Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/DY_YBD7dUEwRu5f1VApN2Xto06Y.roa
File: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (raw, json)
Hash identifier: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=
Subject key identifier: 0D:8F:D8:04:3E:DD:50:4C:11:BB:97:F5:54:0A:4D:D9:7B:68:D3:A6
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 01942747FB1A7D71093FAA3FCD32A1E435B1
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/DY_YBD7dUEwRu5f1VApN2Xto06Y.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31562
IP address blocks: 83.166.64.0/19 maxlen: 19
83.166.64.0/24 maxlen: 24
2a03:9600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fb:1a:7d:71:09:3f:aa:3f:cd:32:a1:e4:35:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d8fd8043edd504c11bb97f5540a4dd97b68d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:e4:af:f0:ee:52:fc:6f:1c:7f:9c:5b:ae:
0f:a8:e5:8b:56:5d:c9:56:22:61:8f:cb:c9:a4:c3:
93:03:56:e3:6a:0b:45:53:77:10:3f:7b:31:47:1f:
64:f1:82:3c:ce:66:9c:f1:08:52:96:f0:69:3a:65:
3c:5c:2a:c0:c8:e0:77:c0:68:f0:82:d4:a0:2d:04:
41:ee:48:aa:80:7e:5a:a9:29:37:ed:94:67:31:b5:
ab:a7:7e:d0:a4:cf:cd:ee:2b:e7:30:c8:5f:6d:02:
0e:70:58:fc:22:6e:fe:3e:71:02:48:c8:1f:e9:7d:
29:46:dc:1f:67:8c:b2:49:6a:55:fd:bf:74:f4:b5:
bf:7e:ef:80:7b:d9:52:8d:61:c8:f5:b9:55:6e:30:
62:8c:75:a9:d1:a4:be:be:91:36:e5:a0:f7:52:70:
3c:ca:a5:e9:87:21:52:be:79:87:fc:36:fc:27:1a:
67:a3:a4:1b:0a:21:eb:d2:88:9f:fa:eb:f0:2f:1f:
00:14:31:69:5a:61:b6:5b:7f:67:06:7f:aa:17:4f:
ec:ef:06:32:da:bd:e9:0c:d4:e1:0d:ea:4c:dc:93:
e6:96:b2:54:23:7e:e6:1b:0d:c3:7b:bc:94:f4:ba:
1b:e1:56:32:32:60:a2:a7:5d:95:5a:d4:ec:60:f7:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:D8:04:3E:DD:50:4C:11:BB:97:F5:54:0A:4D:D9:7B:68:D3:A6
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/DY_YBD7dUEwRu5f1VApN2Xto06Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.166.64.0/19
IPv6:
2a03:9600::/32
Signature Algorithm: sha256WithRSAEncryption
64:3e:01:5a:fe:63:03:a6:cd:02:be:ff:ea:cd:41:b1:e3:7f:
11:76:fc:b4:49:ef:03:32:c7:2a:1c:14:6a:90:33:9d:43:f3:
33:45:7c:5b:b0:e3:a3:4b:5a:33:88:53:4e:59:bb:4e:74:52:
4a:01:5f:16:97:52:df:fc:8a:2f:f3:ce:c1:df:f9:28:92:3f:
fe:05:70:e4:0c:20:a8:65:04:09:e9:47:aa:20:ce:c3:bd:43:
22:0c:39:e8:7e:0a:f4:6e:7c:2b:c0:c2:e2:52:03:f1:16:13:
11:c6:15:65:b5:0d:e8:17:9b:68:e6:27:44:44:13:af:56:38:
a9:fa:58:f5:00:43:10:2b:e5:e7:9a:b2:aa:58:b4:d5:8c:4e:
f4:41:84:ca:4b:77:87:c8:e9:8b:7a:1b:fd:14:da:55:3a:e4:
52:c7:64:ef:1b:92:50:26:b0:0c:ec:5b:03:96:80:e5:fb:ce:
93:58:19:52:48:b8:33:69:59:50:78:4a:3c:03:6b:fc:a6:a8:
3c:f7:4e:47:c6:a0:b1:ab:79:13:83:15:83:8f:1f:f4:22:a9:
39:0d:77:78:d3:4f:b8:ce:1d:05:ce:dc:cb:b6:62:de:63:ac:
05:93:b8:5c:2a:b5:cf:92:e3:9a:76:0b:f9:89:b1:44:3c:6c:
69:44:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:02:47 2025 by rpki-client