Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/RNEW2jc2Z9wY1MQY9YUX_j7AElg.roa
File: RNEW2jc2Z9wY1MQY9YUX_j7AElg.roa (raw, json)
Hash identifier: WmWNUtm8Hwgjzixu2Np5v+mlbEgwuI0zgnoDpxxQ3sE=
Subject key identifier: 44:D1:16:DA:37:36:67:DC:18:D4:C4:18:F5:85:17:FE:3E:C0:12:58
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 01857039A4B890FD333354A0561F72416787
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/RNEW2jc2Z9wY1MQY9YUX_j7AElg.roa
Signing time: Mon 02 Jan 2023 02:05:03 +0000
ROA not before: Mon 02 Jan 2023 02:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12576
IP address blocks: 82.192.96.0/23 maxlen: 23
82.192.104.0/24 maxlen: 24
82.192.103.0/24 maxlen: 24
82.192.102.0/24 maxlen: 24
82.192.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a4:b8:90:fd:33:33:54:a0:56:1f:72:41:67:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 2 02:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44d116da373667dc18d4c418f58517fe3ec01258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:e9:e3:9d:8b:6d:c9:08:1f:06:83:f3:a8:
f4:95:91:83:bf:89:16:38:b8:a8:a9:3e:95:1b:e5:
b3:ff:65:83:e5:26:49:a9:4d:00:a4:aa:e4:6f:9c:
15:b8:7f:41:c7:c4:86:32:a5:23:54:35:46:7c:62:
d7:17:76:2f:24:f2:06:cf:e2:98:1a:b6:cd:37:5f:
67:67:23:bf:d1:5f:85:69:c6:6b:75:23:fe:c8:d0:
39:c8:cb:85:e2:ea:7f:db:06:5c:6e:5a:83:61:42:
05:e2:09:4e:82:af:c2:da:ec:9f:6b:a1:0a:77:92:
f1:5a:d5:92:3f:a9:18:09:d0:0c:a3:83:e1:fb:99:
50:d2:0a:cf:ad:74:b5:0b:cc:a5:f3:ad:9e:bd:a5:
87:cf:d4:f4:29:aa:39:8b:e0:1d:51:b4:7d:72:35:
a0:2d:07:7f:55:1f:71:e2:b7:c6:cb:00:fe:9c:2f:
ad:cf:b1:cb:d9:de:4b:d0:30:aa:33:29:e6:ee:c7:
c5:57:61:25:52:36:fb:ec:df:92:07:d3:04:81:5d:
46:45:0f:02:29:35:a9:fe:35:28:a5:5b:c5:51:80:
fc:ed:f3:23:b3:8a:5e:01:ed:95:67:f4:dc:15:9f:
10:64:ac:e0:d2:7b:aa:40:bc:66:fa:ed:c3:5a:d7:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:16:DA:37:36:67:DC:18:D4:C4:18:F5:85:17:FE:3E:C0:12:58
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/RNEW2jc2Z9wY1MQY9YUX_j7AElg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0-82.192.104.255
Signature Algorithm: sha256WithRSAEncryption
9f:7d:aa:97:32:65:43:ad:6d:a7:3a:9f:42:93:ce:a3:fa:55:
12:9e:6f:29:bf:ef:99:9d:02:23:a7:27:77:c3:a1:01:fe:a1:
35:31:94:1e:83:f2:05:54:bd:e7:b5:22:6a:53:9f:e2:50:6d:
59:37:8a:ef:4c:a2:f2:34:83:51:14:c4:14:6a:e4:ec:2b:f1:
43:23:98:d3:dc:b8:2b:b9:84:f7:7b:6c:b9:a8:eb:d3:d0:83:
1d:fc:cd:32:c1:6d:62:fa:ac:21:be:ec:06:3c:ed:3c:84:6e:
53:44:a5:0e:c3:8e:24:0f:66:2d:31:c7:f0:a6:72:e4:97:5c:
f3:59:2d:a0:0b:ab:56:9a:87:cc:db:dc:0e:8e:51:3b:bb:2f:
cf:41:37:21:6a:9f:cd:47:bc:a3:f3:c9:9c:b3:3d:46:50:98:
13:59:1e:bf:ef:61:9a:92:9f:f7:a2:5d:a3:45:2b:3f:c8:dc:
ea:a8:c4:e8:c0:bc:f2:37:fd:ea:90:83:1a:7c:55:e0:7d:65:
40:95:39:90:4b:96:fe:31:cc:6c:d6:e8:3e:5d:58:79:0a:e9:
fc:4f:c6:eb:11:a2:b6:79:10:4f:6f:66:0c:eb:e8:61:01:b8:
03:ea:d6:24:91:81:40:77:81:61:83:58:24:3d:0b:f7:95:a7:
65:29:8d:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:07 2025 by rpki-client