Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zoDqDFkMpv_mDnfsT8YVf68-kgs.roa
File: zoDqDFkMpv_mDnfsT8YVf68-kgs.roa (raw, json)
Hash identifier: +hqDl3lUwtOGOGYyxPbuvprnJoO7uusVN3Fx5ZBUUFg=
Subject key identifier: CE:80:EA:0C:59:0C:A6:FF:E6:0E:77:EC:4F:C6:15:7F:AF:3E:92:0B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019598A2545510C861EA52C59A7E27A698B2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zoDqDFkMpv_mDnfsT8YVf68-kgs.roa
Signing time: Sat 15 Mar 2025 07:08:50 +0000
ROA not before: Sat 15 Mar 2025 07:08:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 82.153.69.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:a2:54:55:10:c8:61:ea:52:c5:9a:7e:27:a6:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 15 07:08:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce80ea0c590ca6ffe60e77ec4fc6157faf3e920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:49:db:a4:4c:c7:5e:8b:5c:56:32:c9:09:
d0:87:22:59:97:1c:7e:17:f6:3e:7d:96:a6:db:ad:
29:d7:56:63:1a:27:d8:4c:57:8e:8f:6e:83:76:a8:
c6:8c:50:8f:06:4c:02:09:23:eb:d6:33:b3:87:92:
16:16:79:b3:b7:2d:e7:cf:19:c3:ed:4d:25:52:34:
3e:a9:0f:12:6e:99:62:fc:b5:96:58:53:99:05:0e:
c7:3b:93:9e:b5:83:c7:48:e0:dc:31:3a:4e:e2:3f:
c7:34:bf:23:98:9c:28:f4:f8:55:21:f9:27:1c:e6:
9d:39:14:db:ad:dc:12:0d:cc:fd:d7:af:88:ea:fb:
3c:1f:55:8a:88:37:6f:fc:13:9b:fe:aa:66:bc:64:
17:03:3f:19:81:ba:48:9c:c0:29:82:2a:06:cf:4c:
d9:d4:48:2d:63:df:fb:c0:3e:9f:72:2e:9c:8d:42:
79:96:23:68:7f:46:0e:94:4e:a9:0b:d7:4b:50:58:
33:60:18:7b:bc:8e:20:b7:e0:85:c5:9f:7a:aa:95:
ee:64:ac:af:ae:01:c5:1d:17:56:4b:60:d6:01:73:
17:31:a9:c0:33:20:b3:aa:05:46:cd:e8:53:c0:bb:
3d:12:60:cd:2a:09:75:d3:34:03:19:23:6f:f7:8c:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:EA:0C:59:0C:A6:FF:E6:0E:77:EC:4F:C6:15:7F:AF:3E:92:0B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zoDqDFkMpv_mDnfsT8YVf68-kgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.69.0/24
109.176.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b8:0e:50:cb:ae:71:0e:bb:64:8e:9a:c5:e9:73:59:10:02:
5e:b4:08:99:87:f5:49:4a:1b:36:b1:83:77:f0:63:07:9a:80:
83:26:1c:bc:df:33:46:ce:88:f4:3a:35:c3:44:0c:95:03:8f:
72:f4:61:a0:16:5f:ef:94:c4:7f:7c:81:4a:56:1e:86:d5:50:
dd:f4:93:0d:17:78:d2:5e:33:7d:01:f1:91:38:9f:82:d4:7f:
0c:10:41:ee:ee:32:44:22:e0:46:6d:58:16:6a:82:b2:90:6f:
de:c2:79:4a:47:dd:5f:77:33:96:de:66:cc:fc:07:2d:3b:6b:
d6:31:30:b1:86:85:00:8b:65:20:01:d8:5a:32:ef:78:a0:d2:
cf:3f:77:b4:dd:21:b3:1f:85:66:33:64:67:95:80:5a:48:e8:
a4:9d:42:d6:50:0d:82:0b:5c:70:2a:80:9e:d1:64:7e:09:c6:
9a:87:5a:6f:1c:ca:2d:21:63:e9:a3:10:86:e0:af:02:db:7b:
7e:93:74:c5:4f:e7:6e:da:38:d4:34:e5:7c:5d:40:40:26:c0:
d5:07:d0:f5:58:31:53:27:f3:69:03:18:09:f4:bc:42:fa:12:
9b:da:2f:a1:3d:db:3a:66:46:bb:4d:a6:2b:ac:26:e5:72:64:
09:df:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:31 2025 by rpki-client