Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/UqBMfwSMkyjNuiGhDbS3EaNw4iw.roa
File: UqBMfwSMkyjNuiGhDbS3EaNw4iw.roa (raw, json)
Hash identifier: GenNYBQgxphNTWdNlfSGONtXbmHmrqUYl5eGs11mOBc=
Subject key identifier: 52:A0:4C:7F:04:8C:93:28:CD:BA:21:A1:0D:B4:B7:11:A3:70:E2:2C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0188B6580CC9C2F0BC59BBEBC1E7464DBC91
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/UqBMfwSMkyjNuiGhDbS3EaNw4iw.roa
Signing time: Tue 13 Jun 2023 20:00:03 +0000
ROA not before: Tue 13 Jun 2023 20:00:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 188.240.83.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.47.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:58:0c:c9:c2:f0:bc:59:bb:eb:c1:e7:46:4d:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 13 20:00:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52a04c7f048c9328cdba21a10db4b711a370e22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:e8:91:7e:c9:2b:95:f4:d0:b9:32:b8:a1:
c9:bf:97:83:f5:f7:24:d3:4e:d2:22:d4:34:b4:fa:
68:ef:0d:b2:75:85:86:d5:28:d8:9f:8f:f1:33:f9:
83:18:33:05:b9:73:47:b6:4b:18:2c:ef:de:3b:17:
6e:1e:39:12:57:0a:a8:af:3d:35:74:af:ea:72:ec:
e6:f4:cc:a4:a9:38:93:72:7e:e5:38:e0:aa:bb:09:
ce:82:4a:a8:e6:57:c4:8c:f1:05:66:bc:d3:5a:56:
28:c3:6f:a3:58:3e:c8:03:5e:cf:94:82:e8:0c:d9:
c2:ff:e0:d1:79:9b:26:f1:ef:ac:61:4a:a0:84:0b:
91:49:a4:77:e5:73:40:f7:de:ca:db:93:f0:a8:a9:
30:b0:19:8d:94:32:61:14:ff:5c:d0:f0:e3:9e:e7:
fb:e3:8d:70:f4:6c:6b:50:f0:d2:74:e2:23:4c:04:
86:4d:db:e6:4b:85:f5:99:26:00:23:f8:52:0a:e5:
4b:af:4f:82:02:c3:77:39:e6:6a:46:67:c3:02:97:
a5:45:a7:7e:2b:ea:32:82:57:27:b1:81:0a:a4:28:
61:a4:36:ef:1d:0a:cb:6b:53:43:f4:ea:0f:81:75:
2d:57:be:e2:98:87:8f:3e:1f:83:88:c0:89:e4:26:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:4C:7F:04:8C:93:28:CD:BA:21:A1:0D:B4:B7:11:A3:70:E2:2C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/UqBMfwSMkyjNuiGhDbS3EaNw4iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
89.47.249.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f5:3e:ed:ac:c4:b1:30:80:69:28:91:00:a4:0f:fd:cc:0d:
51:a7:7a:89:dc:79:88:0f:30:b8:99:88:2d:6f:8f:d5:4e:ca:
a1:05:f9:56:25:5f:56:42:85:de:37:cd:6a:7c:5e:4c:96:6f:
55:05:b0:8b:cb:26:da:50:44:61:d5:b9:84:a6:b3:a9:b2:f4:
09:e8:d6:79:bd:f2:ec:53:d4:4c:94:d0:8b:37:56:64:d5:24:
18:58:60:7a:7d:29:5b:d0:cd:b0:bd:91:fe:1f:5a:63:fa:30:
38:46:d5:13:66:27:b6:52:00:5d:e0:3c:99:9f:80:42:6f:0e:
ca:35:e7:76:7b:8a:63:0d:b5:f6:0a:dc:c3:3c:28:9d:a7:dc:
90:7f:e3:92:9c:7a:24:13:ba:dd:df:20:8d:67:39:0e:31:45:
bd:b0:50:3f:6d:be:ff:91:d9:75:ca:02:29:ac:92:95:ce:9a:
32:01:9a:5e:cb:f2:40:36:28:c6:51:70:1b:a7:ff:d1:2a:fc:
c9:6e:be:ec:df:e3:c9:ec:5a:ec:f0:7a:af:4c:33:d9:9e:71:
c1:5a:a8:9f:8e:ec:f6:2a:b2:51:ca:7e:d6:ff:7e:01:c3:ed:
67:d1:d7:3a:bd:bf:ad:26:a5:28:bb:c5:d1:14:5f:d3:66:29:
ad:37:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:45 2025 by rpki-client