Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/TH2OwxnyxuHxSNko_w83dXwWzEQ.roa
File: TH2OwxnyxuHxSNko_w83dXwWzEQ.roa (raw, json)
Hash identifier: e/qYbxQxxwVh/yNiqnyigNpI7FXsrH7HPOwHVHmgcbQ=
Subject key identifier: 4C:7D:8E:C3:19:F2:C6:E1:F1:48:D9:28:FF:0F:37:75:7C:16:CC:44
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 019425222E4E7D529BD0DBC18782576705A4
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/TH2OwxnyxuHxSNko_w83dXwWzEQ.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 83.168.122.0/24 maxlen: 24
83.168.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2e:4e:7d:52:9b:d0:db:c1:87:82:57:67:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c7d8ec319f2c6e1f148d928ff0f37757c16cc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:0b:e3:b7:c4:18:9d:40:a8:75:2a:69:51:
99:54:2f:ea:c9:ca:f9:59:7f:db:97:b4:5b:39:2e:
63:25:60:ba:51:68:8a:4f:b4:00:34:94:72:6c:1e:
8b:f0:91:ce:08:0b:6c:95:92:00:b9:0f:5e:59:dc:
98:fe:fa:c5:2c:3a:46:43:b4:9b:59:ae:f1:b8:04:
5e:a5:91:93:3b:10:bb:35:cb:9d:2f:83:0c:e9:e7:
3d:29:4f:22:1a:69:96:04:19:83:4c:8a:b1:03:bd:
2b:b9:b6:e3:2e:80:f0:e4:6d:d6:b3:de:1e:5d:fc:
8f:14:a8:b0:8e:f6:61:36:86:68:c9:ed:1e:09:77:
34:25:2a:86:a9:2f:8a:18:9c:79:c0:c5:90:4f:ab:
0d:cb:e2:ef:8b:37:85:f4:1c:a2:1f:2e:21:9b:c6:
49:3f:26:43:b0:bc:e5:8b:b6:dc:42:6d:1f:42:38:
69:a9:f6:48:0a:7c:77:3a:26:56:5c:0d:55:25:8a:
33:ff:d8:30:f5:f9:c0:81:6e:b7:2a:9e:0c:4d:43:
79:47:3a:e5:c8:30:a4:90:83:3c:a1:8f:de:3e:4b:
06:98:cd:28:ba:b4:ad:1b:aa:48:64:ad:b9:d4:fa:
44:c3:15:41:25:dd:7d:b5:67:f8:89:11:b5:f9:83:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:8E:C3:19:F2:C6:E1:F1:48:D9:28:FF:0F:37:75:7C:16:CC:44
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/TH2OwxnyxuHxSNko_w83dXwWzEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.122.0/24
83.168.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:38:97:53:36:9f:cc:b1:14:05:1a:1e:81:d0:5c:fe:cd:43:
e2:e2:f5:5c:6c:01:b9:05:15:b9:64:7d:00:ae:a4:f6:bf:f0:
0a:2a:d3:00:10:7b:17:89:ad:07:0f:cc:ea:04:39:ca:a4:36:
23:4b:39:f2:ad:d4:bd:f4:ab:ea:3c:3a:31:63:08:66:5f:d9:
2e:02:44:88:84:70:8a:fa:7d:8a:99:2c:56:96:4d:d9:16:38:
a6:85:28:6a:46:64:3b:58:87:4d:c9:a3:e8:3e:02:57:b8:69:
73:ce:1d:f3:8e:97:8f:dd:95:98:b7:23:57:c9:b7:e8:27:13:
71:03:89:68:c3:04:87:40:01:ab:e3:39:18:c8:04:8a:b4:99:
dc:c8:b2:d2:19:17:75:7d:9b:66:19:99:38:9f:82:eb:a4:e4:
83:84:b0:18:f9:6d:95:1b:37:85:fd:f8:7f:3a:1b:6f:85:2c:
4c:59:40:d4:e4:db:49:19:07:20:a6:a8:60:71:ca:05:7e:0b:
20:7e:63:ee:e6:56:b1:85:39:1a:07:ce:43:be:06:46:cb:25:
f6:9c:b8:0f:be:17:9f:04:c6:08:81:8d:64:8a:6c:30:ad:6f:
19:b0:f9:ba:2a:01:7b:b4:8a:0c:88:3e:77:79:d5:0d:da:91:
fe:7f:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:21 2025 by rpki-client