Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/SYr4OoNW0mUu-B_jeNM-43Nuf68.roa
File: SYr4OoNW0mUu-B_jeNM-43Nuf68.roa (raw, json)
Hash identifier: HRwd7RtTc1dXYjnc7wE8Z/wdrNt/iiGoWyHBvrsDKjs=
Subject key identifier: 49:8A:F8:3A:83:56:D2:65:2E:F8:1F:E3:78:D3:3E:E3:73:6E:7F:AF
Certificate issuer: /CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Certificate serial: 01856EF4378D038A765C33D20681ED3FBC1D
Authority key identifier: 34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/SYr4OoNW0mUu-B_jeNM-43Nuf68.roa
Signing time: Sun 01 Jan 2023 20:09:36 +0000
ROA not before: Sun 01 Jan 2023 20:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 83.243.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:37:8d:03:8a:76:5c:33:d2:06:81:ed:3f:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eee39ded03b2a6fd5e28c88ac7244ced4329d8
Validity
Not Before: Jan 1 20:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=498af83a8356d2652ef81fe378d33ee3736e7faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:57:2f:19:bb:d9:c7:ba:ec:55:03:bb:f4:
ee:fc:f1:3f:99:2f:16:f8:01:01:1c:fb:84:e1:bf:
80:79:65:ec:6e:cb:e2:a1:53:ee:9e:dd:33:0a:23:
c5:6a:56:28:4c:7f:2b:48:31:af:85:f8:30:f7:a8:
7b:f2:a3:15:a8:68:1f:24:58:6a:ee:94:e7:20:a0:
df:27:6f:20:14:36:4c:d6:35:03:c4:c3:7e:3a:b5:
e3:16:7e:90:3f:df:d9:9d:1c:eb:9a:b1:8c:0b:b3:
ba:f8:b2:78:01:e3:7d:13:6c:6e:18:5b:38:98:ea:
98:96:77:ef:01:1d:5f:4f:c4:a9:fb:6e:3b:e0:8b:
28:5a:b2:a1:9f:d5:e1:2a:1f:27:a9:15:8f:90:5a:
ce:fc:8e:30:72:e1:92:b6:cd:07:08:a2:64:90:62:
9a:ea:db:de:c7:85:d4:8e:f0:0f:71:d5:a4:d7:3e:
97:e2:7e:37:4d:f3:1d:9a:ba:c7:8a:a4:5a:4f:f4:
22:2e:1c:bb:9f:4c:0e:85:19:1a:93:e7:44:4b:ef:
7b:fd:20:51:3b:11:4f:0b:cd:d6:fc:7e:64:9b:2a:
a2:06:5b:09:21:de:cb:ba:30:df:35:c6:a5:43:fa:
5b:d8:b3:36:09:75:8b:ee:f6:0b:25:3e:a8:98:45:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:F8:3A:83:56:D2:65:2E:F8:1F:E3:78:D3:3E:E3:73:6E:7F:AF
X509v3 Authority Key Identifier:
keyid:34:EE:E3:9D:ED:03:B2:A6:FD:5E:28:C8:8A:C7:24:4C:ED:43:29:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO7jne0Dsqb9XijIisckTO1DKdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/SYr4OoNW0mUu-B_jeNM-43Nuf68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/457968-feae-4554-abe2-f76e9ef52831/1/NO7jne0Dsqb9XijIisckTO1DKdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.124.0/22
Signature Algorithm: sha256WithRSAEncryption
06:76:6b:6e:62:03:d6:7f:bb:3b:64:b1:9b:f5:0d:4e:3c:f0:
04:d1:01:7f:bc:b8:55:03:bf:c5:92:c7:6d:59:13:4b:da:01:
b5:1d:94:24:5b:8b:09:19:ab:5d:5d:e6:30:12:65:fd:94:83:
50:41:fa:d2:65:b9:e3:e5:e2:8d:d6:71:f4:ce:5c:85:02:50:
7f:05:e2:84:79:83:e4:0f:55:7b:b6:39:5e:72:f5:36:f4:a4:
e4:d6:05:d2:00:8e:8e:28:7d:31:6c:ef:05:49:e1:88:0e:a2:
18:58:14:c7:cf:b1:aa:70:74:be:f8:42:d3:5c:38:4c:1c:1a:
2e:a7:e8:43:80:2c:5b:fe:b6:d6:57:3b:a8:ae:82:ef:f5:cc:
d2:45:a1:fa:93:46:73:54:6e:66:0c:df:84:75:0a:17:f7:1b:
0a:d0:86:41:5a:2e:53:e0:42:c3:0e:90:75:06:38:18:7f:b3:
86:53:e7:ca:38:05:c8:74:b9:17:3f:ed:05:e6:3f:d0:5b:fc:
87:e1:07:71:c1:ea:e9:ac:90:e7:38:0c:5c:24:f8:e3:36:87:
e7:d0:47:e7:37:df:85:ae:98:44:04:67:17:1a:c2:62:5b:61:
dd:84:a4:2a:16:75:fd:71:5a:35:84:f5:17:1c:20:df:18:fe:
d7:40:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:37 2025 by rpki-client