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/x1qi7vT6XlkpDqHOF8EBAKymy_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.68.0/22
Signature Algorithm: sha256WithRSAEncryption
86:36:d2:d3:d1:f6:a4:ec:81:d0:9d:6c:4c:95:ba:8e:10:5a:
1c:41:e7:1e:82:a7:c8:f6:dd:e5:dd:1f:16:64:61:07:bb:b4:
a3:91:55:60:85:16:7f:07:58:d2:e5:c9:bc:a0:e9:23:4d:a7:
f6:9d:7f:e8:88:19:1c:77:d0:0c:9e:a7:bd:d6:54:11:1f:c3:
28:12:99:c6:b3:e2:ec:52:26:58:83:44:55:48:67:87:54:15:
e6:d9:6d:5e:ac:18:12:17:1b:d1:20:07:c8:b3:0c:41:2d:3a:
2f:d0:ed:ae:82:e1:8b:fe:a2:fe:85:d2:ec:db:bb:f9:aa:3a:
26:f5:f0:06:5b:7f:2d:0a:37:ac:42:cf:ab:71:96:35:f7:a0:
ee:e7:d9:b9:3d:3f:d6:68:c8:93:b7:d9:1f:9e:4a:91:c2:c4:
6d:87:27:8f:a6:69:62:9c:7b:46:d7:fb:94:7e:92:02:b1:66:
68:a6:31:7c:46:27:d4:08:48:57:6d:77:4e:12:93:d8:d7:64:
2d:55:2c:17:f4:c7:3b:14:b1:05:4e:c5:59:61:1c:8f:6e:3a:
7a:ab:6f:c1:10:9b:31:13:f7:4c:f1:df:fc:9f:76:aa:46:8f:
f2:af:27:3d:38:19:a5:e1:42:9f:97:6d:16:e3:1e:e5:40:20:
82:d4:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:56 2025 by rpki-client