Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa
File: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (raw, json)
Hash identifier: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=
Subject key identifier: 2B:F0:13:E1:B4:AE:35:55:51:1D:8D:7F:51:07:FD:A7:7A:14:99:A5
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019426D99F3D3856499875BE02A1F221FE27
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212748
IP address blocks: 83.242.104.0/23 maxlen: 23
83.242.104.0/24 maxlen: 24
83.242.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9f:3d:38:56:49:98:75:be:02:a1:f2:21:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bf013e1b4ae3555511d8d7f5107fda77a1499a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:d3:93:58:9f:a6:d1:35:df:b0:01:01:77:
ca:10:e2:5f:33:40:12:5b:55:8a:cc:fb:c2:69:ae:
ef:07:17:61:f7:86:24:b9:0b:74:62:f2:5e:84:8a:
28:4d:db:a8:6b:0e:cb:99:d5:35:e0:ef:81:36:39:
b1:d2:4b:04:1f:d4:1e:3b:ce:24:d0:06:e4:5a:37:
66:1f:96:66:f6:fa:bc:a8:cf:33:4e:41:a6:f5:5f:
c7:69:b4:89:d3:ac:f9:01:df:55:37:e0:85:3d:ee:
dd:25:ab:12:85:76:ea:6f:0d:a4:92:b2:1c:3d:95:
99:b5:a6:de:4e:9f:3e:11:2b:fb:d4:05:3a:f4:d7:
27:90:07:d9:d5:a8:ee:b0:d5:da:32:eb:0a:28:9e:
45:ca:ca:54:c8:fc:3f:3d:6b:d8:2a:3e:8b:b0:23:
14:6e:3e:d2:14:20:60:16:c6:8d:09:4d:70:a6:86:
26:03:e6:4f:73:45:55:a0:38:fc:2f:cc:ef:37:11:
39:4f:75:55:a4:14:2a:7d:12:09:24:b7:8e:37:93:
d7:67:61:02:9c:e2:fc:55:75:b3:59:98:a1:b6:69:
ce:65:75:10:87:98:23:2f:0b:42:a6:90:91:c5:c1:
f4:02:5e:50:8b:f7:a9:92:e4:8d:a1:8e:7f:bd:06:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:13:E1:B4:AE:35:55:51:1D:8D:7F:51:07:FD:A7:7A:14:99:A5
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:90:1a:5f:b8:42:37:34:ff:56:13:1c:f7:64:8f:15:0a:a5:
b1:37:c6:d9:5f:5a:a6:ee:e5:84:e4:48:fe:42:64:77:5b:5f:
47:db:9b:56:b3:26:7f:3b:78:91:cd:f8:e9:26:00:90:ba:4b:
16:9d:56:36:6e:81:a5:32:de:3f:90:50:9b:96:08:8e:5a:6e:
4f:af:24:29:4e:a1:9e:37:05:b9:dc:fa:89:09:1c:17:a1:11:
1d:d4:4b:e1:81:fc:44:06:d1:a7:2c:ae:c7:ea:bd:58:44:e4:
35:2c:16:43:03:30:f4:01:cb:8b:4b:65:cb:39:0f:9e:57:01:
4b:bd:dd:55:d5:dc:9f:cb:58:67:34:0c:00:50:71:31:20:7b:
68:10:83:e3:20:f0:08:e5:17:c2:ca:67:62:8f:fa:7d:47:49:
b9:06:7d:0b:b8:bc:92:e9:66:f1:5f:d8:bf:93:82:02:38:a1:
bf:e5:a0:cc:6e:92:62:bf:26:a1:41:2a:f1:49:e2:6e:05:b8:
ef:4f:57:ce:bd:b3:a2:2d:ef:34:fe:65:50:0c:50:ea:55:ad:
1f:64:c3:17:9c:5b:f0:e0:77:b1:5a:17:4a:0d:3e:8a:47:50:
4e:dc:81:41:49:30:14:0c:26:5c:76:11:e2:87:97:dd:25:58:
e2:e8:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net