Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa
File: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (raw, json)
Hash identifier: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=
Subject key identifier: E6:E9:17:34:2D:EE:7E:CE:48:7E:4E:64:A7:E8:48:ED:4D:94:F1:B9
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 01941F8C61F76A7CD0DA3484030AFE72CE0E
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 83.217.9.0/24 maxlen: 24
83.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:61:f7:6a:7c:d0:da:34:84:03:0a:fe:72:ce:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6e917342dee7ece487e4e64a7e848ed4d94f1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:78:90:c9:9f:a7:d2:12:9b:62:5f:e6:e5:
c7:89:32:6e:2a:de:16:ab:ae:18:30:85:c6:5b:d6:
d5:e7:b2:d0:38:80:d7:ea:2b:6e:64:8a:6c:c0:e9:
c1:ea:57:a8:67:ca:f2:23:5f:25:fc:fb:1a:23:94:
90:37:37:a3:8d:93:62:86:48:cc:fd:0c:15:28:0b:
ff:0b:34:49:e8:ff:40:95:36:ec:b2:c8:da:0f:6d:
13:be:69:a7:1f:bf:1d:81:aa:de:6a:01:82:eb:c5:
c3:e5:43:88:00:73:47:ab:ae:44:6c:ff:e6:bb:30:
2e:fa:b6:28:1a:79:e3:df:1b:b5:80:16:08:a2:27:
6f:10:46:b4:5f:72:17:be:16:71:fd:11:55:03:dc:
97:af:13:01:52:f3:a6:50:37:39:12:62:c4:08:61:
7f:ba:0d:1c:90:65:6a:63:e2:30:37:13:94:dc:95:
f4:fb:9d:fb:15:e4:c7:78:e6:82:1a:6c:43:db:9d:
8e:35:ed:db:1d:3f:88:25:18:0f:52:a3:cf:7d:0e:
49:33:8b:75:14:0c:be:99:2a:a4:dd:08:d4:23:5c:
a0:46:f6:09:46:9a:eb:58:c2:ad:df:4e:d3:60:8c:
f7:f1:e2:86:d6:bd:87:02:c0:de:9c:b1:ea:9a:9b:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E9:17:34:2D:EE:7E:CE:48:7E:4E:64:A7:E8:48:ED:4D:94:F1:B9
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.9.0/24
83.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
99:36:cd:8b:3c:92:3a:49:78:4e:fc:49:63:a8:f9:01:2f:04:
49:e8:f4:a9:2c:70:6a:af:03:af:54:4a:25:b4:6f:3e:b8:b6:
dc:c8:99:df:c2:e4:31:29:c8:b0:f7:6c:24:5d:96:81:d0:8c:
50:65:39:50:3a:62:1e:26:2f:6e:d4:bd:cc:37:28:ac:2c:bd:
83:5c:2a:3a:c8:24:33:19:a0:d7:71:df:f4:0c:ff:22:41:9a:
51:7d:7b:5d:99:91:75:23:4a:3c:f5:1d:59:aa:70:e9:c2:8c:
bd:62:97:b2:3c:71:20:71:4a:d7:33:a9:5c:8a:77:28:8a:c6:
60:1b:ff:35:4d:8b:04:79:95:00:e3:ab:28:21:81:31:26:f4:
79:31:29:f6:5c:0e:70:81:f6:f0:a2:c0:7e:ad:81:01:29:c6:
2b:e8:23:84:fb:41:56:19:07:ce:51:c0:1b:b4:33:dc:7b:6e:
a3:a9:d3:00:d0:29:18:cb:3a:d5:2b:50:cc:bb:c2:21:39:06:
f7:2f:ea:ef:22:90:fb:69:e3:e3:5c:59:de:bc:c9:ba:25:d2:
c5:b7:f7:91:bb:c5:cd:8e:27:10:44:7a:bd:d5:e9:96:e7:b9:
74:63:6c:c7:ae:bf:b8:4b:70:a1:ad:ef:f2:fb:c4:9b:10:1a:
93:3e:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:37 2025 by rpki-client