Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/LeW5uHFX08XYp2mSoayTb96W_kw.roa
File: LeW5uHFX08XYp2mSoayTb96W_kw.roa (raw, json)
Hash identifier: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=
Subject key identifier: 2D:E5:B9:B8:71:57:D3:C5:D8:A7:69:92:A1:AC:93:6F:DE:96:FE:4C
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 0194206830627EB34E137008ADC4CEE50F45
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/LeW5uHFX08XYp2mSoayTb96W_kw.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206815
IP address blocks: 83.229.24.0/24 maxlen: 24
2a13:b280::/29 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:30:62:7e:b3:4e:13:70:08:ad:c4:ce:e5:0f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2de5b9b87157d3c5d8a76992a1ac936fde96fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:05:98:41:62:e5:5a:d9:eb:5e:7c:63:8c:
e3:aa:bc:6b:54:5b:8d:49:d7:15:29:a1:53:27:4a:
8f:a7:8b:09:d3:e8:d1:f7:25:86:6d:36:a5:47:36:
af:b7:4a:7f:78:73:b6:17:64:9a:1f:d7:03:1f:64:
aa:b1:00:23:35:97:d6:ff:50:38:43:70:5d:c6:8b:
43:ad:a6:37:de:02:b8:47:36:ba:2a:37:8e:ee:f2:
fc:e9:d4:d8:f4:c9:cd:36:3b:98:63:e2:f6:fd:fe:
ca:e5:bc:69:c0:33:2a:f4:2e:5f:e9:bb:a3:b5:ec:
3d:84:5e:c2:ca:42:41:15:43:cd:c3:e9:a6:56:de:
9b:e9:53:e4:d0:e3:ac:f4:5c:78:7c:be:cd:88:5f:
fc:12:d8:08:9f:c1:4a:b6:bd:8f:ce:ed:53:90:54:
98:32:ce:62:d3:95:4e:bc:bf:e0:3c:0c:71:7e:6a:
83:7d:d8:c9:49:dd:ea:67:05:db:ed:77:5e:24:5c:
6f:0b:ec:bb:af:e2:fd:0c:fe:24:eb:24:d1:76:bf:
82:bf:79:5b:93:94:d6:0e:8a:5a:77:bb:aa:72:bd:
16:3c:7c:7e:a8:87:a3:a4:62:eb:f9:ae:b9:42:fb:
21:27:53:54:ec:4f:b5:bf:65:ff:2e:52:21:e2:70:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:B9:B8:71:57:D3:C5:D8:A7:69:92:A1:AC:93:6F:DE:96:FE:4C
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/LeW5uHFX08XYp2mSoayTb96W_kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.24.0/24
IPv6:
2a13:b280::/29
Signature Algorithm: sha256WithRSAEncryption
63:9c:bb:46:fc:a9:ad:f2:ea:42:78:a0:eb:5d:6d:cd:01:3b:
21:4b:ee:b0:44:a9:d2:85:ab:4e:d3:78:cc:a7:2a:e2:e6:61:
7f:24:ce:75:48:1c:74:50:d9:83:30:89:2d:55:c9:f3:d1:62:
f5:b4:54:5d:23:d2:07:de:5d:78:8b:50:a9:f7:45:2e:fa:0c:
a7:3b:8a:2d:20:27:6d:cd:e0:61:9f:ce:4c:d1:e2:5f:f4:84:
6f:81:4a:9f:52:0d:50:2f:03:75:38:ef:b3:73:18:c9:51:12:
d2:38:9d:f0:96:75:20:78:c1:e7:53:3f:75:ce:5b:e4:53:ba:
8d:8a:62:9b:16:ce:3f:cd:08:c0:60:71:ad:14:44:72:df:ca:
11:04:92:2b:73:4e:f3:a5:03:52:60:ff:92:52:d3:f7:a8:4a:
e5:4e:79:7f:21:4a:cb:14:de:68:54:06:65:1a:4f:a8:13:be:
4f:a4:95:e4:d8:1f:f4:95:35:3e:cb:86:84:1b:6c:07:9b:3d:
32:03:df:67:5d:45:e6:ec:aa:3f:c5:f1:31:a6:25:83:60:fb:
6b:99:d3:de:ed:49:a8:5a:5c:93:d3:bf:79:5a:9a:9c:2b:11:
92:08:d1:35:a3:83:11:57:37:54:cd:b7:09:1a:27:56:eb:c4:
09:4d:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:41 2025 by rpki-client