Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uH30hS9pzaY7AsQiRRhpmbdCc0A.roa
File: uH30hS9pzaY7AsQiRRhpmbdCc0A.roa (raw, json)
Hash identifier: m8bcQp/RoAptkRkI2DalnWJYSLJrEKwEBBabFvXu1D0=
Subject key identifier: B8:7D:F4:85:2F:69:CD:A6:3B:02:C4:22:45:18:69:99:B7:42:73:40
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428242D0226F25EB15E9C3B78348D9D6E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uH30hS9pzaY7AsQiRRhpmbdCc0A.roa
Signing time: Thu 02 Jan 2025 17:50:46 +0000
ROA not before: Thu 02 Jan 2025 17:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212588
IP address blocks: 82.118.237.0/24 maxlen: 24
2a01:8740:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:2d:02:26:f2:5e:b1:5e:9c:3b:78:34:8d:9d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b87df4852f69cda63b02c42245186999b7427340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:30:47:0c:51:2a:53:97:53:18:4d:e1:89:
74:33:83:d9:68:9d:06:02:ff:2c:47:2a:7c:d6:67:
d7:d1:98:0d:13:0e:17:63:69:df:83:4f:d2:92:07:
3f:e5:12:b6:42:19:20:60:a0:69:96:42:18:fc:92:
ad:01:ab:5f:20:d4:68:c9:4a:69:d9:15:2e:ca:be:
cf:90:d1:9c:3c:6a:46:d7:0c:fd:79:5c:7c:1f:01:
d4:af:6c:f6:d0:92:c2:b5:7c:a0:32:f9:38:f7:44:
d2:27:e1:33:17:bb:d3:7a:21:89:89:d7:76:77:3b:
f9:64:2a:f4:40:2d:6b:f9:96:fe:b9:91:00:f5:69:
ed:c9:70:80:10:ca:35:07:58:5b:f3:f2:eb:37:f1:
ad:a4:15:a3:8a:35:5a:0b:f8:31:29:1c:f9:30:41:
6e:7a:08:b9:cc:2b:29:52:b0:bb:12:1b:11:e6:c6:
ed:23:98:5a:9a:f2:51:ba:5c:a3:dc:c6:ee:df:10:
45:2a:94:d6:70:c0:17:a8:18:12:9b:25:c0:c7:e2:
ea:ef:1b:b5:3b:9b:2e:c8:ef:b1:79:44:d5:e6:63:
bc:c3:f2:00:df:52:dc:68:2e:9e:5b:42:f2:d9:ba:
ee:72:8f:02:2d:a2:5d:b6:64:4d:08:44:4e:07:e7:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7D:F4:85:2F:69:CD:A6:3B:02:C4:22:45:18:69:99:B7:42:73:40
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uH30hS9pzaY7AsQiRRhpmbdCc0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.237.0/24
IPv6:
2a01:8740:5::/48
Signature Algorithm: sha256WithRSAEncryption
31:e8:ce:6f:e5:a1:80:6b:80:0a:1c:b2:f9:a0:4b:b8:37:ee:
0a:97:4f:a3:6c:d7:53:97:ce:c7:e3:d9:ac:e1:e3:e9:07:ee:
30:52:39:8d:47:b6:3f:ba:af:db:23:9e:86:63:43:d0:b7:58:
62:3d:94:93:28:80:47:14:1a:62:db:01:cf:4d:c3:fc:0a:1d:
09:1c:81:70:f8:24:92:33:3f:44:5c:8d:48:ae:6c:b3:ff:6f:
51:c3:d5:c1:f9:80:34:6e:e5:86:1a:40:df:1c:0a:7b:20:6d:
58:db:50:92:04:25:ae:40:a0:1e:01:ee:57:87:5b:50:d4:9e:
3a:9e:9a:d8:d9:64:5c:3f:7e:c6:4b:80:89:84:a2:75:37:93:
4b:f2:d2:48:ed:0f:a1:60:f7:56:36:3d:0a:2f:7e:15:af:bb:
57:fe:32:43:57:28:4d:3a:ed:5a:a3:1d:ac:51:74:68:84:31:
2f:0c:ac:81:07:7b:97:24:3f:0d:93:b0:82:74:f0:f3:a2:ba:
76:32:ed:44:d2:7a:90:46:35:6f:c5:b7:71:80:d7:f8:03:f2:
b4:1e:e4:11:5a:d3:af:e9:22:18:a6:0b:af:55:eb:3c:62:99:
9e:91:b5:3b:6b:6e:cc:cb:e0:5c:ac:69:9a:19:8f:d7:d2:5e:
7a:01:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:25:06 2025 by rpki-client