Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/82G84G32y1mgU0Q3YtZB3rFx4UE.roa
File: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (raw, json)
Hash identifier: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=
Subject key identifier: F3:61:BC:E0:6D:F6:CB:59:A0:53:44:37:62:D6:41:DE:B1:71:E1:41
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019423D740CC5F4FADF7A459FFE742E444DC
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/82G84G32y1mgU0Q3YtZB3rFx4UE.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214229
IP address blocks: 185.117.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:40:cc:5f:4f:ad:f7:a4:59:ff:e7:42:e4:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f361bce06df6cb59a053443762d641deb171e141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:0f:04:02:76:ec:11:62:4f:cf:d3:f6:f8:
4a:6f:19:0d:a8:eb:0a:92:a6:9c:3f:74:5e:85:9f:
fd:cc:3e:7f:96:a9:9f:9e:af:54:13:d4:4a:c7:a1:
cc:02:37:7e:07:29:e9:4b:99:95:08:06:da:4c:3c:
8f:57:8a:22:95:7f:08:79:4e:bb:eb:28:86:f2:6d:
ca:9b:61:8d:2d:0a:c8:63:f1:ab:09:a1:ea:49:14:
da:4e:54:32:34:da:d5:b7:c0:8c:54:e4:25:aa:99:
ea:f1:65:bb:84:5c:6e:a6:98:e3:b6:e9:3a:b0:6d:
86:ab:6c:93:9b:32:e4:23:ed:e1:7b:16:6b:16:44:
58:5e:42:83:1c:d0:22:2e:0b:26:7b:a8:1d:a7:8b:
d0:17:5a:4f:c5:d3:fe:b9:9b:f5:7b:6d:7a:87:00:
b4:b8:3e:a3:b1:cf:c1:85:52:bb:db:b2:96:0a:9f:
56:39:0f:ae:58:6a:df:3b:e8:e7:87:9d:16:63:7e:
16:29:fc:d7:fe:7e:97:77:5d:42:01:66:3d:bc:09:
3c:97:3a:4c:a2:cf:ee:05:98:ff:88:27:a2:d7:cf:
d4:b7:56:34:11:8e:4e:0e:5e:55:a0:fa:1b:6b:45:
8b:a0:d2:50:2a:6b:39:f3:d4:28:e6:82:60:ec:c4:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:61:BC:E0:6D:F6:CB:59:A0:53:44:37:62:D6:41:DE:B1:71:E1:41
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/82G84G32y1mgU0Q3YtZB3rFx4UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f8:bb:cc:2f:5e:f5:fc:2c:e0:1c:68:6f:0f:e1:7c:2e:8c:
e3:5d:41:8c:ab:d6:cd:74:f3:f9:b0:fa:9c:31:98:09:d5:2c:
df:75:86:3b:af:bd:ee:8b:6a:0d:2f:c2:8e:a8:e5:da:82:3f:
ea:8d:3b:11:89:5f:fc:3e:12:37:ea:3b:d9:de:e1:dc:fa:d6:
6d:f0:00:28:89:04:35:af:d3:e3:aa:81:33:e1:23:27:96:96:
1d:81:95:34:2f:62:55:ac:d8:cf:2a:8e:b2:12:39:2b:c6:60:
ad:0d:6f:68:ac:f3:59:75:9a:c8:0e:fd:2e:9d:31:59:92:f3:
35:be:b1:a1:3b:64:3a:78:32:fd:a4:e9:23:5e:5d:de:20:00:
af:4e:c4:00:50:0b:0c:ce:8f:fe:94:33:8a:dc:8b:01:64:00:
93:7d:08:73:cc:67:7c:6c:9d:3b:fb:e5:f0:5e:27:e6:b3:a2:
f8:3c:30:b7:a8:bd:a6:b1:51:50:0c:4b:19:87:9a:f8:df:3f:
2c:cd:c3:57:2d:68:4e:6f:b4:43:c9:50:ee:c6:4c:77:ad:5d:
ea:9b:5e:e4:20:e2:68:ac:b6:2b:25:55:60:20:21:ad:5c:fa:
64:f1:57:ee:ab:a4:1b:e9:3a:95:82:da:de:78:c8:ec:23:16:
25:54:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:45 2025 by rpki-client