Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/nOmvhWBgisHecBt6L2qt9CXOk78.roa
File: nOmvhWBgisHecBt6L2qt9CXOk78.roa (raw, json)
Hash identifier: 2xJvy7tsaKPn7uMXoQorehVk8ccnaowA4lz9d6dWzUg=
Subject key identifier: 9C:E9:AF:85:60:60:8A:C1:DE:70:1B:7A:2F:6A:AD:F4:25:CE:93:BF
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 052D9F90
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/nOmvhWBgisHecBt6L2qt9CXOk78.roa
Signing time: Sat 01 Jan 2022 14:05:43 +0000
ROA not before: Sat 01 Jan 2022 14:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31500
IP address blocks: 83.243.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86876048 (0x52d9f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jan 1 14:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce9af8560608ac1de701b7a2f6aadf425ce93bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:0f:f1:10:8b:a1:38:50:16:cc:83:c0:2c:
02:9d:97:11:e7:8d:04:61:cb:55:1e:ed:a5:74:7a:
38:f1:a9:e8:bb:2e:e3:73:08:f1:8c:e8:9d:1d:98:
01:3d:77:cf:0f:43:57:01:21:a0:73:12:22:31:72:
af:88:c9:fc:89:ce:3d:8e:84:60:9f:ff:36:33:57:
14:9c:41:d5:0a:93:ae:3c:9d:60:4f:f2:c6:6f:09:
4f:1d:3f:3c:6d:e4:8e:b1:28:1f:20:8f:04:1a:bc:
73:5e:9c:0d:6d:dd:b6:73:b8:f7:8f:4b:67:c0:26:
cf:53:18:9c:20:85:7d:3d:77:99:ac:30:dc:03:5b:
00:7d:3a:99:fe:c9:34:8f:33:8a:8b:f2:32:1f:72:
6c:f2:fa:8c:08:58:81:b1:f7:1f:12:13:51:d3:29:
d0:67:1d:cb:bd:de:85:1d:2e:8f:b2:00:c2:58:d2:
7d:45:5e:55:be:18:51:92:3c:46:ca:43:fa:7c:ce:
7b:fc:3d:89:44:12:20:32:64:02:a6:32:fa:db:9c:
a8:16:a2:64:9c:23:0b:b4:a8:11:26:e1:74:c5:e7:
ad:ff:70:2b:f4:c9:4d:59:17:4e:c6:d0:fa:05:ef:
41:af:d1:c1:24:c5:b3:f2:04:f7:32:e5:96:63:41:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:AF:85:60:60:8A:C1:DE:70:1B:7A:2F:6A:AD:F4:25:CE:93:BF
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/nOmvhWBgisHecBt6L2qt9CXOk78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.69.0/24
Signature Algorithm: sha256WithRSAEncryption
83:51:29:37:2c:24:60:cb:33:ef:af:02:1a:da:6a:de:fa:b4:
dd:60:98:54:d6:83:65:f0:d1:e4:98:60:ef:ce:57:4f:ee:71:
9e:d4:8d:b7:9f:c2:a9:fb:f7:44:8b:e2:ca:49:7e:8c:ee:8d:
5e:b3:91:11:29:6a:40:60:8c:5b:7e:31:20:b8:1e:85:4e:88:
de:7b:f8:32:b8:60:c3:c8:73:7c:b6:e6:94:bc:e8:f5:e7:57:
72:3c:f6:f3:78:b9:75:8c:ac:83:5e:a1:cd:d8:93:33:cc:1a:
82:44:d8:6f:d6:c7:b4:cd:02:f9:50:e6:ea:f6:a1:5e:43:1b:
6a:aa:95:93:ab:50:ec:20:40:b5:0b:d9:7d:45:dc:79:d8:bf:
d1:3d:84:02:7f:08:d6:b9:1a:ab:31:12:5a:5b:8c:ae:0e:5b:
3a:e4:68:10:96:4f:17:5e:3c:df:0d:29:a0:b4:b6:a9:fd:31:
e8:5e:a2:00:ee:ff:e4:ed:e3:c6:a1:2f:8f:2c:e3:e2:77:76:
bb:02:b5:52:3b:46:04:29:fa:2c:c0:b2:e5:af:8f:5f:1d:3c:
6b:19:17:32:73:8d:2c:f2:33:d0:66:55:49:17:8b:42:1b:62:
f3:fc:a1:af:5a:e7:e4:0e:84:4f:4f:72:3e:5b:e1:76:54:d3:
ad:ab:61:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:51 2025 by rpki-client