Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/Sc6UQKId_JjJ3yLcrU9wuIZnxT0.roa
File: Sc6UQKId_JjJ3yLcrU9wuIZnxT0.roa (raw, json)
Hash identifier: tPkAkf7FU9g2hTiIglNzj19DwyUl5fztc9L3WWueQjA=
Subject key identifier: 49:CE:94:40:A2:1D:FC:98:C9:DF:22:DC:AD:4F:70:B8:86:67:C5:3D
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 01857039A5D4FA0C450DD15B0A7E5AFF4656
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/Sc6UQKId_JjJ3yLcrU9wuIZnxT0.roa
Signing time: Mon 02 Jan 2023 02:05:04 +0000
ROA not before: Mon 02 Jan 2023 02:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 82.192.97.0/24 maxlen: 24
82.192.96.0/24 maxlen: 24
82.192.101.0/24 maxlen: 24
82.192.100.0/24 maxlen: 24
82.192.103.0/24 maxlen: 24
82.192.102.0/24 maxlen: 24
82.192.108.0/24 maxlen: 24
82.192.110.0/24 maxlen: 24
82.192.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a5:d4:fa:0c:45:0d:d1:5b:0a:7e:5a:ff:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 2 02:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ce9440a21dfc98c9df22dcad4f70b88667c53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:75:c5:84:db:c7:11:78:8d:51:91:9f:e3:
30:85:2a:aa:73:d3:38:48:de:9a:0b:da:ea:2f:c8:
12:8d:95:60:bb:61:fe:e0:9d:ec:ff:4d:b2:da:97:
61:57:f6:3e:88:f5:47:63:d8:97:8d:b2:d8:aa:74:
40:62:03:93:74:4d:47:3f:5e:15:3c:60:d0:b5:05:
71:16:74:87:66:71:71:4a:82:cd:5e:67:13:17:0f:
15:a4:ba:72:24:4b:ee:cc:68:5a:c2:fe:29:07:7d:
56:60:14:67:69:e1:f5:01:09:2a:0b:10:6a:28:f9:
ff:ed:21:d9:26:44:e7:5e:0a:3a:df:3b:75:13:45:
aa:b9:61:72:0d:58:d5:30:bd:1c:6e:82:13:62:3e:
91:48:08:b3:60:0e:54:76:cc:59:8f:c1:3e:48:c9:
ac:39:f4:d2:0e:72:ee:f3:ce:17:b9:7e:7c:c5:85:
87:cb:2e:5e:5e:03:40:48:f2:66:c1:19:ad:db:d4:
5d:82:96:18:77:e3:7e:f9:21:0d:55:f9:3b:60:69:
22:94:98:33:ee:1a:32:53:05:80:26:d2:02:37:de:
7e:06:24:b0:26:92:41:fa:2c:c6:23:ff:6c:b5:d9:
15:af:3f:49:05:57:c4:1b:d7:94:f9:d5:2b:22:7a:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:94:40:A2:1D:FC:98:C9:DF:22:DC:AD:4F:70:B8:86:67:C5:3D
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/Sc6UQKId_JjJ3yLcrU9wuIZnxT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0/22
82.192.108.0-82.192.110.255
Signature Algorithm: sha256WithRSAEncryption
6e:bd:2b:fd:8c:ab:ed:e0:a2:96:79:94:c2:b2:67:43:14:40:
6f:88:5a:f3:9b:fc:12:00:08:46:fe:04:26:50:1b:7e:9c:ad:
33:e8:54:f0:f4:60:16:a7:ab:7a:39:c5:3e:63:b7:78:a1:76:
09:c4:18:1c:bb:df:10:8d:51:fe:d5:a2:ef:8c:d1:38:50:af:
ca:eb:b2:31:dc:e2:54:70:a6:e1:2b:12:76:c6:4c:4b:70:9e:
a1:90:c9:09:98:91:d6:8f:5a:19:ce:ae:88:72:8f:0b:e0:8e:
39:9e:a9:d5:ba:cc:9c:e2:43:93:81:33:5e:58:70:cb:2e:52:
13:c3:fd:be:37:5f:16:6b:d1:7d:f5:eb:e9:4e:27:fa:e2:99:
be:f6:4c:04:00:0b:18:15:24:5a:92:e2:5f:17:a7:5c:f2:60:
cb:9c:26:5a:db:bc:ae:2c:9d:46:f9:3a:48:9c:ed:c6:6e:48:
f8:13:e2:65:6b:7a:d6:a8:af:37:09:9e:23:f1:82:58:13:8b:
ac:fb:7f:9d:40:1f:66:2e:25:e5:8b:98:6f:98:9e:8a:73:44:
3f:9e:47:2b:19:32:bc:c8:e3:ee:c3:2d:9b:9a:92:20:c1:9e:
d4:82:0c:27:c3:06:70:09:cf:83:9c:89:7b:0b:7c:0f:62:9b:
d0:bd:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:03 2025 by rpki-client