Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/t-vt1y7NHdRLagN9kddqhDlFgZI.roa
File: t-vt1y7NHdRLagN9kddqhDlFgZI.roa (raw, json)
Hash identifier: 87RUfJaIg689CyKukHdZ4QKiXMFDgJHK3hebsxFXimA=
Subject key identifier: B7:EB:ED:D7:2E:CD:1D:D4:4B:6A:03:7D:91:D7:6A:84:39:45:81:92
Certificate issuer: /CN=da15f76304d0a5dbbe621e11e3021b608d33a75f
Certificate serial: 01856EAFBFDCE97F42A735F45D2F054B954D
Authority key identifier: DA:15:F7:63:04:D0:A5:DB:BE:62:1E:11:E3:02:1B:60:8D:33:A7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hX3YwTQpdu-Yh4R4wIbYI0zp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/t-vt1y7NHdRLagN9kddqhDlFgZI.roa
Signing time: Sun 01 Jan 2023 18:54:49 +0000
ROA not before: Sun 01 Jan 2023 18:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 83.138.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:bf:dc:e9:7f:42:a7:35:f4:5d:2f:05:4b:95:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da15f76304d0a5dbbe621e11e3021b608d33a75f
Validity
Not Before: Jan 1 18:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ebedd72ecd1dd44b6a037d91d76a8439458192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:db:c4:0a:75:01:95:3b:84:56:5b:2b:a4:
dc:78:7e:44:c3:3c:5c:90:e8:3e:a3:a1:48:4c:4f:
b3:f5:86:27:2a:5d:27:ce:6a:22:9a:07:e1:8a:26:
85:d3:93:40:c9:94:8c:c4:af:de:87:db:09:12:e2:
f9:97:74:46:b3:50:55:f5:90:d3:91:a6:26:1a:d7:
ce:ad:b5:a0:88:30:72:3f:69:e3:3a:ef:09:c1:76:
3a:e7:be:bd:9d:3e:81:d2:37:7a:4b:7a:0c:22:83:
1d:df:a8:48:58:15:7e:aa:0a:c6:ff:15:c3:d0:bc:
4c:1d:13:7e:1a:83:25:b0:73:75:75:22:1e:28:fc:
29:e1:d2:2c:86:cc:0f:82:4a:73:81:d0:1f:d0:22:
6a:e2:05:d8:84:ef:2d:ba:14:5e:20:10:a8:b6:d6:
32:47:e5:e8:16:78:8e:38:25:14:87:d4:93:c6:74:
66:41:35:4c:70:f9:08:14:a0:90:1d:7a:d7:5a:3b:
89:19:c0:6f:f6:ce:1d:98:f9:40:08:73:66:8d:bb:
2f:71:03:18:c6:0c:6c:cc:02:91:08:e2:83:b7:45:
4f:97:cd:7e:51:02:f5:14:cd:8e:59:03:d5:b6:fd:
21:9c:cd:38:d1:dd:eb:c1:f4:d6:80:f4:1d:19:9c:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:ED:D7:2E:CD:1D:D4:4B:6A:03:7D:91:D7:6A:84:39:45:81:92
X509v3 Authority Key Identifier:
keyid:DA:15:F7:63:04:D0:A5:DB:BE:62:1E:11:E3:02:1B:60:8D:33:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hX3YwTQpdu-Yh4R4wIbYI0zp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/t-vt1y7NHdRLagN9kddqhDlFgZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/2hX3YwTQpdu-Yh4R4wIbYI0zp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.49.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fa:43:82:82:dc:ee:ce:ff:30:df:09:7b:17:c6:3b:b4:a6:
04:5e:fc:fc:52:2e:f2:d8:6f:c7:cb:a5:88:e8:77:4e:26:e1:
39:25:75:7a:f8:1f:78:f6:c6:f3:ee:4c:16:15:d0:98:29:1c:
6e:0c:d4:b9:bf:63:02:98:8c:f4:51:f9:16:41:df:01:d4:fc:
2c:e9:d2:d1:fd:69:be:82:13:4c:32:e0:a6:e2:fd:7f:dc:7f:
b2:fb:18:40:3b:73:d1:61:04:49:82:ee:69:7c:58:ab:c1:ad:
23:6c:a3:ae:43:d5:7b:e0:a8:bf:0f:1b:18:ed:7b:1c:61:ae:
12:21:d7:46:e8:9e:a5:39:a9:b5:3d:c5:0b:9d:0b:e4:37:5e:
75:b3:73:cb:94:07:df:fb:8a:ac:64:87:a2:8d:6d:9c:3a:1f:
92:ad:8f:0b:ee:e8:70:2b:e0:03:11:9c:8b:8e:0b:88:31:5a:
d0:6f:3a:b5:b4:4c:49:2d:72:22:13:d0:e9:94:c9:4a:24:00:
f7:b6:b8:a2:6d:2d:8a:c1:1d:fa:02:28:f2:49:2e:c4:0f:a8:
41:52:2f:ec:40:08:49:f4:fa:ca:55:d8:86:65:52:05:f7:72:
92:47:e2:9d:d7:59:76:96:f5:c2:f8:86:20:1e:97:f1:b0:47:
04:36:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:04 2025 by rpki-client