Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa
File: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (raw, json)
Hash identifier: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=
Subject key identifier: EF:C4:B8:5A:66:D7:30:D2:3C:A7:55:8B:8F:85:3A:34:1E:81:A6:4F
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 01942745B82B6C08550822D41750EEF94CBF
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa
Signing time: Thu 02 Jan 2025 13:47:48 +0000
ROA not before: Thu 02 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208560
IP address blocks: 83.150.192.0/23 maxlen: 23
83.150.192.0/24 maxlen: 24
83.150.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:b8:2b:6c:08:55:08:22:d4:17:50:ee:f9:4c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Jan 2 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efc4b85a66d730d23ca7558b8f853a341e81a64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:5d:82:e1:0b:9a:4c:db:0a:e8:04:c0:50:
e6:8d:52:df:21:8b:28:54:62:a4:eb:6a:2f:f0:86:
0a:ae:29:21:e8:b6:b1:a7:d1:d1:a3:bd:6e:18:04:
1b:ee:7c:0a:a0:90:b3:59:ec:af:aa:ac:6f:1f:a1:
ec:f1:11:e1:d0:08:b9:27:8d:e5:53:2d:ca:96:6a:
6b:d9:40:b9:ff:2a:e0:48:ef:68:35:ac:e7:4f:da:
a4:be:d1:e8:e1:53:32:3e:2c:da:25:8b:2f:2a:68:
02:52:71:a8:a0:2e:a3:03:d7:64:e3:35:8d:45:d9:
7f:5c:2d:ca:31:7d:58:2e:88:8e:8d:a9:ca:52:67:
6b:78:b7:76:9f:8e:94:f4:c3:ad:0b:d9:20:63:e4:
9a:3a:1c:55:7d:ee:c5:5f:e7:1d:cb:77:02:02:05:
3f:51:a6:8d:91:8e:8a:6e:b5:9f:a0:4d:af:36:87:
ce:c4:1a:f5:a7:1d:0d:db:c6:ae:23:57:ee:c6:89:
9e:a0:a6:e6:e3:7e:64:58:41:3f:9c:5b:20:57:56:
be:00:1c:cb:7b:b1:75:ac:1f:42:88:7e:9a:fe:9c:
e7:73:86:a5:eb:ef:dd:8a:01:69:06:2a:ef:ff:b0:
8a:16:b5:f0:da:0c:28:38:39:99:61:22:4d:41:57:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:B8:5A:66:D7:30:D2:3C:A7:55:8B:8F:85:3A:34:1E:81:A6:4F
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.192.0/23
Signature Algorithm: sha256WithRSAEncryption
61:44:c3:7a:6d:c3:93:5d:ca:bf:49:32:80:e8:ec:6c:9a:1b:
a4:a8:b3:d6:27:06:cf:2d:41:f7:e5:0c:8c:6b:59:b2:71:c5:
e1:39:40:56:d5:6f:08:f0:e2:9e:78:9e:d7:fd:72:89:80:9e:
87:6d:c1:22:f1:47:5b:56:d8:28:a3:8e:90:fe:cd:e6:6f:7c:
c5:b6:85:e1:59:ae:80:1f:da:41:37:55:cc:23:31:be:67:cc:
76:5a:ee:46:28:28:1f:ca:f2:5c:6c:ec:02:20:40:10:70:9e:
cc:af:58:8b:fa:8b:0a:42:f2:e3:83:0d:37:c1:d8:b2:31:88:
a1:8a:3f:7f:c6:d9:c4:e1:cd:c5:14:0e:22:9c:d6:ea:f2:e8:
e8:22:9b:09:92:af:9e:0d:ec:dc:d8:5c:f3:fe:0c:2c:10:9e:
22:7c:bb:93:64:93:ba:9c:b7:29:71:a1:8e:2a:8b:5c:25:77:
cc:9a:18:71:ce:3e:b4:4a:99:e0:1f:d6:2f:57:bc:23:ca:b5:
dc:6b:43:62:fe:83:ad:40:af:93:90:8d:4f:c8:84:64:c0:e7:
aa:2a:bf:08:f8:5f:a6:ab:8c:f6:15:b6:15:71:97:f0:d9:fe:
2e:bb:17:bc:a4:30:0c:2f:c8:67:70:c7:f9:66:8a:fd:dd:89:
93:10:07:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:37 2025 by rpki-client