Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa
File: Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa (raw, json)
Hash identifier: cBzZGlcz2mRnPCf/PBZJTLNK/ZEjrb5GaHlLhcC0rkI=
Subject key identifier: 02:D8:F9:15:BA:94:88:1B:B6:2C:B0:01:0A:91:84:CE:91:F4:4A:0E
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 0194BB5A55E0DF91383626836563A2830503
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa
Signing time: Fri 31 Jan 2025 07:54:06 +0000
ROA not before: Fri 31 Jan 2025 07:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31225
IP address blocks: 83.219.224.0/19 maxlen: 19
83.219.224.0/22 maxlen: 22
83.219.225.0/24 maxlen: 24
83.219.226.0/24 maxlen: 24
83.219.227.0/24 maxlen: 24
83.219.228.0/24 maxlen: 24
83.219.229.0/24 maxlen: 24
83.219.230.0/24 maxlen: 24
83.219.231.0/24 maxlen: 24
83.219.232.0/24 maxlen: 24
83.219.233.0/24 maxlen: 24
83.219.234.0/24 maxlen: 24
83.219.235.0/24 maxlen: 24
83.219.236.0/24 maxlen: 24
83.219.237.0/24 maxlen: 24
83.219.238.0/24 maxlen: 24
83.219.239.0/24 maxlen: 24
83.219.240.0/24 maxlen: 24
83.219.241.0/24 maxlen: 24
83.219.242.0/24 maxlen: 24
83.219.244.0/24 maxlen: 24
83.219.246.0/24 maxlen: 24
83.219.247.0/24 maxlen: 24
83.219.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5a:55:e0:df:91:38:36:26:83:65:63:a2:83:05:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jan 31 07:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02d8f915ba94881bb62cb0010a9184ce91f44a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:fc:3e:0e:5b:a5:7c:b2:99:a6:fd:86:e4:
b0:ec:b9:c9:94:86:55:9a:ca:81:17:92:72:be:a7:
4b:fc:29:66:23:6b:7e:d8:63:5a:a8:eb:e4:47:13:
94:6c:a8:26:62:67:51:c6:e6:11:99:80:7e:a1:4c:
9d:73:4b:00:91:8b:b2:97:5f:b8:c9:d8:1d:12:98:
2f:0b:5e:76:58:c6:03:d7:97:f5:d0:a0:82:7f:be:
54:82:ec:f7:51:f2:26:fe:76:72:0b:a2:54:bc:06:
44:dc:5a:e3:83:60:e2:06:cf:7c:a3:ff:51:ed:ce:
06:2c:7a:a4:23:cc:cf:af:58:5f:cc:c9:45:72:ed:
9d:44:91:85:6a:54:55:82:96:63:35:a2:6e:4f:01:
7c:b4:36:0b:a4:6f:05:65:51:b8:7f:22:7c:50:48:
f2:8d:f2:65:5b:a6:94:c9:01:5e:1f:18:92:e6:a9:
89:6f:d7:84:3c:70:1a:cc:8e:d4:17:17:68:1e:5d:
01:11:a7:d9:d8:fe:73:62:ff:08:5e:44:0f:49:b2:
35:97:d8:cb:8e:31:fc:03:ea:a3:e0:52:f8:a6:bf:
94:df:0d:19:51:b6:ab:17:7f:59:06:a4:0a:e9:2d:
f5:92:ae:64:fb:fa:98:ae:b1:39:a9:31:45:a8:c0:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:F9:15:BA:94:88:1B:B6:2C:B0:01:0A:91:84:CE:91:F4:4A:0E
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.224.0/19
Signature Algorithm: sha256WithRSAEncryption
24:ce:9f:6a:7b:ce:d2:56:53:c0:ba:43:59:89:c9:73:77:76:
a2:86:03:95:73:a6:85:87:b0:77:fd:86:42:ca:bf:dc:d7:91:
74:b1:73:87:b3:e4:23:ac:cb:d7:c6:e2:16:67:c4:be:da:02:
ec:6a:3d:21:30:a0:34:44:1c:27:19:ee:d9:02:32:74:3f:0c:
c1:1f:b6:33:47:8a:59:07:c9:5b:53:73:d3:3d:72:15:00:bf:
9b:68:0e:de:17:b5:b6:1d:4a:7b:7d:46:39:c8:24:1c:8b:45:
09:87:9c:f6:6a:7b:1f:16:96:c0:68:d6:1c:84:0b:7f:1a:c9:
96:bb:dc:ac:06:b5:12:27:3e:2a:9a:3e:9e:54:70:bf:9e:37:
8b:a8:aa:a8:61:bb:62:73:73:ad:b6:5f:05:d7:76:7e:cf:94:
cc:ce:9d:3c:a8:e5:6c:e9:99:10:48:63:bc:10:3e:5e:0e:61:
7a:95:f4:8d:41:4e:0d:3c:f7:fc:86:f3:d0:c9:31:fd:46:a5:
bc:72:52:c9:9b:84:b6:bd:ee:29:52:39:40:22:b0:5b:93:9d:
02:1f:c1:28:75:86:04:0b:a5:7a:e2:da:fe:81:5d:c9:c6:08:
82:4a:67:90:b5:4e:c9:ea:9a:b3:ec:dc:32:6a:01:8d:60:04:
76:24:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:42:49 2025 by rpki-client