Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/83psYQzBuGOze8I6-0CjxQscodE.roa
File: 83psYQzBuGOze8I6-0CjxQscodE.roa (raw, json)
Hash identifier: 4QKrRfaz9TF8W9IiKWbKDDgXAyXP//O9GEdITaFK5w4=
Subject key identifier: F3:7A:6C:61:0C:C1:B8:63:B3:7B:C2:3A:FB:40:A3:C5:0B:1C:A1:D1
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0194B88E6366BF152C2CA1B82D08CEFB5AC8
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/83psYQzBuGOze8I6-0CjxQscodE.roa
Signing time: Thu 30 Jan 2025 18:52:06 +0000
ROA not before: Thu 30 Jan 2025 18:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2001:3380::/29 maxlen: 29
2a0b:3e00::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
2a14:5840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:8e:63:66:bf:15:2c:2c:a1:b8:2d:08:ce:fb:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 30 18:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f37a6c610cc1b863b37bc23afb40a3c50b1ca1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:82:0d:8e:bb:0e:14:65:b7:2d:99:f2:d6:
a5:bd:1b:e1:99:3f:fb:70:29:4d:e6:2d:cf:78:06:
ab:0d:3b:50:a3:23:14:2f:9a:ec:26:22:7b:3f:f8:
85:3e:a0:07:0a:92:c9:f2:5a:67:56:eb:6a:6e:51:
ed:a9:ef:6a:43:38:35:66:67:8b:61:99:2c:a8:2d:
77:50:16:3c:f1:07:24:ba:df:8b:11:f2:27:cd:78:
56:51:aa:32:c7:28:3f:7b:a2:3a:e3:80:be:12:99:
2a:37:fd:58:5c:12:18:45:78:89:46:62:d7:57:9f:
12:8c:c9:15:78:cf:1a:d3:f1:76:f4:83:f5:a7:bb:
c6:ca:22:2c:3a:5f:a1:ce:dc:83:ed:12:5a:76:98:
6f:9b:90:78:70:e4:0d:bf:39:4c:4d:6b:2d:04:8b:
37:d0:e0:9c:9b:0e:68:83:90:14:be:b6:b5:61:47:
cd:5e:f1:48:56:91:4e:8a:60:dd:2d:6d:cb:20:03:
a6:29:7f:43:ff:6e:9e:d6:5c:9a:96:dd:c9:b5:d3:
3a:57:a5:a1:ab:53:b7:00:df:76:fb:a5:0a:a1:af:
35:b9:4c:dd:a4:dc:64:18:5a:8f:f9:ac:6b:fc:a0:
0b:58:da:29:ee:f4:96:da:28:2d:e5:4d:59:50:fe:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:6C:61:0C:C1:B8:63:B3:7B:C2:3A:FB:40:A3:C5:0B:1C:A1:D1
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/83psYQzBuGOze8I6-0CjxQscodE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3380::/29
2a0b:3e00::/29
2a13:b840::/29
2a13:ddc0::/29
2a14:35c0::/29
2a14:5840::/29
Signature Algorithm: sha256WithRSAEncryption
6c:84:a8:0a:a8:b1:a3:5f:3c:a1:ed:e7:ca:92:88:c9:4a:aa:
1b:31:8b:d3:dc:6b:12:07:e2:4d:52:4f:98:93:d0:d9:d3:a0:
7f:37:d7:70:e6:68:a1:5e:bf:6d:5a:07:51:95:49:71:05:ae:
20:ea:52:3c:e7:6b:9f:ca:ca:7d:31:f1:e7:c2:f7:22:fc:32:
f9:3d:8e:bb:e2:87:02:2a:52:d6:cd:ac:fb:c1:0a:e7:4a:6b:
3f:d7:6d:7b:8a:58:05:d3:78:05:f0:c1:9b:50:cb:8c:69:8b:
8c:ef:fe:44:37:11:bb:27:0c:17:ac:3d:b6:83:44:0c:30:f2:
1a:d0:2e:3b:c3:e1:0c:52:ba:f6:99:40:25:0e:7a:61:7b:e4:
3b:ab:58:c9:ec:18:53:cb:a3:9d:cb:03:28:8f:f2:12:0d:dc:
38:e7:de:b9:2b:c3:c9:1c:26:68:84:01:ed:4f:45:52:f1:cc:
f3:c6:17:11:c5:53:01:02:8f:a4:51:26:1a:ed:37:21:79:91:
f8:cf:02:9b:de:10:fd:a8:cc:39:bf:c7:8a:58:bf:da:fe:a0:
29:b8:85:cb:34:ea:be:f6:33:e1:e0:ac:41:85:69:92:d3:a1:
2b:3c:ab:5f:11:91:24:70:ac:bd:31:bd:b2:fd:49:f6:fc:4a:
b0:11:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:12 2025 by rpki-client