Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/d3N300wdFIRE5s757IPTI0oCXTU.roa
File: d3N300wdFIRE5s757IPTI0oCXTU.roa (raw, json)
Hash identifier: rFb+AAOIeOjxqAHcpKRZsJjHESN9HSb0LpFdtGaNwK8=
Subject key identifier: 77:73:77:D3:4C:1D:14:84:44:E6:CE:F9:EC:83:D3:23:4A:02:5D:35
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019471A0BBBCF1C9434C141B7421A9887A1D
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/d3N300wdFIRE5s757IPTI0oCXTU.roa
Signing time: Fri 17 Jan 2025 00:19:06 +0000
ROA not before: Fri 17 Jan 2025 00:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.247.59.0/24 maxlen: 24
89.42.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:71:a0:bb:bc:f1:c9:43:4c:14:1b:74:21:a9:88:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 17 00:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=777377d34c1d148444e6cef9ec83d3234a025d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:29:a7:65:63:4b:cd:d7:83:a1:65:74:5c:
d0:71:42:8d:0a:74:64:ce:26:6d:d8:f4:1e:af:93:
33:4a:aa:9b:81:1a:a2:09:54:cb:53:d6:35:19:1e:
48:70:64:17:6f:27:7e:e2:d5:27:f4:5b:57:30:ca:
08:ef:b4:bd:58:f6:5b:78:b5:25:0a:79:12:98:44:
69:31:68:bc:41:2f:e1:4f:04:77:d8:a5:b7:7e:ce:
e6:79:ff:b3:db:01:b5:9c:94:c4:67:2d:30:b9:33:
34:ea:8b:d8:bd:16:3a:87:8d:4c:41:be:16:60:57:
ea:e4:c2:ef:44:d4:c7:61:aa:86:89:5d:be:0a:6f:
72:53:cc:6d:19:f6:9f:61:ab:c3:b7:ab:68:48:6e:
46:d1:bb:f4:59:5f:51:b1:8f:07:e5:be:7a:49:06:
1a:32:5f:c5:19:60:13:c0:79:83:5e:9e:5c:53:82:
5c:ef:0a:9e:b7:49:b3:fa:2a:8b:3f:e4:46:54:e3:
ce:63:1f:5a:ba:e8:4b:73:61:c3:0b:0e:00:ee:b3:
ca:7a:6a:70:74:b7:81:ff:a4:33:bf:d3:b6:69:5d:
06:c3:e4:83:be:c8:da:93:1b:98:35:48:76:9b:4b:
15:08:ce:fc:8e:7f:32:89:43:20:68:9c:d8:b5:68:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:73:77:D3:4C:1D:14:84:44:E6:CE:F9:EC:83:D3:23:4A:02:5D:35
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/d3N300wdFIRE5s757IPTI0oCXTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
89.42.213.0/24
Signature Algorithm: sha256WithRSAEncryption
81:af:ec:bd:d5:02:81:22:4b:89:02:67:1e:d7:f4:ff:2a:07:
fa:ac:5c:21:a4:3f:b9:69:0c:20:09:45:4b:ae:f7:4b:22:97:
d5:80:4f:2a:56:40:96:48:e4:b9:f1:ec:f5:da:08:d3:ea:27:
f0:a3:2c:7f:4c:08:da:f0:dd:b8:18:cb:c2:bd:83:fe:9e:05:
f6:68:52:6a:36:dd:a5:cf:0d:f1:bf:09:cf:5e:f4:ed:3c:d2:
85:5d:7e:52:a4:5e:fa:56:33:31:b2:cf:77:4e:81:43:27:5d:
0a:e4:67:0b:d3:26:96:43:b6:13:f3:4f:4a:69:c6:3b:12:26:
0e:6d:dd:39:03:01:6f:7a:a3:98:25:2b:03:75:6f:02:62:4e:
ab:b5:ea:9e:49:08:79:ed:fc:24:14:d0:70:49:d5:7d:87:83:
62:f1:96:14:cf:7d:46:ac:32:6b:bd:12:c5:33:6a:a2:85:2c:
16:c6:43:e5:01:a4:05:71:84:2d:90:85:82:b4:44:ef:26:18:
57:e4:0b:f8:78:fe:84:47:97:5e:48:95:09:e8:75:21:c2:d5:
21:c6:e3:03:c7:59:cf:74:75:84:44:31:bb:31:19:26:cc:ea:
a2:8e:91:e7:c6:7b:71:64:bb:32:4d:36:e6:c3:eb:13:bb:4d:
c5:77:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:11 2025 by rpki-client