Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/iFDfolyIwLhIHIZMVOHdEHaSYjE.roa
File: iFDfolyIwLhIHIZMVOHdEHaSYjE.roa (raw, json)
Hash identifier: mAf23/tsBk4ZNAVT4MnMs7xQrrbG2Oy6tHbhJCMNsOA=
Subject key identifier: 88:50:DF:A2:5C:88:C0:B8:48:1C:86:4C:54:E1:DD:10:76:92:62:31
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0195FC832DBBEDACACD4092DA1CA05710952
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/iFDfolyIwLhIHIZMVOHdEHaSYjE.roa
Signing time: Thu 03 Apr 2025 16:36:50 +0000
ROA not before: Thu 03 Apr 2025 16:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 83.147.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:83:2d:bb:ed:ac:ac:d4:09:2d:a1:ca:05:71:09:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 3 16:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8850dfa25c88c0b8481c864c54e1dd1076926231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:12:f3:0d:bb:00:9b:0d:3d:c7:e7:b2:3b:
9d:7b:05:5c:61:04:b2:9d:0b:bf:06:fb:3f:2b:05:
a9:58:6e:be:91:cf:ca:e1:4f:ab:61:f3:f4:35:f8:
a5:d1:f8:98:76:c3:e6:58:91:0a:98:f3:94:70:21:
e3:48:8b:41:97:f4:82:db:6f:fe:80:60:b8:e3:ce:
6a:4a:ed:25:86:5a:ab:ec:22:e8:82:f4:ac:13:9a:
47:17:53:77:db:06:f1:01:a2:ca:1d:2b:0b:8d:95:
91:63:6d:4c:29:d5:91:5e:a0:2f:d6:d4:a6:07:06:
9d:8f:e2:f6:f5:eb:1f:3c:9b:a1:14:52:66:53:d7:
c2:2a:fc:6f:3e:93:7c:d0:34:3a:00:dc:be:fb:12:
68:bd:52:ea:e1:86:e0:7a:11:38:17:7b:b7:8f:4a:
1d:02:ec:9a:be:a0:48:d8:16:86:fc:65:ff:4c:a2:
fe:dc:4b:83:95:e0:97:ba:d6:be:da:e7:d0:da:37:
05:7b:0e:8f:51:96:7f:e1:25:16:c4:c0:10:4e:ef:
34:f8:59:95:08:f0:d4:b5:02:e2:9b:1c:aa:72:e1:
85:fd:69:32:38:e7:f9:92:88:0c:1e:29:a8:61:c5:
99:0b:97:58:05:ba:9e:82:bf:34:37:72:47:15:92:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:50:DF:A2:5C:88:C0:B8:48:1C:86:4C:54:E1:DD:10:76:92:62:31
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/iFDfolyIwLhIHIZMVOHdEHaSYjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
18:88:a5:37:f0:c8:12:9e:43:a6:74:e9:ff:ae:a5:57:ee:3a:
b5:bf:23:76:4e:5f:af:ff:53:8d:90:7d:2c:cb:c6:cf:2b:c8:
1b:fe:61:36:11:67:e7:7b:12:d1:f4:ec:cd:5f:ed:b7:5e:e7:
0a:77:fa:59:7e:a8:aa:e7:1e:68:df:b4:7b:98:1a:72:f4:5d:
76:ad:ef:a0:28:11:bd:1f:14:a3:52:50:1c:03:50:aa:f7:6b:
ec:82:5f:9b:2c:0c:3b:74:0a:af:fd:5a:a5:59:63:e0:06:a5:
63:a0:b8:00:33:5d:06:e3:e0:fb:67:23:58:7a:2e:17:67:ce:
47:be:82:6d:1e:44:be:cf:8c:cd:35:08:4c:31:f0:61:fa:48:
c0:f3:7b:12:7c:9e:4d:80:ad:c7:23:73:0a:f4:b1:e9:1e:3d:
1b:53:18:14:75:e3:44:19:c1:26:38:0c:5f:01:de:da:c6:97:
8c:66:5f:76:32:3a:62:20:82:9a:69:fe:1f:13:96:7e:8f:1a:
3d:14:5d:91:a3:1f:8e:91:98:6b:09:0b:ec:03:a6:b6:38:c9:
bc:12:13:3d:d6:81:7a:29:78:dc:f2:02:e8:96:4f:e3:50:0b:
07:ea:09:d7:c1:23:b5:6f:58:f2:26:b3:75:30:57:18:8a:b0:
e4:4f:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net