Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PUZfLGMs4cmeQ-ywx9KvDl5m5q4.roa
File: PUZfLGMs4cmeQ-ywx9KvDl5m5q4.roa (raw, json)
Hash identifier: dZHsgaRwM22/o8rkWFDSCOIG8yr72g2Gn6Ws5ZIHOMk=
Subject key identifier: 3D:46:5F:2C:63:2C:E1:C9:9E:43:EC:B0:C7:D2:AF:0E:5E:66:E6:AE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB961E8C7505CDE79EB28865D0ECFF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PUZfLGMs4cmeQ-ywx9KvDl5m5q4.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 83.137.152.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:96:1e:8c:75:05:cd:e7:9e:b2:88:65:d0:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d465f2c632ce1c99e43ecb0c7d2af0e5e66e6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:ce:ca:bb:5a:73:cc:49:8c:27:06:34:75:
b4:ac:57:a5:6d:ab:3c:cd:d2:f5:8e:d5:7b:87:9a:
ce:5b:fd:48:ff:6d:0e:c1:0b:55:9e:a2:04:7d:5e:
46:77:79:42:89:ab:0e:a3:5f:42:9e:13:06:71:77:
d9:b9:39:5b:ee:53:85:bc:d1:d2:15:5b:41:84:12:
4f:a0:57:92:d0:6e:55:bc:e2:c0:eb:59:47:82:90:
6d:e6:5f:83:f1:20:15:13:3e:66:74:5f:d7:c4:83:
c4:b6:fe:04:0b:73:cc:76:cf:22:6f:70:b9:2f:e8:
e0:20:a8:33:0b:bf:45:6a:7b:06:13:48:80:f7:7a:
f3:40:c7:8d:3d:6a:46:18:0d:ce:9e:ec:e1:de:46:
67:03:62:ee:36:94:e4:e5:1d:f6:61:af:5c:5a:22:
1c:d6:d7:86:c8:18:26:ea:5f:b5:33:13:bd:9d:d1:
1e:65:dd:c7:1c:69:2f:30:8a:72:49:e9:27:4d:6f:
a2:24:fb:ca:e7:d1:39:39:a5:87:74:e8:8d:40:3c:
6c:0b:0d:6d:41:39:dc:13:69:20:ed:ab:0a:87:00:
14:14:4d:ea:74:a3:c4:12:3a:d3:d5:76:c9:fb:32:
7c:d9:ff:eb:6b:45:7b:c0:e6:6e:e1:98:43:9c:5d:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:5F:2C:63:2C:E1:C9:9E:43:EC:B0:C7:D2:AF:0E:5E:66:E6:AE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/PUZfLGMs4cmeQ-ywx9KvDl5m5q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
88.209.201.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b1:36:72:0a:b2:e7:66:9b:65:9d:d1:04:17:c6:58:43:71:
b8:3d:93:59:9f:aa:c6:46:44:1a:c4:1e:28:c2:69:36:8f:b6:
9e:5f:f1:16:01:b8:19:59:1c:19:d4:66:1e:f1:e9:28:4a:9d:
a1:dd:d6:cd:bf:fd:fb:86:19:41:fb:fb:de:8c:34:ef:75:0a:
b3:c6:ab:f2:b4:bb:6e:3b:d6:6e:8b:09:f1:48:4d:6f:2e:1b:
cb:ab:02:9c:29:4e:15:fb:e8:62:b7:e2:4c:e4:d3:2b:4d:f8:
33:23:56:42:e7:0e:98:91:cb:2d:a7:c3:52:33:7b:37:9a:dc:
91:b4:12:4c:44:3d:6c:10:fe:4e:20:0c:8e:f6:9a:d9:3e:cf:
ae:0b:f2:c0:e3:99:6d:20:08:74:f2:25:20:35:4e:0c:68:b1:
87:54:1b:4f:4c:9d:34:0e:7c:4c:77:9b:e5:88:e5:65:97:74:
a4:c4:ad:9c:e9:27:69:5e:80:1f:e4:17:d1:cc:5a:af:2c:be:
4c:73:d3:24:a8:a4:01:bb:03:12:0d:59:7b:23:74:7f:f9:b6:
44:cd:41:c2:b7:f1:eb:ca:07:75:b1:3e:c0:d9:02:fe:6d:d4:
62:89:c9:70:55:5a:f6:99:1d:d6:20:46:1e:33:26:15:2a:5d:
51:3d:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:15 2025 by rpki-client