Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/6Sfb_LVGLw3QyHrknj-_ldLbAKI.roa
File: 6Sfb_LVGLw3QyHrknj-_ldLbAKI.roa (raw, json)
Hash identifier: 23NJwVnSvX4Ob0fZGBrfShAcBsfFXV8wPKVbVED9/9s=
Subject key identifier: E9:27:DB:FC:B5:46:2F:0D:D0:C8:7A:E4:9E:3F:BF:95:D2:DB:00:A2
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0191124A01600CD3F6CB801B607BFC7310CB
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/6Sfb_LVGLw3QyHrknj-_ldLbAKI.roa
Signing time: Fri 02 Aug 2024 08:52:05 +0000
ROA not before: Fri 02 Aug 2024 08:52:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 84.247.59.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:4a:01:60:0c:d3:f6:cb:80:1b:60:7b:fc:73:10:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 2 08:52:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e927dbfcb5462f0dd0c87ae49e3fbf95d2db00a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:6e:2a:0c:cf:f4:bc:95:08:23:b3:4f:2c:
2c:e6:73:97:51:77:89:3c:71:99:ae:61:05:3f:18:
72:35:4d:ae:68:8c:6b:c6:92:e4:5a:19:13:39:2b:
ea:69:30:0c:fa:2b:61:89:90:10:cf:be:0e:30:db:
bc:cf:d2:52:7e:cd:8d:7f:f7:6b:23:15:1d:ab:e4:
d9:bd:e5:c9:19:0c:d5:98:79:20:42:c3:9f:a5:28:
a1:2c:ee:82:2e:d6:75:74:5c:a8:59:df:8a:92:89:
86:41:8d:b8:b9:1e:9c:b0:08:8e:62:05:fe:3a:24:
48:0c:85:0f:34:ea:57:82:98:a2:cd:76:bf:f0:43:
2c:34:73:26:fd:a5:75:7f:29:f5:ab:01:1b:19:75:
c9:f3:75:b3:fe:2f:0e:da:99:9d:c7:22:c7:73:2c:
96:65:31:cb:70:7d:7d:d9:58:77:f7:1b:86:40:83:
14:aa:d4:61:53:89:84:07:dc:68:80:de:b0:c2:38:
20:64:d0:80:f5:89:ee:b9:8f:09:a8:7a:6a:50:81:
a6:c5:26:9e:74:2a:99:2b:4f:a6:a9:fb:7e:1c:1e:
91:98:6d:d9:be:31:f3:29:34:59:8a:bc:85:52:c6:
fe:22:ac:b3:18:5b:c5:8a:51:88:b5:22:91:7f:54:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:DB:FC:B5:46:2F:0D:D0:C8:7A:E4:9E:3F:BF:95:D2:DB:00:A2
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/6Sfb_LVGLw3QyHrknj-_ldLbAKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
89.42.40.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9e:50:ea:0f:4e:97:6d:e9:fe:70:a3:f1:a5:72:e6:18:ce:
1e:cb:d0:26:11:a6:f4:b6:92:c9:4a:5c:48:38:b7:c8:f2:51:
5e:74:09:5f:bb:81:b0:8d:f3:e9:c4:4e:f7:23:e0:50:b3:66:
00:63:4f:f1:f8:c2:65:64:ea:9d:97:8d:34:76:79:bf:67:86:
8f:73:eb:b4:a4:72:c6:36:df:35:69:c1:49:8d:07:e5:58:e1:
4d:9c:b7:c2:b8:15:cc:df:ee:54:76:85:ce:c0:ad:a2:4c:b9:
67:c5:49:d5:6c:9d:e9:9a:fb:af:f9:36:41:c1:d7:bc:f3:d3:
96:e3:85:09:2c:ce:08:08:53:bd:79:0b:a7:0c:36:37:d1:7a:
c4:15:12:5f:d5:20:34:10:9c:e7:26:22:c0:21:cb:61:c3:c0:
b3:85:08:22:46:8c:8b:42:e5:8f:3a:cb:39:d6:1d:36:54:5d:
26:8c:87:73:8e:38:c2:34:aa:ae:ff:05:ec:2e:9f:fd:29:72:
ea:ec:6f:fb:b8:dc:e7:91:bc:75:d1:ea:30:c9:6a:25:82:57:
11:36:11:75:03:11:35:83:51:38:09:4f:48:51:c0:81:60:9f:
7c:61:ea:cb:b0:26:aa:ed:ed:39:e8:08:68:77:7f:b0:f2:d8:
e8:55:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:51 2025 by rpki-client