Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/2D_sNr6LCkwTuTal-mPrYj8UHIs.roa
File: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (raw, json)
Hash identifier: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=
Subject key identifier: D8:3F:EC:36:BE:8B:0A:4C:13:B9:36:A5:FA:63:EB:62:3F:14:1C:8B
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0194228E2CF41D71CD461D6D9E25F7A8E6B3
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/2D_sNr6LCkwTuTal-mPrYj8UHIs.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 82.211.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:f4:1d:71:cd:46:1d:6d:9e:25:f7:a8:e6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d83fec36be8b0a4c13b936a5fa63eb623f141c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:39:fc:e9:b9:65:b1:41:7f:c8:41:62:17:
51:ff:5d:f0:17:ed:b4:52:d1:0a:10:13:52:64:af:
f5:f3:8f:44:92:69:4b:32:08:c7:a2:aa:25:59:f3:
0c:31:bb:70:98:93:6f:74:3e:55:de:50:f1:16:17:
e8:91:2b:fd:04:f0:2b:8a:c3:86:30:7c:c4:a4:a1:
5c:81:10:83:81:5d:a1:7d:a7:ae:59:76:1e:79:ad:
63:d2:ed:3e:5a:12:9b:2a:b8:85:7b:a8:10:e9:8a:
bf:10:ec:13:eb:88:0c:69:84:23:d4:35:64:f5:8c:
84:75:86:f9:97:67:b5:cb:32:ff:0d:ad:da:94:75:
7f:4e:98:2d:dd:e6:a8:90:5a:59:49:61:c0:7b:63:
85:be:7a:b6:60:ba:ed:c5:23:ab:81:05:6e:24:89:
3d:0a:6b:53:d5:6e:02:ba:7c:ac:6d:3d:cc:fb:9f:
dd:e4:a9:29:c0:c0:fa:8d:15:84:0a:7e:59:5a:a7:
9b:c6:c7:00:08:68:f1:47:84:5d:2b:3a:fb:65:a8:
4e:1c:17:6e:ba:76:84:32:6f:f0:a1:1d:81:9f:5c:
6e:e2:b7:c3:e3:ee:98:26:a4:b2:e0:0e:c8:99:09:
f2:66:46:ee:78:07:2c:0c:c5:b2:95:be:23:fb:47:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:EC:36:BE:8B:0A:4C:13:B9:36:A5:FA:63:EB:62:3F:14:1C:8B
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/2D_sNr6LCkwTuTal-mPrYj8UHIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.211.17.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e9:84:26:94:d2:1c:27:9c:cb:e6:77:e9:51:f2:55:98:a6:
56:bd:c3:fb:18:b9:08:83:a4:82:ea:a7:d0:f1:ec:e8:ab:9e:
f5:63:87:7a:f4:08:60:b9:69:23:3f:72:c7:09:3c:15:27:73:
9f:8b:2a:b9:0b:35:6f:ef:52:f0:d1:87:cf:4a:50:29:99:63:
28:50:3d:49:57:07:c4:92:f1:28:15:fe:b6:13:42:e1:e0:c7:
69:e5:9e:93:50:1b:76:ba:fb:65:dd:6d:08:7f:02:32:9f:5c:
3b:8a:37:d9:1b:f4:4c:d1:5c:6a:3e:12:b4:69:8c:60:83:8a:
42:92:e7:39:25:d3:d2:52:e3:b5:32:7e:da:90:95:46:aa:f4:
ab:11:8d:49:07:b0:7f:a6:6b:a3:ef:df:49:0f:fd:31:9c:f9:
c3:a1:4a:6d:fa:c3:28:21:39:ae:4c:fb:5e:44:0e:12:9e:ce:
f6:a6:b8:bc:da:98:9c:4d:22:f2:54:f6:20:75:49:23:a5:5c:
8a:5c:e1:10:48:fb:c5:2d:2c:f7:6f:47:ad:3b:83:46:f6:63:
31:89:a7:19:31:8a:94:a2:ba:08:22:50:be:be:e4:94:17:7d:
cb:bd:1f:a4:ac:e2:97:bb:67:d2:5d:33:d4:9c:61:6d:fd:68:
42:e4:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:07 2025 by rpki-client