Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa
File: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (raw, json)
Hash identifier: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=
Subject key identifier: 69:0F:76:9A:FE:0E:5F:44:EB:19:74:61:A0:4E:2A:55:18:FD:2F:08
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0194266BF018FD33BB9B59D940EF71A4DCBE
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31595
IP address blocks: 83.167.160.0/20 maxlen: 20
2001:4be8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f0:18:fd:33:bb:9b:59:d9:40:ef:71:a4:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690f769afe0e5f44eb197461a04e2a5518fd2f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:cc:87:96:42:19:fa:cb:3f:a1:b0:be:6e:
2c:a1:74:fc:4d:fa:86:66:47:36:ef:cf:ca:28:26:
e6:31:e6:31:0a:9e:20:e8:4a:1e:5f:19:4b:e0:27:
f6:c1:fe:f8:10:3c:13:f8:b2:ac:11:49:52:6d:4d:
a8:95:1d:2b:71:93:5d:7a:8f:13:28:e5:f4:08:22:
ff:12:b5:be:e8:37:f7:19:9f:98:e5:8a:7c:9d:54:
72:6e:b8:a5:bd:b0:33:ae:7c:e6:d1:5e:38:c1:0a:
32:df:a8:6f:be:ef:85:b0:5b:0b:de:64:56:3d:70:
67:48:e4:d4:36:a4:05:62:cc:4f:84:c6:0a:87:0e:
4d:03:44:7b:f9:90:0e:22:df:41:da:24:44:04:8e:
20:9c:28:14:f4:6d:a1:8e:18:bd:d6:a5:9d:22:4f:
f0:da:ef:56:64:45:09:ba:a1:b8:fa:21:33:20:2c:
da:37:50:0c:93:37:ad:c4:93:39:91:54:4d:7b:e6:
0a:07:5e:c1:d2:f4:c1:2a:05:1a:72:9c:bc:5a:a3:
33:20:9e:da:14:a7:8f:e4:cf:a7:b1:43:a7:4c:fe:
23:93:f8:00:53:1e:aa:07:5f:f1:2d:a5:f4:a1:94:
73:96:af:47:8b:c0:24:b4:08:99:15:d8:ae:40:d1:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:76:9A:FE:0E:5F:44:EB:19:74:61:A0:4E:2A:55:18:FD:2F:08
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.160.0/20
IPv6:
2001:4be8::/32
Signature Algorithm: sha256WithRSAEncryption
09:98:af:76:5a:dc:f2:fa:99:f3:59:11:b3:a0:e4:57:a3:06:
b2:68:96:8a:61:cd:dd:c9:c7:42:9c:fd:9d:30:fe:b3:76:03:
4f:92:06:9c:33:e7:36:e8:dc:0a:b1:3a:11:a2:2f:3b:fe:17:
42:fd:66:a5:7a:68:54:46:7f:9a:ae:0c:e8:9f:68:fe:90:5e:
40:df:65:17:12:fc:8f:62:eb:ff:99:6e:c7:9b:4a:9a:a4:6f:
9c:e0:ba:44:fc:42:e4:55:d2:50:9f:64:61:1c:d2:d6:2e:f7:
69:cd:18:09:6b:ae:46:04:56:17:37:2b:cb:5e:aa:07:02:e5:
b0:eb:83:d8:9f:db:5a:96:d7:da:8a:54:56:0c:90:33:d9:4a:
88:72:33:33:2d:ed:82:94:42:28:8b:c8:63:66:92:a0:5f:bc:
c6:53:28:ee:96:f5:ef:71:50:69:da:c1:40:82:10:c8:46:94:
d6:a3:a6:11:30:fb:ef:35:42:21:c6:63:4a:c8:90:cf:54:4d:
b4:62:e7:e9:dd:f2:68:21:92:ff:2f:13:73:22:32:f3:28:86:
c0:c1:01:d0:18:0a:61:b2:eb:a5:11:c7:1f:5f:7f:ca:d1:ac:
75:a7:b0:5a:c0:d6:28:61:b9:cf:60:1d:b2:4f:60:f6:24:d1:
f9:c0:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:14 2025 by rpki-client