Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa
File: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (raw, json)
Hash identifier: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=
Subject key identifier: 45:73:D8:17:0B:DB:C2:0E:B3:A1:5B:59:C5:C4:99:42:B9:58:58:D2
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 019421B22D79C9D194EB3AC065079704F433
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31500
IP address blocks: 83.243.69.0/24 maxlen: 24
83.243.69.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2d:79:c9:d1:94:eb:3a:c0:65:07:97:04:f4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4573d8170bdbc20eb3a15b59c5c49942b95858d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:6f:0d:07:8f:aa:b9:8e:0b:32:d4:3e:e5:
e8:3f:9b:49:5c:9b:2f:73:2d:39:1f:49:a5:d1:46:
b2:50:89:2b:6b:5c:8a:92:68:b4:ae:f0:cc:1b:af:
39:90:f1:f2:7e:b3:28:0e:2f:24:57:8b:b7:f3:dc:
9c:84:c8:d9:47:12:a0:c3:91:cf:e5:2d:3b:43:9b:
e7:2f:8d:31:85:61:d7:89:8e:7b:de:10:0d:54:55:
3c:f0:76:95:e1:f8:09:b6:d6:cd:13:82:01:d5:85:
15:a6:cc:bc:11:fd:0c:e1:3e:2e:fe:5b:97:c5:c6:
4c:11:f2:d5:95:c5:d8:9b:d7:c4:f1:da:d7:11:5d:
c3:4e:ff:cd:72:94:89:5b:ec:c1:81:5a:31:88:9a:
02:3b:54:c5:65:1b:4c:c0:4f:c0:3a:bd:39:c8:62:
a1:e3:ba:2e:50:73:f3:40:92:45:2a:7f:e6:cd:98:
9d:63:d4:78:f2:f3:eb:72:c6:d2:1c:ed:fd:4e:4e:
b4:d8:4b:fb:cb:55:24:a7:3f:ac:d5:15:fa:39:05:
07:0a:e9:95:5c:ba:45:24:45:fd:00:2e:ab:3d:83:
3c:37:08:fb:1e:ea:97:32:5f:28:9f:3b:33:aa:7e:
46:de:08:e4:d5:ea:2f:6a:6e:5d:43:27:16:64:ed:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:D8:17:0B:DB:C2:0E:B3:A1:5B:59:C5:C4:99:42:B9:58:58:D2
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b0:78:bf:a7:65:10:a2:af:cc:d3:7a:64:f4:a3:65:be:17:
ca:3c:04:43:87:59:86:a2:73:cb:c3:1d:29:26:07:74:35:70:
ad:4f:6f:79:e8:42:26:4e:7f:6c:68:16:85:a5:1b:d7:ea:df:
8c:ad:6c:1b:ee:dc:7e:a9:a8:2c:c5:3c:68:13:83:44:24:65:
3d:c7:8d:d8:fb:ff:6c:1d:bf:3b:ba:56:43:6d:9f:91:b6:1f:
87:26:cb:f9:b6:bc:5b:e0:7a:9e:f8:15:6a:2b:f1:a1:4c:63:
97:22:4d:96:a7:d9:e7:0c:fd:e2:12:4f:04:b7:c9:10:95:9d:
9c:03:c7:9c:3e:e5:16:6d:2c:7d:2c:f3:76:9e:87:c8:51:a4:
8c:fd:c5:f8:4f:05:92:4e:75:3b:da:f5:b6:2e:6f:a3:46:86:
3b:10:48:84:a2:ee:f6:bd:0a:f7:ff:c9:52:d8:fa:82:17:79:
07:f0:f3:1e:0a:48:7d:03:20:e6:7b:7b:43:4e:18:63:14:95:
79:ce:a9:52:f0:6e:e6:bb:ed:63:58:40:0a:e6:2f:61:2b:50:
8e:fe:5e:38:55:b5:80:f3:1c:7b:fe:93:c3:7f:bb:cd:97:ed:
39:ac:12:8a:b5:0c:43:fe:6c:c8:8f:57:a5:59:fa:69:75:3c:
8a:11:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net