Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/83DWjPDI0qHPOk7NLbQWjtD2D1c.roa
File: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (raw, json)
Hash identifier: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=
Subject key identifier: F3:70:D6:8C:F0:C8:D2:A1:CF:3A:4E:CD:2D:B4:16:8E:D0:F6:0F:57
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 0194274859B3896D680FDC3945B709D11A38
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/83DWjPDI0qHPOk7NLbQWjtD2D1c.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56765
IP address blocks: 94.184.112.0/21 maxlen: 24
194.225.24.0/21 maxlen: 24
2001:14e8:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:59:b3:89:6d:68:0f:dc:39:45:b7:09:d1:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f370d68cf0c8d2a1cf3a4ecd2db4168ed0f60f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:19:6e:47:27:bf:8f:ad:78:36:cc:d8:13:
fd:65:bb:37:d4:72:ed:43:cf:1e:22:d1:79:45:61:
fd:a4:ae:43:24:66:78:74:14:2d:bf:a1:a2:f1:dc:
4e:76:30:93:1c:39:09:ea:23:0a:fe:44:d7:ea:2e:
e5:46:5d:26:fb:cb:32:a0:13:48:06:6f:bb:55:7d:
ab:df:e1:cf:78:e6:f8:ff:af:67:30:e8:f0:e9:f4:
9b:ef:22:c2:79:0a:e3:5e:5e:ae:15:1a:6a:84:db:
74:ad:bc:78:21:02:ab:d8:9b:15:15:1a:64:ac:26:
d7:72:d9:a1:2d:0f:9a:90:8c:c6:87:47:bb:8f:ea:
f4:a1:f4:c3:d9:3e:62:b0:70:52:75:ca:47:3b:6b:
c3:b5:2d:d0:53:2d:2d:fb:5c:bd:3a:af:87:cc:2a:
31:51:ae:d7:b7:76:16:5c:99:09:59:9c:03:f6:13:
03:f5:3b:fb:44:ff:f0:33:86:e2:a9:98:a9:44:dc:
cc:e1:80:dc:5c:65:46:1b:2f:dc:3e:14:38:ba:14:
13:bc:06:63:f3:07:5d:67:02:e3:f0:36:33:ef:5d:
de:bf:ad:1a:8e:a4:99:44:f1:14:9f:0b:d3:84:7d:
9e:fc:08:c5:ac:37:f4:00:4a:7a:20:ed:47:bd:5f:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:70:D6:8C:F0:C8:D2:A1:CF:3A:4E:CD:2D:B4:16:8E:D0:F6:0F:57
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/83DWjPDI0qHPOk7NLbQWjtD2D1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.112.0/21
194.225.24.0/21
IPv6:
2001:14e8:5::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c4:f6:44:25:9f:ee:ca:e9:ff:e6:aa:dd:74:0e:7e:69:1b:
7c:fa:e0:11:ee:00:eb:ae:fa:98:79:8e:eb:55:3a:d6:65:cd:
f4:1e:bb:23:56:07:d5:54:6b:a3:be:f8:ad:4a:1c:99:4e:f8:
1c:7a:ea:ee:1b:3c:f8:61:9e:51:39:80:78:0d:bd:2b:39:77:
66:9a:ef:a2:90:9a:b1:9f:f8:12:e2:5e:8c:14:98:6c:7b:0a:
dd:cf:de:1f:ae:d8:e5:c7:c8:b3:da:54:e1:aa:1b:a5:e2:93:
e2:88:a5:35:5e:27:9d:57:22:e5:28:0c:18:55:ca:e6:72:8c:
f7:ae:c8:8f:b6:59:aa:1f:1a:ca:4f:41:37:be:cf:00:d2:79:
6e:0e:ed:57:31:6c:b6:70:46:91:1d:84:08:bf:cd:63:ce:6f:
d7:f3:9b:0d:18:e7:17:ba:8f:5c:57:b9:38:41:f7:83:4f:0b:
0a:57:0d:53:1a:c7:12:8d:a2:dc:5f:64:bf:4b:53:71:8a:f0:
98:67:0d:31:f8:46:e7:fb:ab:12:7d:4e:00:a1:38:58:d9:c9:
cc:da:0d:f3:7c:af:90:02:98:23:11:1c:80:cb:01:1f:25:02:
76:b4:81:7d:a8:6c:2c:ac:d0:6c:31:b9:0b:04:15:fa:02:31:
6c:9c:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:33 2025 by rpki-client