Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/AbycbJ8-chIMuhdOSMF0hOhFlzw.roa
File: AbycbJ8-chIMuhdOSMF0hOhFlzw.roa (raw, json)
Hash identifier: 7vNVdDBB5xJL2EspmBAJqjpOHShAAVctUk+cYpjvAZE=
Subject key identifier: 01:BC:9C:6C:9F:3E:72:12:0C:BA:17:4E:48:C1:74:84:E8:45:97:3C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD176A298D04696360BD32EFF41AF0
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/AbycbJ8-chIMuhdOSMF0hOhFlzw.roa
Signing time: Thu 02 Jan 2025 07:48:51 +0000
ROA not before: Thu 02 Jan 2025 07:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 64.137.12.0/23 maxlen: 23
64.137.20.0/23 maxlen: 23
64.137.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:17:6a:29:8d:04:69:63:60:bd:32:ef:f4:1a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01bc9c6c9f3e72120cba174e48c17484e845973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:ee:fb:03:a0:15:8c:8f:3a:df:c1:22:ec:
73:db:8a:94:98:0f:8b:1f:0b:75:89:e6:bc:c0:55:
8b:a8:67:d7:43:e7:2a:08:fa:57:74:c2:e3:16:3a:
7f:25:59:e7:f3:e8:88:a8:22:cd:a0:dc:8d:37:90:
df:06:c9:9d:0f:04:93:3c:57:61:8b:5a:a3:08:7f:
4b:d4:4b:bd:4b:5e:4c:1e:74:2f:6d:9e:bb:c8:3a:
24:97:87:1a:6c:e4:16:fe:23:ee:9f:d0:0e:bb:55:
54:67:83:82:16:aa:c3:57:c2:89:f0:0e:d9:1f:f3:
61:0c:2b:ce:d5:de:50:73:68:d8:e7:a0:97:e4:36:
70:6c:1c:22:f1:8d:55:39:71:ec:87:1a:03:c3:7d:
17:cf:fd:20:0c:0e:b3:2b:5d:31:10:e5:fb:76:9b:
f5:96:06:b3:a9:14:0d:9e:64:3d:2d:4b:fe:49:93:
72:0f:16:53:28:37:96:cb:f1:2d:5c:24:18:61:f8:
0b:89:bf:c0:dd:75:96:3f:a0:96:1a:8a:37:b5:74:
17:81:c8:e5:e2:dc:7b:5b:05:90:18:5a:e9:7e:5a:
78:ae:ff:03:dc:47:ae:f6:80:5c:e7:5b:c3:d3:d7:
f8:ed:cf:a9:6d:3d:c1:dd:7a:28:24:62:70:f4:eb:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:9C:6C:9F:3E:72:12:0C:BA:17:4E:48:C1:74:84:E8:45:97:3C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/AbycbJ8-chIMuhdOSMF0hOhFlzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.12.0/23
64.137.20.0/23
64.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:ad:e3:fd:b6:c8:e7:83:b9:41:85:95:1c:ad:d4:bc:9e:6f:
3c:2f:a5:8e:c7:6a:17:fa:08:fd:06:0e:61:1f:15:1f:f7:13:
1a:f3:f2:d2:06:31:2c:fb:a6:f3:e6:bf:2c:e5:8c:7a:ab:b4:
66:8d:a1:a9:89:08:24:f0:33:52:00:55:61:96:87:33:db:ed:
4c:c8:82:9f:05:32:f3:19:6c:03:5d:10:e0:ae:76:46:af:bb:
d2:a2:b1:bb:68:91:a2:b3:dd:63:e0:52:fc:79:dc:c8:e4:62:
cc:13:e3:4e:58:be:05:43:5c:87:9d:a6:e8:86:26:f4:08:8d:
ce:b2:05:ee:78:34:66:35:b6:9d:62:e6:b1:3f:e7:52:8a:d2:
5e:0f:0e:3d:e8:5f:b6:d4:e8:f4:5a:d5:08:66:29:d6:9e:66:
3c:f2:92:3a:8d:73:49:cb:53:c8:bf:48:1b:e5:36:23:cb:7c:
02:87:ba:3b:4a:a5:5c:41:06:8f:2f:43:c0:95:3e:b1:db:da:
72:b6:6e:e3:b4:9f:6c:48:4d:d2:06:27:27:c3:66:5b:63:6c:
12:d1:a2:66:23:7c:eb:17:cc:6e:c5:56:fa:e2:e9:d1:d7:28:
c5:50:81:72:2d:69:27:3b:82:3d:c1:dd:60:3b:8d:cb:7f:19:
15:af:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:42 2025 by rpki-client