Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ai8YefmXDmK6lGh1APQ8xiB4XII.roa
File: ai8YefmXDmK6lGh1APQ8xiB4XII.roa (raw, json)
Hash identifier: v7WJivilsLo6PF8U7MktrrOlt6CPYrsWtfJexZrFzkY=
Subject key identifier: 6A:2F:18:79:F9:97:0E:62:BA:94:68:75:00:F4:3C:C6:20:78:5C:82
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018317D4C4F1F19B740AA8187403E77D9BC6
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ai8YefmXDmK6lGh1APQ8xiB4XII.roa
Signing time: Wed 07 Sep 2022 12:02:43 +0000
ROA not before: Wed 07 Sep 2022 12:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.164.1.0/24 maxlen: 24
45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:d4:c4:f1:f1:9b:74:0a:a8:18:74:03:e7:7d:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 7 12:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a2f1879f9970e62ba94687500f43cc620785c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:40:6a:ab:55:30:b0:9f:df:a6:b2:b8:ca:
90:6e:02:f0:64:2c:4e:c7:e3:31:5e:43:b6:ee:97:
31:3c:74:8b:fb:29:80:1c:21:ce:f1:6a:ca:fb:7a:
fd:fa:72:fe:72:a7:63:08:81:c2:02:fa:d2:88:f3:
54:c3:7f:64:03:06:8f:0d:e6:2f:5a:46:0b:7c:fd:
45:6a:7e:8d:d3:d6:9e:23:91:6c:6d:77:ac:ac:e8:
2b:fc:cd:bc:2b:8e:e7:f6:6f:9e:96:50:c4:e8:3a:
ae:fe:38:8a:a3:3e:9b:ba:d4:b0:0c:ce:be:8c:90:
bc:22:90:7b:78:de:2a:2d:fd:08:bf:65:7e:fc:59:
c9:35:1b:20:b7:ae:5d:76:1a:76:df:48:f9:0a:9a:
7a:1f:7d:58:fc:e0:ca:00:a3:92:75:fe:76:de:24:
dc:20:37:59:c5:7c:f8:53:56:bf:db:8f:31:cc:5e:
f5:b4:e4:a7:ee:bb:84:66:09:cd:36:b2:89:df:13:
0c:81:8c:c4:13:ed:e4:4e:74:a0:95:28:79:4f:4e:
17:67:1e:6f:f2:9b:f1:e1:99:9c:f2:cc:98:98:2c:
13:d6:e9:49:ff:4c:55:d5:54:33:5e:f9:06:7e:12:
b4:b4:3d:af:01:cb:bf:52:a3:8e:af:2a:c2:70:e4:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:18:79:F9:97:0E:62:BA:94:68:75:00:F4:3C:C6:20:78:5C:82
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ai8YefmXDmK6lGh1APQ8xiB4XII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
193.142.4.0/24
193.164.1.0/24
194.5.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:4d:80:48:22:7a:cc:eb:e2:8c:0d:b7:88:41:c3:85:6a:70:
e9:a0:7e:66:2c:4c:01:17:43:58:4a:14:e6:db:a1:c8:8a:f3:
51:7a:88:3e:d6:77:d2:d4:f3:ac:b6:c7:a0:b6:09:49:2b:ae:
58:45:d0:43:db:2e:48:36:0b:94:2b:bc:bc:b9:cc:42:7b:d3:
2e:aa:a0:50:e6:c1:0f:2a:31:84:18:7f:2c:14:c8:24:c1:62:
6b:3e:7f:29:90:b1:cf:15:f1:4c:60:0b:44:d5:02:09:86:c6:
29:ea:3b:67:8c:ed:a4:ed:80:2e:cb:5f:2e:ca:21:9f:3a:86:
16:d7:70:24:33:78:99:47:c4:ea:d7:8e:b0:e7:a0:df:a0:67:
43:b6:6d:f5:41:c8:79:57:b0:ea:c2:de:a7:c6:3b:5a:a6:c2:
a7:44:40:42:4b:25:15:c2:ce:e7:ee:d9:06:bc:0a:4b:71:52:
7a:f3:d6:16:76:66:70:48:20:57:f7:1c:99:a1:7e:70:42:00:
5b:e6:bd:c8:37:b1:1d:d5:b7:6d:55:82:29:aa:2c:89:cf:00:
2f:95:a6:bc:c7:ce:bc:81:18:4b:15:41:ec:dd:47:40:4e:9f:
06:9b:4b:9a:a5:88:84:67:90:46:4f:be:14:4d:a7:77:bf:e3:
78:02:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:47:26 2025 by rpki-client