Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AeYDIuagrsUBxde2pGJHEXm6YE4.roa
File: AeYDIuagrsUBxde2pGJHEXm6YE4.roa (raw, json)
Hash identifier: 7ROoQf1pf85vJsekR4oCrvQaW7Wp+VhJsYm8aOXMxYk=
Subject key identifier: 01:E6:03:22:E6:A0:AE:C5:01:C5:D7:B6:A4:62:47:11:79:BA:60:4E
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01855DA52353944E4491D1112E36C9D508FD
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AeYDIuagrsUBxde2pGJHEXm6YE4.roa
Signing time: Thu 29 Dec 2022 11:29:41 +0000
ROA not before: Thu 29 Dec 2022 11:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 192.166.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:a5:23:53:94:4e:44:91:d1:11:2e:36:c9:d5:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 29 11:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01e60322e6a0aec501c5d7b6a462471179ba604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:0c:1b:91:ab:59:8c:e1:33:d6:a2:2d:ed:
63:99:cb:6c:85:0d:fc:d4:31:55:a6:9b:bf:59:c1:
48:58:ba:57:32:2f:f9:60:0b:c3:0c:db:09:d4:44:
5b:3b:6b:8c:5e:e9:b8:56:5d:17:fb:be:bc:af:bf:
a6:26:f3:48:46:65:67:8c:a0:35:0b:3d:42:57:21:
a5:8e:b3:4a:e6:98:7b:75:c0:d4:4f:e8:2f:69:44:
03:12:b7:a3:e6:cf:94:86:ee:43:8c:ff:ac:87:33:
f5:aa:cf:0c:07:2c:3a:d5:4f:35:fb:40:31:4b:4a:
d8:08:d9:13:b9:3d:7e:4e:ca:ce:e9:52:62:e6:6a:
6c:16:b6:ba:f3:7e:38:53:6b:4a:fd:8e:1c:80:c5:
6b:81:cd:54:cc:81:d6:91:a3:cf:3d:7e:47:9e:f4:
97:09:19:d2:90:87:5a:bb:53:73:37:73:6d:2c:81:
f6:7e:9b:15:cf:8c:de:57:68:36:e7:dc:c9:81:c5:
70:55:d3:8b:36:aa:19:b0:d0:4a:f1:5f:6c:02:9f:
58:39:94:65:33:04:8f:18:4c:a4:8c:87:03:82:c9:
30:f1:11:a7:00:01:7d:2e:f2:d2:4a:82:3f:b4:ca:
de:4d:09:48:be:3c:bd:76:41:f5:b0:28:f8:43:c3:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E6:03:22:E6:A0:AE:C5:01:C5:D7:B6:A4:62:47:11:79:BA:60:4E
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AeYDIuagrsUBxde2pGJHEXm6YE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.83.0/24
Signature Algorithm: sha256WithRSAEncryption
11:54:ca:0d:6c:03:63:fe:22:7d:54:35:08:b3:2f:17:9b:70:
c2:64:50:80:f4:5d:ac:13:c8:38:7a:4d:30:2a:44:2f:2d:f5:
c4:3e:f6:8b:49:5e:32:fe:d0:d3:37:47:2f:b1:35:df:3a:7e:
08:9a:5e:2a:a0:ab:f1:19:9f:fd:9b:3c:9b:63:55:7c:94:bc:
b4:44:7c:df:ce:17:1c:6a:e0:4f:d8:90:ad:5b:b9:a3:51:de:
23:75:78:77:75:ac:74:95:2e:4b:d2:78:68:12:15:bd:31:86:
a4:79:d9:3c:b2:32:2b:da:4a:e8:53:c3:4e:61:a5:59:37:23:
25:02:f0:53:de:3a:31:c1:e1:e1:0a:9d:85:0c:1e:3e:90:c4:
30:6e:b9:78:27:57:3c:85:32:16:f5:59:11:5a:83:b8:64:09:
84:5e:f4:58:e2:14:90:ae:3a:24:31:92:76:61:3d:5d:54:de:
22:67:1a:e2:3e:85:84:8a:98:e0:ba:28:6e:80:64:80:7d:ac:
43:06:47:63:0d:b5:a0:33:e1:be:a2:66:ec:44:a8:93:2e:a3:
c3:f5:cc:d4:c1:3f:29:b6:9c:51:99:0e:87:b8:92:de:2e:d3:
ef:7c:b2:45:df:ef:12:9f:3b:37:dd:63:7a:4e:cf:86:00:e4:
89:18:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:44 2025 by rpki-client