Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Scs793toxsKn4fi3taeyRLIjXRs.roa
File: Scs793toxsKn4fi3taeyRLIjXRs.roa (raw, json)
Hash identifier: epq9Rtsjy73RjAsi/aA3kkF7RBw8tzK8JTM/cn0Vxkk=
Subject key identifier: 49:CB:3B:F7:7B:68:C6:C2:A7:E1:F8:B7:B5:A7:B2:44:B2:23:5D:1B
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B258079AEE00C96E2DD5BDE4C17C24
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Scs793toxsKn4fi3taeyRLIjXRs.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 82.137.176.0/20 maxlen: 21
194.149.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:58:07:9a:ee:00:c9:6e:2d:d5:bd:e4:c1:7c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49cb3bf77b68c6c2a7e1f8b7b5a7b244b2235d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:94:56:88:8a:65:80:c5:8a:5f:96:19:a6:
de:9b:8f:7d:f9:10:86:cb:72:80:64:ad:42:4f:fd:
62:d4:03:45:70:4c:3e:d7:a8:4e:66:22:f4:94:10:
5e:bb:4e:98:68:db:4a:97:fd:88:a5:12:bb:98:21:
88:30:cc:a2:ef:b5:64:c7:20:65:30:19:72:ec:1e:
3c:1f:32:35:a5:e5:8a:ca:5c:92:d9:be:d9:59:8f:
21:ff:31:50:4b:71:64:84:1a:2a:49:39:cc:ca:54:
df:30:dd:0f:f3:be:4e:25:67:9a:49:ec:be:67:7d:
70:98:d7:62:2a:2d:e7:dc:98:e8:fa:60:c0:90:1d:
fa:15:3b:7f:64:61:bc:24:d6:02:fc:65:0a:e2:11:
56:9b:6e:47:6b:b7:9c:4e:0a:d9:39:48:20:f2:41:
78:87:9e:24:e1:d2:80:2d:9d:f1:09:a4:0b:2b:ea:
00:2b:21:32:f8:34:26:a4:79:d6:d2:d8:e2:66:7b:
f3:63:c8:dc:fc:c6:62:da:d5:e8:17:39:0b:75:53:
4f:16:14:d6:7a:f9:36:bf:f7:32:bd:aa:94:bf:d1:
a9:6f:8c:2c:ae:37:5b:5b:6a:0d:ad:90:71:ee:fb:
6b:7a:90:a5:39:9e:3d:e8:20:fb:f4:72:a2:c3:a9:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:3B:F7:7B:68:C6:C2:A7:E1:F8:B7:B5:A7:B2:44:B2:23:5D:1B
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Scs793toxsKn4fi3taeyRLIjXRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.137.176.0/20
194.149.70.0/23
Signature Algorithm: sha256WithRSAEncryption
83:d5:0a:a8:78:7f:cc:95:a5:85:91:e3:c4:07:9f:59:a1:63:
45:13:a3:dc:90:ae:3b:8d:ac:2b:ff:9b:ed:cc:79:17:e0:31:
1c:f4:8d:19:97:30:0d:33:4c:4b:39:55:ad:fc:a7:16:9a:ad:
cd:97:f3:9d:db:19:ed:4c:56:bf:6d:1e:e3:41:1d:42:21:9d:
32:be:23:c5:89:9a:e8:0b:47:69:47:f8:38:aa:ec:f2:7b:c9:
68:72:ae:20:ea:5d:59:18:b1:f9:2e:f8:0c:a3:1f:51:fb:b1:
e0:e7:9e:19:ad:bf:30:3a:bf:c2:f0:54:9b:14:5f:6e:63:ac:
29:aa:e2:c1:10:f1:9c:a8:d8:dc:5e:a6:5d:1e:2c:5b:d6:d4:
54:8f:ab:9b:d8:8a:1a:a4:a1:31:39:61:b5:1a:59:a5:aa:55:
97:0a:33:ca:d6:23:fd:1a:fe:ee:4e:14:d3:9a:60:b2:ca:43:
f3:4d:09:be:3d:7e:d5:77:01:d9:49:91:0e:98:06:40:c1:4e:
93:49:3c:d4:92:5d:cc:d8:e9:cb:76:74:fb:ae:f3:65:1e:ba:
0e:07:a3:76:b7:90:31:80:d2:3d:e5:f8:ef:b8:0e:e0:05:c6:
6f:8a:97:57:c9:fc:7a:72:db:c4:dd:9f:2c:4b:c3:32:6d:67:
c0:e1:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:19 2025 by rpki-client