Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/_0xzjWFSkzBLGLL_0JWnAmEsjDg.roa
File: _0xzjWFSkzBLGLL_0JWnAmEsjDg.roa (raw, json)
Hash identifier: jnJ4LYTkpMfYjmbu6csGjYBdMnIp6t/TGOW8N7V0/jM=
Subject key identifier: FF:4C:73:8D:61:52:93:30:4B:18:B2:FF:D0:95:A7:02:61:2C:8C:38
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA7ADC95479A662B09F70A8A89DC53
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/_0xzjWFSkzBLGLL_0JWnAmEsjDg.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204086
IP address blocks: 82.160.86.0/23 maxlen: 23
82.160.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7a:dc:95:47:9a:66:2b:09:f7:0a:8a:89:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff4c738d615293304b18b2ffd095a702612c8c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:cd:0b:6d:e9:bf:64:20:5b:69:13:48:49:
ef:fc:79:e9:f8:28:00:0f:82:e3:4a:55:d2:28:49:
d6:56:ab:31:c3:b9:2c:76:90:e2:d1:a3:1f:19:aa:
85:1a:ec:22:6b:41:0a:60:b8:19:b2:54:c6:c1:33:
e1:ba:e7:15:c4:41:92:7e:0d:ee:e5:fa:98:42:4f:
47:7e:2f:e1:85:58:4a:29:59:38:0d:14:49:8b:ae:
91:f3:d5:e5:87:6d:b6:c0:70:e1:ed:f0:5f:62:e3:
f2:61:09:69:de:d8:86:f1:c5:42:b3:19:7b:c7:92:
fe:53:8c:77:58:ab:65:8a:b4:c2:6a:15:72:85:7e:
22:0e:a3:a9:9a:88:5b:b3:69:fe:c0:24:2f:58:79:
78:30:47:0f:45:8a:3c:76:4d:77:80:9c:a7:e3:f3:
f1:b3:60:40:53:e4:c7:61:c1:b4:9f:d7:d8:9c:fe:
c8:8e:4a:c4:6f:7c:bf:60:8d:48:2d:d2:3f:2a:47:
d7:9f:f7:82:a0:45:3c:3f:4d:b2:9e:51:56:eb:35:
30:92:7c:3a:39:f3:c2:07:a5:0e:11:d4:9f:b8:46:
66:60:c9:6a:53:97:62:fc:9d:63:9f:c0:4f:6d:df:
47:83:07:fa:58:58:31:4d:62:15:af:a7:95:30:0d:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:73:8D:61:52:93:30:4B:18:B2:FF:D0:95:A7:02:61:2C:8C:38
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/_0xzjWFSkzBLGLL_0JWnAmEsjDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.86.0/23
82.160.138.0/23
Signature Algorithm: sha256WithRSAEncryption
44:7a:05:ad:7c:e3:2d:4d:2d:a2:1b:19:83:ac:65:16:fc:8f:
4b:80:6d:f5:96:3a:fa:21:04:18:8d:e7:7d:0f:11:a5:02:fb:
05:1d:ce:fe:4b:1b:ab:15:cd:95:56:ee:58:c5:9f:48:60:b4:
f1:79:1e:ec:5e:c3:43:e9:6e:ba:05:0c:52:2b:cd:42:11:34:
4a:80:12:e8:b8:70:44:9a:54:68:5b:5a:46:61:b1:db:4e:41:
b4:d1:17:d2:15:e9:18:4b:44:20:05:9c:53:54:08:ae:69:38:
ed:ce:6d:0d:1b:40:89:4b:a5:11:ac:7e:06:25:af:2d:ed:62:
4a:8d:2a:a9:39:27:10:ee:85:b7:28:1e:3d:85:86:bd:b0:cb:
c4:fd:1c:37:4d:ce:cd:b2:d4:57:e9:04:09:2e:d0:e6:ab:a8:
c8:f8:67:8f:82:f3:a9:c5:4a:bc:da:00:0a:77:e4:91:40:79:
cc:7b:9e:59:6d:6d:4c:67:23:cc:3d:38:a5:a2:6a:5a:ef:02:
49:15:09:e3:c3:83:77:d0:59:b4:5d:5b:b8:f9:6f:34:cb:38:
d3:64:4c:ed:2a:cd:fc:01:d7:f9:85:67:47:d3:68:32:3f:b9:
dc:a0:10:01:8a:ae:c9:b9:15:6a:35:87:c1:13:49:10:63:4f:
af:ed:6b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:42 2025 by rpki-client