Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9teFqyGZ_mCkqm3X6jE1kAKLwYo.roa
File: 9teFqyGZ_mCkqm3X6jE1kAKLwYo.roa (raw, json)
Hash identifier: NhbHHFduLIRFVDSRiuXpJny6QZ53ctnpxomqsRiNGGs=
Subject key identifier: F6:D7:85:AB:21:99:FE:60:A4:AA:6D:D7:EA:31:35:90:02:8B:C1:8A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194282418ED42085909904974DACDA4EA22
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9teFqyGZ_mCkqm3X6jE1kAKLwYo.roa
Signing time: Thu 02 Jan 2025 17:50:41 +0000
ROA not before: Thu 02 Jan 2025 17:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214560
IP address blocks: 82.163.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:18:ed:42:08:59:09:90:49:74:da:cd:a4:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d785ab2199fe60a4aa6dd7ea313590028bc18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:6c:47:74:45:42:77:a0:bb:a3:79:7f:15:
19:1d:11:7e:82:d3:67:63:08:54:31:85:d8:3a:9e:
20:fb:98:c4:89:d9:93:92:b2:b4:33:17:e1:cf:47:
6e:c6:b3:1f:03:79:6e:c3:51:b4:8f:84:0e:a4:3d:
e7:77:e3:ab:2d:69:e6:2c:e8:e9:a7:9e:e0:69:56:
aa:52:94:db:a2:ee:7a:fa:a8:b8:7e:cd:b9:f0:4c:
15:8b:31:00:9b:6b:9f:f6:c9:03:22:ca:a6:16:b5:
3e:43:29:11:92:1e:fc:bd:e8:41:97:ff:7d:94:6a:
2e:67:a1:df:e0:6e:9f:f8:6d:40:87:b4:77:ca:25:
d6:83:1c:d0:7e:fc:46:57:ab:fa:78:b2:65:f5:32:
6d:70:d7:bf:89:c4:fa:50:fc:db:24:46:4d:fc:57:
8a:6e:85:98:5b:ad:7b:9f:40:fb:c9:12:0e:31:36:
39:78:59:73:9b:e5:d1:2c:80:bf:48:07:69:51:49:
05:c9:77:44:8e:c4:cc:22:d1:ab:2e:ba:a2:3d:12:
34:3f:52:32:dd:e3:a7:fb:fa:bb:bc:b1:44:31:c3:
44:63:f4:98:6e:9c:73:02:4f:08:0a:e9:4d:20:43:
d6:24:e0:e2:2e:db:83:55:d3:66:35:2f:96:03:dd:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:85:AB:21:99:FE:60:A4:AA:6D:D7:EA:31:35:90:02:8B:C1:8A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9teFqyGZ_mCkqm3X6jE1kAKLwYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/23
Signature Algorithm: sha256WithRSAEncryption
12:28:d1:e0:c0:46:5f:cc:ec:d8:28:04:b1:f9:71:04:d4:9e:
78:52:e4:ec:0c:a4:6c:de:42:1e:3e:6d:23:46:01:e9:fa:19:
03:75:fd:65:ec:b7:a2:f5:81:e5:b2:50:55:b7:0b:09:34:ed:
89:9e:81:04:07:18:61:d5:40:5a:6f:a4:ca:3f:df:76:0d:22:
92:b7:ab:48:6c:8b:ef:c6:7c:8d:54:ba:a5:4e:db:8d:03:01:
a2:5f:04:b7:98:b3:13:57:0d:64:22:9f:05:19:64:9b:4e:3d:
25:71:1f:2f:d0:67:67:a1:e7:40:f2:dd:e8:f8:ae:2e:91:30:
fb:5e:03:2a:17:6b:76:db:9d:6b:a3:6c:70:e0:f9:df:4a:32:
7f:41:71:0d:12:37:45:7a:2c:0a:61:b7:8e:36:43:42:b1:f0:
c0:17:ea:32:59:fb:b7:6d:20:da:90:00:ba:89:84:d9:f1:4d:
30:cb:76:23:e7:02:95:96:72:b2:5c:5a:4c:d7:fa:90:d7:3f:
9b:10:03:6a:55:cc:e1:24:9a:c1:ae:cf:6b:44:5e:4d:14:6b:
2b:3f:54:fd:4b:09:d5:ee:ea:0b:1d:59:0c:d1:51:24:2d:c4:
b5:ca:c6:5f:3b:c1:af:c8:e6:e5:ee:37:d2:96:c0:8c:cf:9b:
db:ed:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:14 2025 by rpki-client