Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/zZ6eSjbmqu1MRVC7Oe4y_ghcZ_Q.roa
File: zZ6eSjbmqu1MRVC7Oe4y_ghcZ_Q.roa (raw, json)
Hash identifier: VDKgcCYuG191oVfGnESdVp5ZCmL0ocAzn4T1e+BTFbw=
Subject key identifier: CD:9E:9E:4A:36:E6:AA:ED:4C:45:50:BB:39:EE:32:FE:08:5C:67:F4
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64C664FEFF94C26D9BFD6FACB3C546
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/zZ6eSjbmqu1MRVC7Oe4y_ghcZ_Q.roa
Signing time: Thu 09 Jan 2025 09:28:25 +0000
ROA not before: Thu 09 Jan 2025 09:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212283
IP address blocks: 83.222.190.0/23 maxlen: 24
83.222.190.0/24 maxlen: 24
83.222.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:c6:64:fe:ff:94:c2:6d:9b:fd:6f:ac:b3:c5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd9e9e4a36e6aaed4c4550bb39ee32fe085c67f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:a1:24:97:3a:7f:3d:0f:02:f9:8c:c2:aa:
02:93:dc:7a:8f:01:0b:90:c1:a5:2c:40:2c:29:47:
cc:3a:1c:3b:11:30:92:0b:a1:39:39:96:ff:e5:d8:
07:c1:0e:e5:44:21:db:dd:f1:72:33:6c:11:e8:8b:
c3:ad:e6:36:aa:d7:29:7d:0d:e5:26:ea:a6:4f:98:
0c:84:bf:ed:e4:54:5a:2b:93:61:df:ac:42:41:ed:
64:6d:4a:26:c6:59:05:4d:3f:84:01:51:27:24:17:
1e:e2:d4:90:cb:35:53:72:1b:69:78:93:0f:16:dc:
63:76:2b:46:24:e6:8f:33:f4:c5:79:f6:22:7d:28:
b2:fe:bb:5a:7b:6f:f5:07:07:66:55:67:39:78:bb:
a7:cc:07:2a:98:7e:f0:5b:60:0c:01:91:be:48:2a:
41:3e:fa:5b:1e:e3:25:5e:4d:a8:45:94:25:33:3b:
0f:27:33:be:0b:5f:99:e4:24:07:5c:b0:6e:26:f5:
02:fd:b4:e3:24:32:60:e8:8d:69:47:58:e3:a5:28:
66:3e:d4:e1:1e:84:05:44:4b:84:9e:73:be:ef:8d:
6b:53:9f:37:3c:9d:33:cc:ae:54:42:71:c6:b6:bb:
b3:a7:14:86:14:22:28:25:39:89:b3:17:ff:79:8c:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:9E:4A:36:E6:AA:ED:4C:45:50:BB:39:EE:32:FE:08:5C:67:F4
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/zZ6eSjbmqu1MRVC7Oe4y_ghcZ_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
81:4b:72:15:dc:b8:0a:ac:4e:03:cc:a4:64:3b:06:58:24:b5:
c2:e0:26:58:87:22:49:b3:8e:4b:88:0f:75:bb:17:91:5d:f2:
41:3d:2e:f3:7f:a2:07:b3:94:97:24:ba:f7:58:61:26:62:03:
1b:c0:5c:0e:2e:98:d2:82:0e:4c:0d:fe:a4:60:50:2f:aa:f1:
bf:24:2e:c9:8b:fe:5e:14:c8:ea:a2:7d:df:2c:0f:e9:96:de:
11:a9:8e:e7:ca:0d:26:dc:8d:93:7a:86:86:7a:ac:04:28:e0:
49:53:41:41:42:f4:99:21:8b:35:40:61:2a:17:d5:76:da:7a:
95:44:5c:35:be:87:c0:81:56:c5:53:a7:bd:bc:e0:53:1b:de:
24:e2:c8:ee:0a:ce:cd:12:a4:8d:6f:03:b4:ad:db:0c:56:b5:
e1:d5:41:24:c5:e1:7c:9f:47:2a:52:5f:aa:a5:25:c2:cf:04:
c4:69:70:1c:cb:db:25:68:a9:f8:7b:42:b0:62:b7:02:17:78:
af:da:c3:3e:b1:6e:4c:e8:1f:8f:c9:ee:ae:5f:f0:e7:6b:a6:
db:2a:69:be:1b:54:0f:29:3f:19:67:ff:72:63:19:30:d8:21:
c1:a8:23:23:54:5a:94:04:df:a6:10:70:10:06:88:c8:bd:2b:
24:15:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:28 2025 by rpki-client