Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa
File: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (raw, json)
Hash identifier: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=
Subject key identifier: F4:62:33:00:95:2B:FE:8B:7D:5A:4F:8B:38:10:20:D4:AB:B5:08:9D
Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial: 019424B3DB6F6F03FD110F3E1518FD7BAD1C
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201877
IP address blocks: 83.139.194.0/24 maxlen: 24
83.139.200.0/24 maxlen: 24
83.139.209.0/24 maxlen: 24
83.139.210.0/24 maxlen: 24
83.139.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:db:6f:6f:03:fd:11:0f:3e:15:18:fd:7b:ad:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4623300952bfe8b7d5a4f8b381020d4abb5089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:80:d2:84:27:7f:77:6a:86:58:ae:44:d8:
8f:41:bb:0c:e3:b7:9e:58:f8:4c:93:52:0e:9e:77:
bd:ba:7c:38:8c:92:d7:75:4e:6a:a1:38:bc:a8:80:
e1:03:75:02:f5:74:55:0f:f9:42:15:42:b4:a2:58:
b2:44:31:fa:2e:b1:64:77:96:99:87:ef:dd:9e:a6:
3a:6e:e1:32:e5:ca:d5:2e:fe:25:de:2a:e6:12:b1:
89:a0:89:69:c5:f3:a7:95:86:13:2c:18:6e:47:dc:
b4:29:bd:0e:0c:9c:ec:92:3c:93:1b:5a:c9:1f:fb:
e5:fe:35:47:b7:5a:66:fc:bd:a8:61:d6:46:0c:aa:
11:33:85:8f:5e:3c:ee:c1:bc:27:9d:cc:9f:fe:64:
8f:84:8c:90:be:f8:ff:ff:41:8d:db:8d:f9:ee:72:
37:7a:fe:43:cc:74:90:9a:22:78:9f:fe:40:99:f9:
26:b3:8e:6b:85:9c:ce:fa:03:3f:9c:f4:8f:37:ab:
aa:f1:98:04:b0:4d:e5:f8:c6:16:2e:5c:7b:41:f1:
e5:ed:8e:2a:a9:4b:73:fd:36:5f:fa:78:92:70:0d:
a2:91:75:b3:b1:2d:4d:80:0c:71:02:fc:11:9e:74:
a5:d8:d0:2a:3e:33:13:16:ce:b9:81:ff:89:cb:f5:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:62:33:00:95:2B:FE:8B:7D:5A:4F:8B:38:10:20:D4:AB:B5:08:9D
X509v3 Authority Key Identifier:
keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.194.0/24
83.139.200.0/24
83.139.209.0-83.139.211.255
Signature Algorithm: sha256WithRSAEncryption
09:c4:35:e4:f9:e6:58:fd:6c:53:1a:63:3f:ea:1c:e2:06:5b:
a6:e4:92:ae:de:0d:62:6e:fd:46:cb:39:03:16:05:ca:fe:cf:
e6:4d:d4:08:51:1d:68:10:75:6d:2a:9c:b2:b5:5d:97:ca:0a:
e0:b1:e5:26:85:75:e5:ac:42:ea:56:63:45:2c:01:a0:84:1a:
b1:ee:b0:4b:d8:bc:1e:b6:bc:2c:e3:54:b9:a6:5c:97:20:43:
82:fd:0a:a3:1a:00:ea:f6:2d:4f:6a:58:ec:f8:ae:fc:ee:f9:
6c:62:fa:03:40:31:6e:d2:02:a5:e6:60:19:2a:c6:82:3f:40:
17:aa:98:fb:ad:06:f3:7e:7c:dd:0b:34:eb:7e:6c:bb:f8:af:
51:db:e1:18:00:18:71:0c:65:18:b8:7f:09:55:99:8d:72:e3:
77:71:0b:bf:5f:9c:7b:50:bd:5c:3c:75:30:f0:91:e4:01:27:
4c:79:7d:5c:93:5e:d8:9b:0e:c0:a7:18:72:13:24:1c:98:1e:
a4:f8:a8:be:12:98:30:26:f8:87:ac:e4:93:b6:58:2c:93:da:
cb:c0:53:03:ee:4d:f1:45:5b:d3:19:c1:0d:d0:73:96:95:38:
7e:c3:43:24:de:f2:3f:cb:02:19:b3:4b:84:e8:f6:81:03:cd:
ec:29:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:15 2025 by rpki-client