Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/RzxgmWg9WBzbryFpOTTeiMf6GfI.roa
File: RzxgmWg9WBzbryFpOTTeiMf6GfI.roa (raw, json)
Hash identifier: /uTnYlzXW18lXNsRNucnsRVnuFf5Prqaq/L6fR9SkEE=
Subject key identifier: 47:3C:60:99:68:3D:58:1C:DB:AF:21:69:39:34:DE:88:C7:FA:19:F2
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F022513593848C45873AFAF6846B5C3
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/RzxgmWg9WBzbryFpOTTeiMf6GfI.roa
Signing time: Sun 01 Jan 2023 20:24:49 +0000
ROA not before: Sun 01 Jan 2023 20:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40934
IP address blocks: 83.231.212.0/24 maxlen: 24
83.231.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:25:13:59:38:48:c4:58:73:af:af:68:46:b5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=473c6099683d581cdbaf21693934de88c7fa19f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:ab:39:c7:33:93:96:37:f3:23:bc:6a:53:
f0:86:da:14:cc:c5:7e:46:6a:69:72:5e:aa:09:70:
46:78:b2:91:3e:63:3b:cd:1a:7b:8c:e1:42:9c:51:
9b:2b:c5:31:55:ad:30:36:7a:be:4e:78:0c:f4:65:
4c:25:7c:8b:ed:5f:08:54:13:fc:13:66:c6:26:a2:
77:cc:9f:ec:89:96:f6:9a:96:6f:93:75:23:cc:a0:
2f:54:0f:b6:36:19:c1:f6:9f:4a:bc:1e:bd:48:83:
f4:43:4c:4f:fd:54:b2:97:83:46:88:91:f7:a4:fe:
47:bd:b5:e8:be:97:c2:e7:6e:91:77:96:d5:b7:ac:
3e:24:87:7d:9d:91:52:1b:42:ea:f3:8b:14:46:36:
2f:57:2e:a0:09:c5:f7:c4:3c:ae:0e:b2:50:f2:71:
80:54:92:2c:42:bd:fb:f2:06:3d:e7:06:0b:e2:ca:
84:8a:9f:b1:d5:46:75:25:59:00:13:1d:9d:01:3e:
ca:a4:16:a7:fb:53:14:ba:96:dd:9a:b3:d5:1c:7f:
29:3e:82:11:a6:d0:a7:33:e6:7e:38:12:cc:2b:78:
c4:f7:17:e9:14:7d:6d:58:b0:da:73:b2:25:0c:f2:
46:fd:56:4b:9d:a1:de:b2:09:28:ed:2a:0a:61:c5:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:60:99:68:3D:58:1C:DB:AF:21:69:39:34:DE:88:C7:FA:19:F2
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/RzxgmWg9WBzbryFpOTTeiMf6GfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.169.0/24
83.231.212.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f5:86:4c:b3:34:99:f5:76:95:e1:04:bf:0f:65:d8:9a:55:
f2:2b:fc:84:53:c4:88:79:85:19:fa:bc:cd:ee:55:79:03:4e:
22:b6:ab:96:17:dd:a5:31:10:7f:d4:a1:a6:c2:1d:4a:36:66:
2c:5a:96:7e:b3:50:4a:fd:c4:6a:c0:67:4e:97:ff:4d:14:43:
03:bf:2d:86:2e:e2:b6:f0:23:f8:a8:0d:3d:6d:46:e6:04:e2:
6e:ce:f6:67:de:cc:ca:d5:a4:73:d6:02:0a:f7:82:0e:b2:b7:
1b:57:2b:43:2d:ee:e6:ec:26:e0:4f:61:d9:f1:4e:0a:4c:3d:
08:df:e8:89:4d:b1:51:3e:ed:eb:db:ad:dc:d2:40:62:a8:c0:
a9:96:06:89:86:9d:ba:ca:ff:40:64:67:50:99:71:df:ea:0e:
7a:06:26:9f:42:91:27:d9:7c:16:53:83:23:8b:be:80:15:f6:
5c:7e:1c:b7:cd:29:75:94:b4:81:95:95:fe:5a:c8:95:a7:95:
9e:18:73:64:44:36:3e:20:4b:31:6f:8b:98:b5:72:92:49:57:
2b:a0:56:51:26:00:9f:95:bd:7d:ff:4f:29:9b:09:dd:20:dd:
5c:20:07:44:f3:fe:46:94:3b:99:4a:bf:8d:a0:9e:97:c8:50:
36:ad:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:04:01 2025 by rpki-client