Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/4iDiM0pAr1Av69v5T4vArTCXc7s.roa
File: 4iDiM0pAr1Av69v5T4vArTCXc7s.roa (raw, json)
Hash identifier: 5Spma88dZDszRIBrFCz19VF3VQiXWo6dB+yAo/6d6Y0=
Subject key identifier: E2:20:E2:33:4A:40:AF:50:2F:EB:DB:F9:4F:8B:C0:AD:30:97:73:BB
Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial: 01942826EBC78B4CDE2E230FBF8CF1791F0E
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/4iDiM0pAr1Av69v5T4vArTCXc7s.roa
Signing time: Thu 02 Jan 2025 17:53:46 +0000
ROA not before: Thu 02 Jan 2025 17:53:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 82.98.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:eb:c7:8b:4c:de:2e:23:0f:bf:8c:f1:79:1f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
Validity
Not Before: Jan 2 17:53:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e220e2334a40af502febdbf94f8bc0ad309773bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:18:ba:6e:66:af:3c:cc:7d:9e:fb:3a:22:
3b:52:89:01:40:38:30:13:4b:41:ef:e6:3c:b6:91:
f8:2d:94:bb:cf:96:ca:e9:fe:ae:db:20:b5:c2:a9:
9f:49:1a:85:01:cb:96:2d:1d:d5:df:1d:55:a5:44:
c7:dc:46:24:79:5c:f1:48:5f:fb:b3:61:33:94:b3:
8e:48:c0:52:55:ec:19:53:3e:22:8e:ef:5e:eb:48:
86:8f:25:20:11:fd:47:6e:8c:6a:ca:17:e0:5c:6d:
e0:dd:33:12:43:c2:1b:3c:c6:69:5c:20:b5:82:a0:
e6:11:57:76:0f:a7:76:a9:32:d1:b9:c9:2c:30:da:
94:28:54:e5:a8:7c:60:d1:2e:5d:09:ef:70:1f:73:
48:11:62:69:1e:48:72:9c:a3:c1:f4:ed:59:14:52:
fb:5d:1f:e1:d7:32:ab:7a:ba:51:80:c3:66:4f:d6:
84:e1:f1:b5:9d:53:de:aa:90:11:ce:a2:ee:69:29:
4e:fc:be:a4:de:8e:a5:de:7d:b7:fe:14:78:89:cb:
d5:0c:5b:5e:24:21:23:36:cd:57:54:76:df:68:31:
8d:0d:67:6d:b8:9f:66:7a:07:2a:0a:62:57:1c:51:
7f:04:af:a7:b0:24:18:ba:78:0a:94:c6:a3:e0:01:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:E2:33:4A:40:AF:50:2F:EB:DB:F9:4F:8B:C0:AD:30:97:73:BB
X509v3 Authority Key Identifier:
keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/4iDiM0pAr1Av69v5T4vArTCXc7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.128.0/18
Signature Algorithm: sha256WithRSAEncryption
69:7d:e0:72:23:79:d7:ae:06:06:5b:bf:c9:67:10:02:34:a3:
1f:94:d5:b3:01:72:02:fc:c7:1a:bf:b8:bb:e7:6e:df:b0:5d:
5f:ef:ab:ef:0d:ed:62:9d:8c:2c:0e:5d:54:84:3f:b8:44:84:
99:d0:eb:5b:94:13:12:11:e5:9e:77:04:03:e7:8f:e4:10:5a:
31:12:11:7e:a5:bf:4d:55:c8:92:68:13:e2:08:6f:ad:84:5c:
6f:c4:4f:6f:2a:2c:ed:3a:cb:5d:9f:67:49:aa:21:a0:c8:06:
b9:55:d1:97:1a:25:a7:7d:95:1c:d0:2b:93:e3:3f:9b:5b:a0:
54:44:f0:d0:57:d6:09:b6:cb:b7:95:39:80:ce:b6:3d:3b:a9:
f7:7e:f3:df:24:f5:67:fb:69:ec:65:82:15:5c:4e:d6:59:c1:
74:e6:73:c6:bc:df:22:6f:f9:db:72:52:df:de:0b:09:04:fa:
3b:75:61:a5:e8:24:6b:74:44:0b:2a:d1:a0:1d:73:a7:96:03:
77:52:19:e3:2f:44:e5:92:80:d4:27:7b:ae:3d:ab:ba:07:51:
0e:54:c2:94:b6:ba:24:d3:91:4c:3d:27:32:00:3f:40:dc:7c:
a9:3c:12:70:11:65:29:77:22:58:22:a5:08:79:fb:4c:a2:04:
96:2d:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:50 2025 by rpki-client