Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa
File: 0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa (raw, json)
Hash identifier: 4I6jD4OL89hrVHmrCQFbzYD7IPae2EdBGBhAfTKl1h4=
Subject key identifier: D0:B7:B5:AD:78:3B:A0:97:BC:2B:A3:0F:6A:9D:C8:D9:97:62:57:89
Certificate issuer: /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial: 0195FA9D06A3E4A05FF4B39A48CC90ABDAA3
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa
Signing time: Thu 03 Apr 2025 07:45:49 +0000
ROA not before: Thu 03 Apr 2025 07:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216315
IP address blocks: 83.220.30.0/23 maxlen: 23
83.220.30.0/24 maxlen: 24
83.220.31.0/24 maxlen: 24
2a13:abc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:9d:06:a3:e4:a0:5f:f4:b3:9a:48:cc:90:ab:da:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Validity
Not Before: Apr 3 07:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0b7b5ad783ba097bc2ba30f6a9dc8d997625789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:d9:37:d3:9b:b7:0b:d6:3c:3b:18:84:b7:
28:72:6c:b6:0b:5a:94:b3:81:73:50:bf:7e:cf:2e:
6c:d3:5e:51:eb:ec:1f:be:70:d7:de:e9:87:1d:15:
e8:89:09:a7:26:98:0e:c0:b1:4a:0a:d6:21:1d:7d:
05:61:2b:47:c3:4f:a4:11:8f:5a:04:48:66:f4:65:
7c:35:76:d0:d9:f2:11:ba:7a:ed:df:58:10:5b:30:
ab:3a:89:98:00:df:54:ff:00:22:d9:77:2a:84:c2:
a9:02:fb:b2:88:4f:2a:20:e6:ac:42:eb:34:7f:83:
35:1b:05:60:ed:76:c5:ed:51:a8:87:60:72:65:d9:
d9:97:11:08:74:52:9e:f8:b7:6f:89:b1:84:4f:d0:
c7:f4:e0:76:b0:02:6d:7a:3a:13:17:59:61:aa:e8:
d1:c9:9f:02:96:d4:71:bf:c8:98:90:c0:a5:1b:20:
ab:b2:8e:d2:94:ce:73:4c:c8:59:99:52:2c:fd:ea:
5d:eb:d8:dc:3c:66:47:a3:26:3f:37:1b:0a:07:c2:
f3:99:17:9e:f5:cb:b7:ef:ab:74:6e:63:50:a1:fd:
39:42:8e:e2:ac:00:68:bb:08:43:4f:c8:9a:07:d0:
7a:68:46:d6:af:89:82:f2:ed:dd:c2:38:cd:3c:4c:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:B5:AD:78:3B:A0:97:BC:2B:A3:0F:6A:9D:C8:D9:97:62:57:89
X509v3 Authority Key Identifier:
keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/0Le1rXg7oJe8K6MPap3I2ZdiV4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.30.0/23
IPv6:
2a13:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
70:28:9c:80:9d:a8:c7:ec:25:8c:06:bf:27:ed:8a:f4:1e:51:
94:f1:95:ca:27:c2:87:04:da:b3:3f:a5:b4:78:96:f0:00:6d:
42:87:d5:fd:ae:de:1b:f6:f9:fb:9e:23:da:a9:99:da:29:fd:
15:7d:1e:f9:09:aa:1f:c2:d2:2f:fc:4b:15:19:59:6c:59:5e:
32:f7:c1:7e:f6:ef:71:da:db:86:78:70:4e:90:56:28:9e:74:
e7:c4:c9:66:00:51:a9:1d:f9:9f:38:37:12:39:21:7c:f1:79:
1e:eb:65:5e:e4:83:59:65:e0:47:f8:73:33:4f:cd:f8:9c:91:
75:37:f8:52:0f:c2:b0:4c:87:46:54:a3:af:c1:2a:ec:f3:91:
a1:11:9b:a9:bd:d3:84:aa:a0:5e:ff:66:19:56:14:37:a8:30:
6d:78:a3:fc:cc:3b:d9:9e:e9:b6:64:46:8e:6e:0b:3f:c3:f7:
db:78:0c:97:e4:4c:2d:97:20:5a:a5:12:0f:02:3b:2f:39:6d:
40:1a:a8:6a:2d:b2:12:a0:e7:30:fe:af:2e:24:ef:e3:6c:91:
12:bf:2b:f4:b4:9e:1c:ac:f5:14:a5:a2:eb:94:cb:d1:15:3f:
7a:ea:0b:23:a6:4a:9f:de:6f:62:c0:d8:49:6f:5e:ff:0d:d8:
49:5d:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net