Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/ddXv13mIIGsK4ehEaWuHJyThjVQ.roa
File: ddXv13mIIGsK4ehEaWuHJyThjVQ.roa (raw, json)
Hash identifier: WgBhypILxsN792fQ7BuiqCLh1AGAlkVKQ0NkO4KSpd0=
Subject key identifier: 75:D5:EF:D7:79:88:20:6B:0A:E1:E8:44:69:6B:87:27:24:E1:8D:54
Certificate issuer: /CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Certificate serial: 018AD6D76FD22168144A2F95D331FECA6CFA
Authority key identifier: 5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/ddXv13mIIGsK4ehEaWuHJyThjVQ.roa
Signing time: Wed 27 Sep 2023 13:32:37 +0000
ROA not before: Wed 27 Sep 2023 13:32:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25310
IP address blocks: 83.146.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:d7:6f:d2:21:68:14:4a:2f:95:d3:31:fe:ca:6c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Validity
Not Before: Sep 27 13:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75d5efd77988206b0ae1e844696b872724e18d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:18:91:42:8b:82:0d:da:fc:a3:1b:75:82:
1c:18:b0:be:4d:da:51:ee:c5:ed:cd:8a:e2:9d:03:
ba:b3:4d:c3:a5:07:f2:a6:4c:7a:f4:68:31:d6:63:
d8:aa:af:36:f4:98:61:47:0f:bf:0f:b7:e5:b9:96:
dd:dc:68:ef:8d:a9:06:f4:cd:7d:0f:8c:01:73:29:
6b:56:10:ed:78:89:05:22:f5:f4:ab:c5:35:f9:6a:
8f:7a:cd:5e:8b:67:ee:0f:01:27:10:24:ce:3a:5c:
ea:2c:5a:2e:57:4d:fc:a2:fc:5f:fc:ac:fb:a0:16:
45:97:d3:1b:dd:b2:40:fb:64:7d:a2:e9:0b:27:47:
ca:9c:e9:0d:67:c0:cf:dc:2d:76:6a:7f:8d:43:83:
cd:98:32:a1:af:06:8b:6d:6b:28:61:a4:9b:96:ea:
1c:e5:6d:63:45:8c:17:17:5c:97:77:70:e8:59:09:
4b:ba:51:23:35:c1:4f:e3:29:f1:48:93:b7:5c:56:
f0:d2:d5:1f:8e:1f:25:41:7a:cf:4d:67:b1:a0:c6:
bb:d7:03:b0:0f:b1:54:9d:86:ad:bc:fd:c6:a5:04:
0a:b6:22:a8:83:de:c3:3c:81:c7:aa:e2:81:df:19:
e4:d0:b7:cc:92:fd:e7:da:a2:5b:4c:46:5b:ec:f7:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D5:EF:D7:79:88:20:6B:0A:E1:E8:44:69:6B:87:27:24:E1:8D:54
X509v3 Authority Key Identifier:
keyid:5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/ddXv13mIIGsK4ehEaWuHJyThjVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c1:8e:01:6c:c1:9b:f2:18:4f:3d:c0:e0:29:9a:27:29:83:83:
f8:53:6d:04:6a:ac:fe:c4:35:bf:18:ca:d1:a7:bb:db:d1:9b:
d1:d7:e8:58:08:b8:04:5f:bf:4a:c0:86:cb:76:f6:d5:bd:ad:
cd:40:fc:2d:fa:b6:f4:97:36:21:af:42:58:8f:b4:65:26:17:
f2:2e:69:55:4e:ce:dd:c8:9c:98:f7:33:f3:ab:fc:c1:a2:6d:
1e:99:bc:d7:68:55:b7:1e:c2:6c:fc:ea:d5:27:80:e3:8f:c5:
66:6e:34:5a:28:35:bc:07:7a:c7:a0:ed:0a:88:14:02:b3:df:
2d:82:82:f4:91:4c:fb:21:ad:23:a2:e2:94:81:bb:52:fb:4f:
68:67:39:8e:e7:1c:9d:13:4b:d8:6f:d6:eb:e9:83:d6:fd:92:
37:ee:c7:2e:3b:3f:c7:31:1c:73:75:e3:c2:56:cc:09:4d:be:
e7:be:6a:ca:88:e9:7b:2e:4e:5b:48:41:cd:4c:fc:f1:80:37:
1b:ac:e0:3c:15:2b:8b:2d:09:f3:1e:a7:96:9b:6a:fb:3b:8c:
db:fa:8c:19:54:04:8f:7d:69:94:e6:2c:7e:ea:a7:79:ec:d2:
62:a8:19:60:18:90:d7:66:c2:9f:0d:ba:12:28:44:4e:21:28:
5b:f4:32:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrW12/SIWgUSi+V0zH+ymz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzBmNzM2YTRiMDUyNGE0NzZmNmYxYmUyOTY0YWU5OWI2
NDc4OWYwHhcNMjMwOTI3MTMzMjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWQ1ZWZkNzc5ODgyMDZiMGFlMWU4NDQ2OTZiODcyNzI0ZTE4ZDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTYYkUKLgg3a/KMbdYIcGLC+TdpR
7sXtzYrinQO6s03DpQfypkx69Ggx1mPYqq829JhhRw+/D7fluZbd3GjvjakG9M19
D4wBcylrVhDteIkFIvX0q8U1+WqPes1ei2fuDwEnECTOOlzqLFouV038ovxf/Kz7
oBZFl9Mb3bJA+2R9oukLJ0fKnOkNZ8DP3C12an+NQ4PNmDKhrwaLbWsoYaSbluoc
5W1jRYwXF1yXd3DoWQlLulEjNcFP4ynxSJO3XFbw0tUfjh8lQXrPTWexoMa71wOw
D7FUnYatvP3GpQQKtiKog97DPIHHquKB3xnk0LfMkv3n2qJbTEZb7PeVbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHXV79d5iCBrCuHoRGlrhyck4Y1UMB8GA1UdIwQY
MBaAFFtw9zaksFJKR29vG+KWSumbZHifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNEM05xU3dVa3BIYjI4YjRwWks2WnRrZUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YTM4NDYtODVkOS00ZDk0LTllYjAt
Mjk3ODRkN2I2OGEyLzEvZGRYdjEzbUlJR3NLNGVoRWFXdUhKeVRoalZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YTM4NDYtODVkOS00ZDk0LTllYjAtMjk3ODRkN2I2OGEy
LzEvVzNEM05xU3dVa3BIYjI4YjRwWks2WnRrZUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGU5IAMA0G
CSqGSIb3DQEBCwUAA4IBAQDBjgFswZvyGE89wOApmicpg4P4U20Eaqz+xDW/GMrR
p7vb0ZvR1+hYCLgEX79KwIbLdvbVva3NQPwt+rb0lzYhr0JYj7RlJhfyLmlVTs7d
yJyY9zPzq/zBom0embzXaFW3HsJs/OrVJ4Djj8VmbjRaKDW8B3rHoO0KiBQCs98t
goL0kUz7Ia0jouKUgbtS+09oZzmO5xydE0vYb9br6YPW/ZI37scuOz/HMRxzdePC
VswJTb7nvmrKiOl7Lk5bSEHNTPzxgDcbrOA8FSuLLQnzHqeWm2r7O4zb+owZVASP
fWmU5ix+6qd57NJiqBlgGJDXZsKfDboSKEROIShb9DKJ
-----END CERTIFICATE-----
Generated at Sun May 11 06:17:24 2025 by rpki-client