Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/_Iy781RUDJE2EXSMmGZFsURCgyE.roa
File: _Iy781RUDJE2EXSMmGZFsURCgyE.roa (raw, json)
Hash identifier: DFAL+AzSJaVPkG8YPQDZs2QFrq0SLzqfKbcoqVHQO30=
Subject key identifier: FC:8C:BB:F3:54:54:0C:91:36:11:74:8C:98:66:45:B1:44:42:83:21
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 018572E81B3E924E751D1536D36AD262AF91
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/_Iy781RUDJE2EXSMmGZFsURCgyE.roa
Signing time: Mon 02 Jan 2023 14:34:51 +0000
ROA not before: Mon 02 Jan 2023 14:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31500
IP address blocks: 83.243.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1b:3e:92:4e:75:1d:15:36:d3:6a:d2:62:af:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jan 2 14:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8cbbf354540c913611748c986645b144428321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:6f:23:ae:1f:c0:7f:8c:36:73:21:df:ff:
7d:3a:4d:0b:fa:27:fc:ad:98:35:69:82:10:98:5e:
c0:f8:10:d1:85:01:b1:09:47:3b:58:c8:78:bf:42:
22:02:f7:70:74:89:78:d0:26:12:e7:6e:31:68:21:
e6:be:72:76:a1:e2:24:89:01:5d:d1:ff:4d:e9:37:
64:4a:3f:c7:32:35:eb:94:bf:43:24:e8:d1:3e:09:
5e:99:d7:37:8f:cb:a4:88:ca:79:e5:7a:57:a1:3e:
14:b2:43:1d:45:01:71:3b:38:eb:3a:9d:6d:4c:ab:
e0:03:c4:38:88:f8:28:6a:d2:8c:1f:a9:ff:fa:69:
cc:fc:4f:7d:c5:53:a7:d6:72:ab:94:ce:25:50:99:
37:ab:c3:b1:c7:6f:11:e3:f3:f1:f1:df:ea:4b:fd:
4e:94:55:90:ff:ac:12:15:d9:35:20:d4:1c:44:32:
f9:64:5d:59:c3:a3:f6:9e:36:35:5c:94:f6:87:2e:
a1:26:26:c2:11:7a:25:01:b6:15:3b:3e:06:e0:2c:
dd:f9:f0:2d:98:67:d9:8a:46:e1:5b:3d:5b:23:b8:
5c:77:62:d3:5c:e6:48:7e:7f:c8:78:ba:6e:c0:ec:
bf:46:b7:6e:5e:89:04:b0:9b:8b:e9:68:74:c8:1f:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8C:BB:F3:54:54:0C:91:36:11:74:8C:98:66:45:B1:44:42:83:21
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/_Iy781RUDJE2EXSMmGZFsURCgyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.69.0/24
Signature Algorithm: sha256WithRSAEncryption
74:25:ac:f0:bc:d4:34:b1:c3:16:49:dd:f2:c7:34:a5:a3:c1:
ba:27:16:dc:5b:30:ff:80:5e:24:45:37:b4:f4:32:80:23:fd:
54:4b:a3:28:d9:c4:8d:52:e6:41:ad:72:f1:ee:c0:6e:92:f2:
00:d2:35:f4:ef:d4:67:a2:61:1e:92:cc:64:81:9a:5f:9b:c1:
1d:7d:12:2e:16:fa:5e:c2:77:fa:d2:d2:8b:6c:25:dd:5c:9a:
5c:a5:d1:ff:f2:44:e8:97:7d:ed:7e:44:91:f7:65:6f:9c:a0:
cb:af:1d:fb:62:91:eb:8b:d0:9b:5b:cd:15:8f:e4:a0:b8:bc:
06:84:0f:88:e6:9e:ca:d6:68:ce:cb:2d:13:41:5b:bd:a9:62:
0c:73:a3:33:83:61:12:9b:2b:37:d7:16:e4:91:94:1e:2b:1d:
bd:b7:f2:1e:85:f6:5d:3e:b0:2d:47:ca:20:0d:5c:ad:5e:d6:
9d:53:bb:51:b2:dd:c3:b9:15:0e:40:d2:e9:14:d7:43:55:17:
bc:57:49:45:08:62:9e:2a:b9:8a:46:3c:30:ed:11:ab:af:bf:
8d:44:79:b9:6e:23:5d:01:e7:cb:36:6c:d4:2a:30:e5:c1:59:
cf:a6:a8:1f:1c:43:4c:60:ca:8b:97:37:7c:8b:87:24:71:e3:
b2:9f:3c:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6Bs+kk51HRU202rSYq+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0
NGNhMWEwHhcNMjMwMTAyMTQzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzhjYmJmMzU0NTQwYzkxMzYxMTc0OGM5ODY2NDViMTQ0NDI4MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/tvI64fwH+MNnMh3/99Ok0L+if8
rZg1aYIQmF7A+BDRhQGxCUc7WMh4v0IiAvdwdIl40CYS524xaCHmvnJ2oeIkiQFd
0f9N6TdkSj/HMjXrlL9DJOjRPglemdc3j8ukiMp55XpXoT4UskMdRQFxOzjrOp1t
TKvgA8Q4iPgoatKMH6n/+mnM/E99xVOn1nKrlM4lUJk3q8Oxx28R4/Px8d/qS/1O
lFWQ/6wSFdk1INQcRDL5ZF1Zw6P2njY1XJT2hy6hJibCEXolAbYVOz4G4Czd+fAt
mGfZikbhWz1bI7hcd2LTXOZIfn/IeLpuwOy/RrduXokEsJuL6Wh0yB9PlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPyMu/NUVAyRNhF0jJhmRbFEQoMhMB8GA1UdIwQY
MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt
OTYzYjI1ZmEzMDY4LzEvX0l5NzgxUlVESkUyRVhTTW1HWkZzVVJDZ3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4
LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU/NFMA0G
CSqGSIb3DQEBCwUAA4IBAQB0JazwvNQ0scMWSd3yxzSlo8G6JxbcWzD/gF4kRTe0
9DKAI/1US6Mo2cSNUuZBrXLx7sBukvIA0jX079RnomEeksxkgZpfm8EdfRIuFvpe
wnf60tKLbCXdXJpcpdH/8kTol33tfkSR92VvnKDLrx37YpHri9CbW80Vj+SguLwG
hA+I5p7K1mjOyy0TQVu9qWIMc6Mzg2ESmys31xbkkZQeKx29t/IehfZdPrAtR8og
DVytXtadU7tRst3DuRUOQNLpFNdDVRe8V0lFCGKeKrmKRjww7RGrr7+NRHm5biNd
AefLNmzUKjDlwVnPpqgfHENMYMqLlzd8i4ckceOynzwc
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:08:08 2025 by rpki-client