Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/_BS2nplPPDkq0490HDi8ObwPYTg.roa
File: _BS2nplPPDkq0490HDi8ObwPYTg.roa (raw, json)
Hash identifier: /dSXUbD9mtA5zNmBRmCh9poInm3czDQyQRUY51WUoS0=
Subject key identifier: FC:14:B6:9E:99:4F:3C:39:2A:D3:8F:74:1C:38:BC:39:BC:0F:61:38
Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Certificate serial: 019422FC18E980F9EBACE70943326EBAED6A
Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/_BS2nplPPDkq0490HDi8ObwPYTg.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44152
IP address blocks: 82.98.75.80/29 maxlen: 32
82.98.90.0/24 maxlen: 24
82.98.94.120/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:18:e9:80:f9:eb:ac:e7:09:43:32:6e:ba:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc14b69e994f3c392ad38f741c38bc39bc0f6138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:fd:f8:d2:50:d8:7a:a9:a5:ec:9c:5f:28:
88:5f:3b:8c:46:42:88:c9:f8:85:b2:a3:2d:1a:7f:
0c:bd:83:10:8a:30:a4:00:d5:c1:55:94:21:c0:58:
ea:e0:a7:ca:dd:ae:9f:87:67:6e:69:0a:15:ab:e8:
bc:3e:8f:a7:f8:9e:1d:af:5e:d8:42:37:40:9e:06:
85:48:06:73:8f:36:8c:a3:3a:8e:51:ef:f9:d4:16:
36:e8:b2:4f:98:e7:d3:47:d9:30:0f:c6:8e:b3:9f:
4d:49:77:ec:51:bb:07:1f:41:f7:1b:88:a5:0e:72:
77:37:2c:5c:f7:40:e0:f8:dd:2d:cf:b7:3d:82:f5:
6b:66:36:23:e2:db:ef:72:50:01:21:d5:ca:51:5b:
26:ce:34:4d:c0:34:a6:b7:a5:48:a1:87:2e:71:cb:
80:66:35:b9:20:20:be:e2:42:59:b1:9c:ff:37:67:
be:90:6a:90:c5:e3:2b:4f:8d:44:75:c1:e2:46:46:
e7:7b:85:82:3c:8b:8e:2d:fa:f0:20:97:fd:d2:1e:
24:47:10:c8:56:e0:73:84:06:03:13:bb:81:2a:f8:
d5:23:66:03:6a:83:dd:08:10:fc:cc:26:a4:63:0a:
b9:72:6a:77:d3:bc:1a:c0:5f:fe:37:e9:39:6b:8a:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:B6:9E:99:4F:3C:39:2A:D3:8F:74:1C:38:BC:39:BC:0F:61:38
X509v3 Authority Key Identifier:
keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/_BS2nplPPDkq0490HDi8ObwPYTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.75.80/29
82.98.90.0/24
82.98.94.120/29
Signature Algorithm: sha256WithRSAEncryption
96:92:3d:91:f7:9a:88:97:b3:a3:f3:4b:2c:ee:66:ce:d1:6a:
63:5f:1f:ac:d0:fa:9b:5b:7c:db:98:51:7d:45:e9:3f:2b:72:
8c:77:e9:07:36:81:1b:47:2e:1a:3e:c1:43:06:e6:df:82:ff:
b8:34:04:0e:69:24:ea:ec:43:61:2c:a0:fd:88:cd:31:a4:9a:
9b:24:8c:4c:74:7b:0f:8c:d3:4f:d0:29:03:5e:ef:66:e5:57:
d2:ee:93:89:f0:8e:d1:66:9a:4d:00:3c:0d:8d:05:46:4e:02:
f3:dc:75:c8:64:5b:94:5e:66:aa:88:b0:8b:8b:02:52:a8:9e:
fb:b0:95:d6:0b:2f:42:b8:be:04:3b:92:2c:7a:72:b7:20:6e:
c3:19:f0:06:ef:be:3d:5b:f7:5e:dd:66:24:ae:3b:50:6f:e0:
f8:0a:3c:a2:b4:3e:37:a8:ba:f0:08:bc:da:7b:10:56:fd:7f:
9c:f3:53:ae:64:01:77:a6:03:d9:44:6b:6f:92:b4:d3:0b:59:
67:a2:df:ec:86:db:4d:10:85:59:e5:20:e7:fb:e1:87:81:77:
b5:76:94:2c:59:ca:b1:be:68:ab:e3:e7:9c:fb:07:db:c5:89:
63:ff:ea:59:21:c4:1a:e2:c5:76:9b:90:34:ff:74:53:4a:44:
c4:2a:61:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:12 2025 by rpki-client