Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/74rFfsVLB83xqrl230f69RyQMZo.roa
File: 74rFfsVLB83xqrl230f69RyQMZo.roa (raw, json)
Hash identifier: uIHKdF0Md6VmRaPIQqLHKtiwEPhOEBVDe4Gopq3AYXw=
Subject key identifier: EF:8A:C5:7E:C5:4B:07:CD:F1:AA:B9:76:DF:47:FA:F5:1C:90:31:9A
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 0194228E1E647C328866A61E0CF1FD2897DE
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/74rFfsVLB83xqrl230f69RyQMZo.roa
Signing time: Wed 01 Jan 2025 15:48:46 +0000
ROA not before: Wed 01 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 83.217.210.0/24 maxlen: 24
83.217.211.0/24 maxlen: 24
89.169.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1e:64:7c:32:88:66:a6:1e:0c:f1:fd:28:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Jan 1 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef8ac57ec54b07cdf1aab976df47faf51c90319a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:2d:32:c7:a8:5e:4a:29:a7:cb:72:cc:21:
b7:23:32:5a:48:43:07:b2:46:5e:3e:e4:b9:51:1c:
fe:d7:e7:62:36:94:ba:18:b5:af:ca:70:09:ca:38:
f2:b0:9e:5d:dc:b1:b1:e3:8c:dd:0b:d5:1d:b8:fc:
ac:0a:eb:89:d6:db:16:24:c3:bf:c4:67:9b:f4:ae:
ca:a4:c4:29:cf:52:9a:e4:09:f8:6e:68:50:b9:23:
d6:2a:f0:e1:dd:b1:71:98:eb:db:8e:0f:b9:90:c0:
07:ff:35:fa:4d:a8:39:1d:de:62:8a:0f:5a:b3:e7:
d1:f9:1f:d0:a1:c4:66:a7:c5:af:cd:cb:74:68:2c:
ca:88:60:92:ca:c3:f8:75:82:0a:71:c0:7c:ea:81:
6a:fe:4c:f0:5d:67:a1:74:0b:db:a1:06:dc:44:c6:
54:4a:79:81:5f:2f:6a:f9:79:bb:09:9f:91:a5:18:
a1:e5:ca:8e:02:a0:36:f2:e6:7f:5d:6c:a8:3d:b7:
5d:e2:a1:dd:c4:07:0c:54:6c:f0:59:1e:23:16:e6:
bd:71:7d:e9:09:54:28:fc:58:fa:3b:a4:a5:b9:f2:
9d:41:45:fd:f0:b9:fa:1c:b4:b7:3e:d4:ef:c8:51:
e1:c6:d9:9d:31:a8:1c:65:7d:71:e5:0f:b1:98:11:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8A:C5:7E:C5:4B:07:CD:F1:AA:B9:76:DF:47:FA:F5:1C:90:31:9A
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/74rFfsVLB83xqrl230f69RyQMZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.210.0/23
89.169.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:fa:b9:aa:6b:15:96:c9:eb:d5:7e:8e:b0:30:f0:69:a1:6b:
6f:80:72:89:87:60:20:3e:19:61:21:78:57:35:93:a7:b2:c7:
23:2c:08:f4:c9:d0:c9:c2:e2:fc:87:1f:ab:20:a9:41:ac:90:
f6:11:a3:f7:81:62:58:2d:ca:02:f8:80:fd:20:c1:0b:a9:fe:
1b:91:5e:5c:92:61:3c:08:74:df:1d:ac:0d:34:30:57:e7:a5:
37:14:2b:94:71:ea:8a:44:05:c8:65:4e:f1:14:45:25:50:18:
56:28:c9:8d:95:9d:5d:af:de:37:f5:aa:86:e6:d9:cc:9c:62:
6c:6a:b2:f0:75:bd:e0:d0:f0:2a:69:ec:23:52:8e:3c:ec:58:
08:19:a6:d2:f1:59:94:72:58:3c:3d:f2:2a:1d:67:c4:54:cd:
17:40:83:64:f0:72:a2:f4:43:e6:f9:df:0d:49:b2:bb:55:e1:
f1:83:f6:59:af:73:be:63:7c:08:bc:9b:01:53:ce:af:74:1f:
ab:55:0b:1e:a3:1f:ac:4a:46:cf:24:44:bf:a0:f1:fd:a3:fd:
4c:52:2e:41:65:85:a9:5a:3e:2c:b3:d2:3e:e9:85:9c:32:b0:
07:97:a6:f1:95:c8:9c:79:9e:ef:db:ea:6f:21:8a:04:6b:63:
16:cb:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:57 2025 by rpki-client