Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/KX36I7dSkLFi2aH0eqBcDdn1RlA.roa
File: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (raw, json)
Hash identifier: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=
Subject key identifier: 29:7D:FA:23:B7:52:90:B1:62:D9:A1:F4:7A:A0:5C:0D:D9:F5:46:50
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449C3E61C25A6C9D3928B72D88C82A
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/KX36I7dSkLFi2aH0eqBcDdn1RlA.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200205
IP address blocks: 83.139.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9c:3e:61:c2:5a:6c:9d:39:28:b7:2d:88:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=297dfa23b75290b162d9a1f47aa05c0dd9f54650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:e9:f4:ad:60:07:f0:13:8c:a1:bc:b3:fc:
c6:93:71:41:e1:aa:79:75:67:e3:83:5c:67:7a:ae:
ef:0e:97:1a:d2:e2:b9:46:b3:18:f1:fc:c2:df:aa:
9b:df:20:15:24:31:71:d9:38:7f:12:67:67:47:a2:
4e:a3:0f:ea:18:59:33:7d:83:7c:c7:ea:46:12:1f:
74:96:21:42:ce:17:3c:28:ca:01:e0:13:31:0d:79:
bb:d1:28:a6:a5:bd:79:de:8b:08:dc:77:84:0d:84:
b8:d1:0d:54:59:b8:55:5a:96:22:ed:7c:55:78:97:
5c:71:3a:62:c2:af:ae:bc:87:03:2a:2a:15:2f:a6:
94:96:35:ca:7d:89:79:97:1f:de:d6:b1:87:94:bd:
d3:55:8b:3b:ae:82:70:1a:16:a8:91:47:58:8c:fe:
59:ae:cf:dd:e1:08:8a:f4:4a:13:52:5f:dc:c3:78:
16:93:ac:af:88:a8:ed:14:1e:1e:8b:95:98:05:4d:
4d:b4:88:ce:3e:d2:2a:e3:69:72:f6:30:ba:9f:84:
c2:bf:ee:e9:17:ab:24:d9:a3:7f:78:92:f3:9a:b2:
8d:e2:a3:f6:ac:c9:a7:c1:82:09:d0:83:6e:97:32:
c6:50:4f:17:30:d1:09:0f:b2:6d:b6:e8:44:1c:bf:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7D:FA:23:B7:52:90:B1:62:D9:A1:F4:7A:A0:5C:0D:D9:F5:46:50
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/KX36I7dSkLFi2aH0eqBcDdn1RlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1b:f3:c5:a5:2a:dd:58:3c:63:31:00:b8:5c:1f:90:c5:49:
c6:cd:07:93:1d:11:af:96:ea:61:06:38:4f:5d:b5:ca:c1:51:
9d:5c:c8:ab:6b:2e:a4:9b:96:54:a8:95:a0:af:e2:8e:df:1c:
47:43:5b:19:ea:98:ed:61:a5:97:05:5f:fc:8c:8c:6b:b3:f7:
30:c4:fc:50:dc:fd:94:48:f1:03:b0:5e:01:12:1c:b3:5e:92:
c7:87:47:56:e4:aa:88:7b:bc:41:e3:e4:46:a1:bc:7f:50:d8:
ee:0b:c3:32:7a:29:0f:41:36:b1:cf:68:84:72:5e:fe:43:21:
68:09:e1:39:83:8c:69:52:43:c0:50:29:f7:a5:e2:c4:03:61:
20:3a:db:a1:94:04:d0:35:18:2c:4d:75:af:87:07:51:9e:9a:
08:63:b0:a6:6b:73:f2:bc:24:2e:1d:3a:19:40:73:97:a9:95:
90:96:80:b7:97:fd:5d:ff:76:f5:43:3b:8f:18:72:36:06:a5:
c7:b4:b2:8d:84:23:69:a2:b8:df:7c:e2:c5:14:19:d1:b5:b5:
70:66:ad:7b:77:2c:23:50:b0:c7:a3:61:a9:67:38:03:ae:a6:
bc:c1:ca:04:10:2b:7a:ff:85:79:ef:4d:06:01:80:e9:87:7c:
e2:65:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:49 2025 by rpki-client