Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/83ZGg_T2anYS2FmFyo4Wp2fRWf8.roa
File: 83ZGg_T2anYS2FmFyo4Wp2fRWf8.roa (raw, json)
Hash identifier: Qg6dFwJKePGlMmXDaDyJIIliVV8qyevuHx8y0TZQk5U=
Subject key identifier: F3:76:46:83:F4:F6:6A:76:12:D8:59:85:CA:8E:16:A7:67:D1:59:FF
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0193630DD1A5282E1C394A8709D50949E9CF
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/83ZGg_T2anYS2FmFyo4Wp2fRWf8.roa
Signing time: Mon 25 Nov 2024 11:21:10 +0000
ROA not before: Mon 25 Nov 2024 11:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15440
IP address blocks: 45.82.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:0d:d1:a5:28:2e:1c:39:4a:87:09:d5:09:49:e9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Nov 25 11:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3764683f4f66a7612d85985ca8e16a767d159ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:af:2a:35:1b:97:fe:16:aa:f9:e1:90:71:
3b:6c:45:3c:65:3a:3b:81:66:0c:d4:cb:db:88:bb:
30:4b:21:00:0e:c2:c0:31:15:23:b9:bc:28:7d:ef:
80:5e:a7:c0:49:20:3c:d6:97:18:81:f1:f6:e2:f7:
cb:e3:b5:a5:66:c0:5e:34:82:0e:ad:14:db:e5:73:
4c:41:85:53:2f:a1:c3:68:2f:50:68:ea:82:9b:cf:
a4:ef:17:41:57:cf:82:90:9c:a9:7d:40:ae:77:5a:
b0:7f:16:f2:59:7e:01:65:c7:28:98:b9:15:dd:a7:
51:cd:49:9e:c3:af:d2:c5:a9:67:12:7c:4b:77:59:
a4:f5:24:95:f5:10:fe:0e:8b:ce:05:36:f5:b3:b1:
2f:22:77:17:8e:2a:9c:78:e0:a3:84:fe:0f:98:ff:
66:15:87:81:c9:b5:0a:6b:ba:81:74:2d:cd:b9:29:
fe:3a:91:9d:7a:5b:da:c1:fb:c9:da:fd:9e:32:4c:
d3:40:4d:69:9c:52:32:89:7b:1b:32:39:44:a2:76:
37:60:bf:7c:f7:b2:b2:2b:45:98:fc:b9:d8:7e:6b:
8c:36:e5:d2:63:25:a0:d0:7f:82:37:9a:d2:6f:61:
19:22:31:70:67:a3:ae:f8:e6:f1:6a:87:8e:39:81:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:46:83:F4:F6:6A:76:12:D8:59:85:CA:8E:16:A7:67:D1:59:FF
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/83ZGg_T2anYS2FmFyo4Wp2fRWf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.42.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5a:06:d1:be:b4:09:d1:56:18:83:11:5a:e9:fc:35:b0:89:
5f:d6:dc:6d:a7:5f:ef:0d:d1:a7:1b:c6:4d:87:8e:93:4d:10:
4f:8e:2b:cd:fe:99:9c:4a:e8:0a:3f:69:d4:50:0a:0f:f3:08:
90:3c:32:1b:d0:a6:68:dd:e1:64:2c:e5:f6:5e:56:be:c4:45:
25:1c:db:52:8d:e8:36:c6:88:ea:bf:a9:99:73:cc:67:56:ea:
c9:5c:cb:9c:b3:dc:0c:c0:49:ed:bd:46:da:e6:e7:ba:fe:d9:
73:cd:59:d4:2f:e4:6e:28:a3:25:b8:af:a4:9a:6b:cf:87:19:
58:46:bb:d1:4c:1b:d5:11:23:8a:f5:0f:ff:b2:03:1b:7e:00:
ff:a8:84:56:78:dd:b0:8b:60:f5:d0:93:4e:f0:ce:43:e9:47:
6c:29:f0:67:74:23:87:d6:f8:8e:df:71:17:df:a8:22:a1:2c:
57:92:43:d6:3a:14:8d:2e:36:f1:f3:52:de:9a:31:6f:5b:5b:
da:f8:5f:1a:6f:bf:b7:88:72:1b:98:df:af:14:e9:ad:6f:39:
bd:8f:55:69:74:9f:6b:79:b5:7c:e9:6f:93:68:63:45:85:d7:
84:bf:f7:bd:8c:6a:d0:6c:4b:ba:46:ec:f2:a4:7d:ed:4e:89:
86:04:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:06 2025 by rpki-client