Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/Mq3NX0Wy-mDUhxhfSiczQXHqnZ8.roa
File: Mq3NX0Wy-mDUhxhfSiczQXHqnZ8.roa (raw, json)
Hash identifier: yE0hX4xzCZqgqk8X+oVrcKgn9AoGkQAGH+Asu0m3UUQ=
Subject key identifier: 32:AD:CD:5F:45:B2:FA:60:D4:87:18:5F:4A:27:33:41:71:EA:9D:9F
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 01856CEF4B64361AF397E928C17E4CA2F638
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/Mq3NX0Wy-mDUhxhfSiczQXHqnZ8.roa
Signing time: Sun 01 Jan 2023 10:44:59 +0000
ROA not before: Sun 01 Jan 2023 10:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205766
IP address blocks: 82.98.82.0/24 maxlen: 24
212.19.38.240/28 maxlen: 28
82.98.87.0/24 maxlen: 24
212.19.62.160/27 maxlen: 27
2a02:2e0:3fc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:4b:64:36:1a:f3:97:e9:28:c1:7e:4c:a2:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 10:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32adcd5f45b2fa60d487185f4a27334171ea9d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:1d:0e:81:76:18:77:d0:ac:6f:b2:25:d8:
63:4b:1e:d6:ff:61:ec:91:6f:c6:90:15:e4:be:9e:
da:1d:d4:f8:73:18:8d:9f:54:83:66:c4:7d:f4:99:
14:63:81:70:b8:51:dc:e3:76:69:d3:58:f4:a5:5e:
f6:d2:cb:a4:34:c1:cc:ee:fb:d0:35:8e:35:cf:99:
5a:f5:27:ee:67:7c:94:19:e7:64:7a:c0:8e:b2:49:
21:50:05:23:fd:e0:85:74:20:fa:16:53:58:48:a7:
25:0c:b4:c4:46:76:d2:4c:2d:23:25:4b:7a:47:dd:
d1:95:5d:ef:6c:5a:3c:11:a5:35:1c:aa:b4:e9:70:
d2:e6:04:a8:f5:5b:bd:8a:c2:d9:71:4e:2e:2f:4d:
da:7a:4e:f5:41:11:4e:36:75:d4:b9:ff:08:01:51:
7b:ba:3c:ff:02:33:27:ec:9b:11:72:87:71:fe:04:
51:00:dd:88:0d:9f:12:14:f8:f7:24:84:d7:fb:3a:
bf:a1:8f:c6:8d:c3:40:37:cb:26:f8:63:32:b1:b0:
6d:13:26:c4:49:f8:ae:81:b0:ce:83:78:47:99:ce:
02:e9:f6:15:12:d1:89:c0:5c:03:04:c0:c0:0a:3f:
6d:64:80:4f:de:8d:20:53:08:6c:c6:d7:1c:3c:b4:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AD:CD:5F:45:B2:FA:60:D4:87:18:5F:4A:27:33:41:71:EA:9D:9F
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/Mq3NX0Wy-mDUhxhfSiczQXHqnZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.82.0/24
82.98.87.0/24
212.19.38.240/28
212.19.62.160/27
IPv6:
2a02:2e0:3fc::/48
Signature Algorithm: sha256WithRSAEncryption
2b:80:ec:f6:f6:39:1f:82:1d:f1:83:ee:2e:1c:07:f3:76:73:
69:8e:d5:bf:ee:db:d0:61:94:c6:9c:2e:53:84:6f:4b:3a:3b:
10:cf:41:18:56:c5:4f:3a:96:d1:69:fe:f4:f4:ba:34:0a:ff:
4a:26:97:37:f8:bd:80:dd:df:d0:eb:6d:8f:c8:95:d7:28:ef:
64:44:17:37:15:4e:a3:ba:39:10:30:61:f7:4f:d0:a9:bc:08:
22:64:a7:8e:57:cc:2d:08:58:41:fb:47:57:78:4b:43:11:38:
02:99:56:66:f0:14:96:12:68:5a:6b:f1:10:84:1d:94:43:7c:
96:c0:6d:ab:ea:c5:ba:12:20:d0:ed:34:ee:a2:e5:9e:03:90:
a4:86:01:c0:a1:47:5d:d7:0b:0c:10:ec:a8:9a:4c:86:fe:39:
83:40:2a:a1:c2:23:91:0b:b3:65:7a:e9:98:3d:47:33:92:c9:
99:15:45:da:0e:92:33:ab:f0:67:8a:94:a2:69:c2:8f:81:0c:
d4:5e:68:24:c1:73:8b:80:0d:1a:ad:70:24:00:06:16:69:5a:
e3:4f:dd:c3:87:d4:49:11:c7:8c:ac:a4:c4:a7:63:27:f1:f7:
18:ea:63:53:9c:8c:b9:a2:cc:80:4b:e7:c6:90:f4:19:a4:41:
3f:11:82:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:40 2025 by rpki-client