Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BZ8DfV9NsR1erD_j9HTEVDphJHw.roa
File: BZ8DfV9NsR1erD_j9HTEVDphJHw.roa (raw, json)
Hash identifier: uPI4hALjO2ShrmQ19ccuO9uGLNXHKyIKvk4gmMaKpnw=
Subject key identifier: 05:9F:03:7D:5F:4D:B1:1D:5E:AC:3F:E3:F4:74:C4:54:3A:61:24:7C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242A4464133EDA90159A5DCF0BE24D
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BZ8DfV9NsR1erD_j9HTEVDphJHw.roa
Signing time: Thu 02 Jan 2025 17:50:46 +0000
ROA not before: Thu 02 Jan 2025 17:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204428
IP address blocks: 83.222.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:2a:44:64:13:3e:da:90:15:9a:5d:cf:0b:e2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=059f037d5f4db11d5eac3fe3f474c4543a61247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:c1:2b:0e:88:13:6b:f1:b1:dd:94:92:85:
dd:fb:4b:ae:5b:2a:9c:37:7c:fb:ba:2a:b1:07:7e:
0e:34:86:83:97:03:0c:36:cf:ef:bf:a2:b4:ec:da:
a4:45:b7:86:ff:7d:bd:90:c0:c1:43:a6:69:8c:e4:
77:fa:ff:26:c8:6f:6d:50:7a:64:4b:e9:94:12:04:
4c:d2:31:26:d1:c6:c2:1b:d2:dd:a5:44:34:41:d7:
bb:83:d0:79:68:c5:73:87:3d:6c:07:6f:5a:8c:15:
6a:35:cd:db:cc:33:42:be:5c:da:d9:9a:b4:d4:9c:
9a:b8:47:70:d8:75:62:52:4d:eb:35:4e:66:58:e8:
7e:cb:24:f3:16:93:6b:20:73:2f:18:48:76:66:02:
c4:62:c8:8e:25:6c:a0:a9:d4:d3:98:5f:5e:94:2a:
e1:ea:c3:90:47:a7:ed:5b:31:75:ac:56:f1:f8:0b:
42:03:15:48:c9:ec:bd:b2:9a:3c:9b:c9:72:cd:19:
5a:b6:8f:0a:ac:35:86:8a:f1:9d:50:55:60:f3:50:
c5:81:3c:0b:8c:eb:cf:67:4e:bf:ba:3d:9e:bb:44:
7e:3a:fa:47:45:ea:d2:49:e6:b8:30:51:13:07:64:
15:bd:50:f9:8f:ea:7f:5d:62:d7:bf:c6:9e:eb:d6:
31:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:03:7D:5F:4D:B1:1D:5E:AC:3F:E3:F4:74:C4:54:3A:61:24:7C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BZ8DfV9NsR1erD_j9HTEVDphJHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:7b:2e:de:43:cf:1f:21:48:85:69:d0:f5:5e:3f:c4:3a:3c:
5c:eb:9f:b4:a8:31:13:a0:21:83:c0:6b:0e:d7:e1:e6:a6:fc:
04:7f:eb:0e:cb:c7:8c:5c:6f:bd:8c:a7:75:2e:17:c2:09:66:
6d:c4:84:99:76:12:f7:f5:5f:f9:f4:eb:83:9c:5c:4d:be:94:
ce:7a:4b:42:c2:93:c0:43:68:9f:8a:86:02:46:50:07:a9:ca:
e8:02:76:92:b4:15:94:e7:54:76:b9:4b:9e:04:5e:b1:e7:99:
67:02:b7:22:d2:bb:bd:b8:07:2f:e3:c0:f2:cc:20:ab:f2:74:
a6:a0:ba:2c:a1:40:d1:20:9e:22:4b:dc:77:ac:7a:bf:ee:17:
3a:fb:10:93:66:ed:89:5c:3b:60:6f:1f:41:74:c8:70:6d:a7:
f7:d7:00:7b:bc:b9:52:d0:53:f7:ab:fa:94:af:fd:3e:d5:a8:
9d:61:ec:95:ef:de:31:fb:9d:18:2b:7d:8f:5c:5e:4c:8f:17:
fb:f2:6f:4d:6a:e6:68:d4:01:4d:63:01:99:bd:34:68:fa:dd:
db:6b:1e:34:a6:a7:cd:f2:c6:7b:b8:8b:5a:32:6a:66:0c:b9:
bb:91:c8:ec:da:92:66:af:be:68:ff:6d:a3:cd:1b:1d:77:86:
47:e8:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:52 2025 by rpki-client