Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/PVatpozxq2iSr5EjDz4p95PO1D8.roa
File: PVatpozxq2iSr5EjDz4p95PO1D8.roa (raw, json)
Hash identifier: jnj6J4YwXSNpdZA8cx57mMPaW12cBZG8T42Zb5JhBQ4=
Subject key identifier: 3D:56:AD:A6:8C:F1:AB:68:92:AF:91:23:0F:3E:29:F7:93:CE:D4:3F
Certificate issuer: /CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Certificate serial: 019425214470C222C443D265D778A02C7D47
Authority key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/PVatpozxq2iSr5EjDz4p95PO1D8.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58340
IP address blocks: 83.146.128.0/20 maxlen: 20
193.177.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:44:70:c2:22:c4:43:d2:65:d7:78:a0:2c:7d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d56ada68cf1ab6892af91230f3e29f793ced43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:de:89:a3:9a:d8:51:7a:34:37:a2:05:94:
ca:ea:09:62:ba:de:74:44:59:fb:5d:26:80:0e:cf:
86:4d:6b:4f:d4:05:a4:47:92:1e:48:4c:ef:8f:a8:
0a:a1:f8:f7:48:f4:4f:3e:a5:ca:4c:33:dd:d3:54:
76:3b:9f:3f:b8:8d:13:e0:46:2a:82:95:81:4c:13:
06:8c:00:ea:33:f9:f9:01:1f:a6:8f:ed:6a:44:34:
b6:55:47:b4:27:a4:c4:d6:30:b5:21:98:c0:97:a8:
92:5c:6f:0c:20:1e:3d:46:35:a5:f7:0b:5f:03:7a:
4d:94:e8:b1:d7:29:bf:13:9b:8d:95:b8:43:ec:09:
2e:4d:1a:8d:39:36:20:df:bd:a6:f3:c0:e8:c9:ce:
ef:56:4d:23:ee:a5:bf:34:0c:3c:89:ca:e7:a1:ac:
84:3f:46:5c:28:a7:f8:5f:06:ba:8d:a5:bb:ed:16:
82:74:9c:3e:d0:9b:95:2f:e3:7c:86:28:19:39:af:
05:d5:03:95:f1:f2:cc:24:21:22:44:89:91:bb:01:
af:bf:bb:68:f6:40:d5:5d:25:55:bd:71:54:34:80:
ac:09:4c:3e:e2:87:af:79:41:cb:fd:c4:9b:a2:ed:
14:89:a7:75:78:ee:cf:a7:3b:fb:6f:f8:86:81:d7:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:AD:A6:8C:F1:AB:68:92:AF:91:23:0F:3E:29:F7:93:CE:D4:3F
X509v3 Authority Key Identifier:
keyid:4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/PVatpozxq2iSr5EjDz4p95PO1D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.128.0/20
193.177.188.0/22
Signature Algorithm: sha256WithRSAEncryption
30:a8:72:2e:d9:02:07:1f:41:95:19:dc:e9:f5:97:18:10:5e:
ba:2d:9c:c5:c6:17:8f:4b:19:d0:f7:9a:57:b2:f2:4d:0d:69:
90:29:35:e8:3f:97:4e:e9:98:0a:1e:1a:d8:f8:1c:02:c2:d7:
67:64:e5:23:35:88:c9:07:4e:f8:47:8e:8e:54:d9:cc:93:b6:
35:06:db:2c:88:ff:8f:a1:27:95:ef:03:70:89:b6:ea:76:1c:
56:d3:9b:99:10:02:54:94:8c:20:3b:6a:d4:aa:ca:24:b4:7e:
18:16:ac:e0:7e:fe:8d:8d:81:be:50:f7:41:eb:92:08:9f:54:
ae:73:2a:5b:03:54:24:f7:33:bb:86:57:61:35:24:04:74:36:
48:d4:1e:8e:40:5d:2e:9b:7d:c3:61:21:95:f9:bf:da:5e:8a:
8e:f2:99:1b:e6:42:ac:e2:36:5e:3b:e7:ab:50:06:c3:2c:95:
7f:b8:cc:6e:5f:28:5e:01:48:d6:14:fa:3d:af:f3:65:95:39:
0a:3d:57:14:cd:a5:72:1b:23:06:6c:7b:95:f8:90:48:9b:74:
d4:6c:18:d8:ac:64:ff:0b:74:14:c3:0b:3f:89:2a:e8:24:f1:
f4:9a:29:72:32:98:9b:a7:88:71:41:82:76:11:94:69:9e:50:
34:86:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:54 2025 by rpki-client