Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa
File: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (raw, json)
Hash identifier: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=
Subject key identifier: C9:DF:2B:5B:45:15:95:31:34:2B:91:12:79:9B:ED:C1:CF:72:65:AF
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 0194BB5A567E032AB2ECE5C3446A4F66322D
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa
Signing time: Fri 31 Jan 2025 07:54:07 +0000
ROA not before: Fri 31 Jan 2025 07:54:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 83.219.243.0/24 maxlen: 24
83.219.248.0/24 maxlen: 24
83.219.249.0/24 maxlen: 24
83.219.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5a:56:7e:03:2a:b2:ec:e5:c3:44:6a:4f:66:32:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jan 31 07:54:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9df2b5b45159531342b9112799bedc1cf7265af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:e8:e6:ff:74:7b:c9:c9:cd:1f:4c:5f:24:
b0:fd:d3:7c:04:a8:2c:da:b8:41:f5:bd:a9:1b:cd:
dc:06:c4:ab:6b:46:d1:1e:65:c5:d5:8e:2d:e7:7e:
85:fb:7a:c8:6a:34:78:b7:42:8a:7a:6a:3d:e7:47:
27:df:8b:57:a9:6c:57:59:7b:20:55:90:4b:d0:c8:
84:07:19:a4:b6:11:bb:33:0d:5b:27:c5:b8:33:4f:
8c:f6:7b:ac:67:cd:06:3c:bf:32:d0:14:c1:f9:54:
d2:4d:66:1c:45:df:48:38:e4:7b:f6:f2:23:0f:f8:
09:32:f2:01:91:3a:75:8d:36:a6:43:0e:d7:94:70:
12:f4:08:76:b7:c9:66:f0:0c:70:e7:37:a1:0f:65:
e9:29:6e:e7:26:72:45:d1:22:2e:22:5c:b8:75:2d:
b0:a0:0a:7f:1f:0b:c6:69:fb:a0:f9:a6:e0:34:3e:
b4:95:47:a7:fd:f0:0b:2a:6b:49:2d:06:95:b6:e9:
6b:ef:23:74:5d:0e:87:5d:f8:bc:4a:42:2a:4d:2d:
1d:2d:4f:7e:8f:c9:da:ea:00:92:bf:4c:2b:4d:fb:
da:ec:5a:ea:ec:2e:11:37:a7:76:3d:5c:f7:92:da:
15:2e:78:1e:e1:c0:f7:b6:00:ca:b9:fa:5b:4d:d2:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:2B:5B:45:15:95:31:34:2B:91:12:79:9B:ED:C1:CF:72:65:AF
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.243.0/24
83.219.248.0-83.219.250.255
Signature Algorithm: sha256WithRSAEncryption
7a:32:08:1c:5a:bd:31:17:de:1b:d9:2a:09:f6:82:0a:a5:be:
91:1a:69:ef:ef:4b:36:7f:13:88:5b:cc:62:04:7e:df:0f:7e:
c9:26:96:64:de:a2:19:c7:dd:d8:ed:43:f3:eb:86:93:7b:ce:
74:0a:ed:b3:52:33:1c:63:06:ae:54:c5:36:c6:5a:50:9d:32:
35:de:93:2f:f7:af:77:ee:bd:99:73:38:b2:b5:7c:0d:10:f1:
4b:74:4e:4a:da:2d:10:2f:98:48:a0:e3:71:e9:f1:e0:1d:f8:
64:8f:8a:5b:e2:23:f9:e3:44:ea:aa:13:6b:e1:4e:b0:db:fa:
4f:3e:72:a9:5a:ac:bb:a4:02:ed:be:b0:a4:ab:87:79:55:cc:
60:17:b9:f9:12:d8:14:ab:db:1c:d7:a8:5c:08:43:39:48:e6:
ac:70:81:19:40:23:e6:78:bb:86:4e:83:3c:5f:c2:b3:f4:86:
05:23:5e:ad:da:50:dc:cd:86:82:48:cd:17:85:e1:d9:50:34:
9d:02:5d:4b:5a:a1:de:4a:b5:af:2f:f7:9a:52:a2:bf:ed:1e:
0d:32:42:9a:03:09:21:31:00:93:9e:26:a2:a4:bf:78:6e:ba:
ba:b5:fd:14:18:dc:a1:59:0d:17:de:9b:c0:9d:dd:fe:2f:d7:
a0:3d:37:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:28 2025 by rpki-client