Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/9kpc0ckLrtaczEaFOLG8l8RVjrk.roa
File: 9kpc0ckLrtaczEaFOLG8l8RVjrk.roa (raw, json)
Hash identifier: xIXb77Eh/abnTO6ZUsf4I1VYY0ialjzFBSMSPQAeSKA=
Subject key identifier: F6:4A:5C:D1:C9:0B:AE:D6:9C:CC:46:85:38:B1:BC:97:C4:55:8E:B9
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B7478BFC03EB858B53D8C87A501ACB75
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/9kpc0ckLrtaczEaFOLG8l8RVjrk.roa
Signing time: Thu 30 Jan 2025 12:55:06 +0000
ROA not before: Thu 30 Jan 2025 12:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 83.147.216.0/24 maxlen: 24
83.147.253.0/24 maxlen: 24
83.147.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:47:8b:fc:03:eb:85:8b:53:d8:c8:7a:50:1a:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 30 12:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f64a5cd1c90baed69ccc468538b1bc97c4558eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:7d:94:b7:6b:b7:ab:11:13:2a:e9:30:0d:
0e:07:c0:ec:59:83:71:0f:82:9b:d1:64:2b:29:86:
1a:85:43:b8:bc:00:7b:90:da:74:4a:83:28:b8:1f:
f1:45:a9:34:d0:4c:6a:cb:7d:f7:51:19:c1:b0:31:
b8:b7:77:72:33:2e:d0:a5:13:8b:8f:2c:35:cd:de:
82:02:26:1c:1c:d6:ff:d2:ac:47:82:ac:de:70:5d:
c0:2a:a5:ab:fb:b2:6a:ec:93:af:10:70:f4:45:ae:
ac:85:c5:94:50:aa:60:69:46:be:47:c7:b9:4f:42:
3e:2e:2c:99:4b:aa:81:74:17:50:5d:04:7e:65:6e:
35:0d:99:7d:35:a3:2e:31:7a:eb:78:9a:dd:6b:ff:
19:16:33:37:8c:e1:de:da:05:d5:cd:e8:44:7a:d8:
7b:40:46:d9:c8:fc:db:b8:7b:ec:28:b9:57:5a:ad:
ef:93:5b:fa:b8:9e:b3:4c:56:7a:63:26:0e:79:55:
26:68:3e:e2:cf:32:60:97:71:64:2a:bd:7b:c8:d5:
30:32:1e:4e:b1:61:d3:3a:cd:73:61:60:6e:b7:f0:
96:cd:51:dc:34:97:c8:4d:f6:d7:44:59:36:be:07:
f2:cd:b8:e0:d7:5c:84:00:e9:23:f8:d1:d7:e3:58:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4A:5C:D1:C9:0B:AE:D6:9C:CC:46:85:38:B1:BC:97:C4:55:8E:B9
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/9kpc0ckLrtaczEaFOLG8l8RVjrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/24
83.147.253.0-83.147.254.255
Signature Algorithm: sha256WithRSAEncryption
4e:e6:e1:6e:f4:3a:63:a3:63:5f:9a:35:a5:ad:c8:fa:c6:1d:
52:b3:6d:d9:ae:a0:1b:04:c4:89:4c:bf:8a:e1:9c:06:16:12:
ca:a8:bf:7c:d6:91:11:bb:ea:33:25:0d:f2:69:c0:07:be:05:
45:a0:a7:f1:02:4d:55:f3:58:51:b4:8c:fb:f5:df:c3:e6:c7:
b0:90:9a:6c:ae:5d:a3:0a:df:16:96:36:11:8b:37:e0:5c:81:
60:48:36:8c:6e:15:6f:55:84:48:da:41:62:ba:2b:c8:8d:82:
b0:a0:4c:fb:c9:ae:c8:2e:2f:fd:48:89:d0:45:59:d7:3c:d6:
92:1f:e6:d4:2b:2d:dc:fb:9d:3b:07:55:93:d6:34:8e:48:52:
3b:c2:bf:5d:cb:ce:97:57:00:2a:5d:6c:19:24:67:61:9d:04:
63:b5:0f:bc:8d:a4:d8:fc:8f:71:0d:5d:4e:3c:44:16:d4:aa:
6d:41:c3:f0:ca:b2:84:b0:fc:91:1d:e6:27:59:42:1f:33:dc:
98:d7:13:be:83:71:5a:65:10:0c:39:f1:b4:11:0c:a2:9d:38:
cd:b6:b4:95:8f:89:4b:2f:8a:9b:31:9d:4a:76:35:33:77:63:
b3:54:30:51:b2:c7:ac:32:d0:64:ae:50:cc:88:ad:10:4c:df:
ba:de:9f:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:00 2025 by rpki-client