Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ib7IRNpflzvUY9iDq9IqXPjmzrE.roa
File: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (raw, json)
Hash identifier: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=
Subject key identifier: 89:BE:C8:44:DA:5F:97:3B:D4:63:D8:83:AB:D2:2A:5C:F8:E6:CE:B1
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194236A1994BA8BE0326B02013710AA9173
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ib7IRNpflzvUY9iDq9IqXPjmzrE.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 82.206.12.0/23 maxlen: 23
82.206.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:19:94:ba:8b:e0:32:6b:02:01:37:10:aa:91:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89bec844da5f973bd463d883abd22a5cf8e6ceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:b1:0b:32:7d:23:78:3c:26:1e:02:39:08:
5b:71:81:44:36:e7:4c:ae:8a:37:12:5b:cf:cd:7c:
84:1d:3b:21:f7:1e:a4:b3:b2:09:16:59:73:0d:78:
b3:ea:98:ad:38:d3:ec:3b:1a:b0:4c:94:80:95:a0:
23:62:c1:d6:ea:b2:b4:17:21:a1:ec:bd:3f:12:c7:
28:d9:60:e6:8f:e5:56:46:ba:b8:db:1a:11:52:9e:
59:99:51:e6:f5:86:a2:57:23:b7:84:5e:42:f4:4f:
04:82:a9:60:bf:78:2a:65:ec:92:26:fd:69:b5:29:
d2:67:f7:e8:87:56:63:85:f1:d8:72:c3:a8:cb:24:
d8:81:82:be:4c:46:3d:bf:ba:42:61:d5:79:0e:ff:
07:28:1f:1a:38:95:64:ef:b7:d4:38:00:2f:d5:df:
9f:b7:25:d4:9c:8d:cc:97:23:9b:e2:f7:0b:f0:bb:
e0:a5:61:e9:5b:f9:71:e6:0f:b4:ae:60:b7:ae:9a:
df:63:92:38:db:38:62:b2:e1:c3:e1:5c:87:88:4b:
1f:80:2a:1e:80:a1:07:3d:3e:40:95:97:ed:ef:c9:
c0:ff:03:ed:d0:c7:f9:c4:7c:93:c8:e8:38:1d:28:
c7:52:02:ae:e5:cb:db:14:37:b5:6e:c0:43:48:44:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:C8:44:DA:5F:97:3B:D4:63:D8:83:AB:D2:2A:5C:F8:E6:CE:B1
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/ib7IRNpflzvUY9iDq9IqXPjmzrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:2d:ed:c8:98:5c:73:f2:58:b0:30:8c:1c:3c:38:d2:4b:90:
fe:76:2b:4b:58:b8:64:d6:37:af:b2:39:8d:ee:46:32:44:e7:
48:3f:e7:fb:21:16:c6:d6:2f:60:3d:fb:89:ab:e7:cc:0f:56:
10:3c:f3:fb:52:43:93:32:f6:de:ee:fb:52:3c:0c:73:b0:4e:
77:5b:d7:0d:ff:af:4d:ee:05:bc:36:18:1e:fc:90:7a:a0:5f:
ec:09:3e:45:5d:8e:09:93:8a:8a:bd:f5:e9:a6:33:dd:4f:22:
25:ba:b3:9a:eb:d7:bc:27:08:45:8a:30:ac:e3:97:af:8a:b4:
91:cc:85:b8:4f:84:be:30:a4:56:6b:fc:67:8b:d3:18:23:ed:
e0:fd:50:0d:97:e9:7b:67:77:e1:ae:c7:9c:9d:6d:f0:6d:23:
74:7c:66:58:49:d3:a8:3d:63:cc:4f:9e:c6:1a:6b:cd:e4:de:
f0:3a:d3:b0:31:09:cd:12:60:34:51:5c:f9:f5:bb:a6:32:55:
28:7f:6b:13:ac:ee:41:e1:77:ac:0e:f5:f4:cf:61:10:c9:ba:
3c:2a:e1:f2:1d:2c:82:97:0c:ec:cc:b7:6f:70:51:2e:33:02:
76:f2:90:64:00:d9:2c:bf:e6:28:73:62:10:3e:c5:c1:be:1e:
fd:5a:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:09 2025 by rpki-client