Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rB72jEeBat8GVSM0rZYDjyogr7Y.roa
File: rB72jEeBat8GVSM0rZYDjyogr7Y.roa (raw, json)
Hash identifier: tx6/G9/YLw/pKLFPGN8ClqvnWnFjJaEIIGu8/xS7UKw=
Subject key identifier: AC:1E:F6:8C:47:81:6A:DF:06:55:23:34:AD:96:03:8F:2A:20:AF:B6
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01920AE4A2C45857EBC22644088407B8D960
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rB72jEeBat8GVSM0rZYDjyogr7Y.roa
Signing time: Thu 19 Sep 2024 15:26:48 +0000
ROA not before: Thu 19 Sep 2024 15:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208308
IP address blocks: 84.247.59.0/24 maxlen: 24
192.109.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:e4:a2:c4:58:57:eb:c2:26:44:08:84:07:b8:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 19 15:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac1ef68c47816adf06552334ad96038f2a20afb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:f3:29:82:22:6d:ee:1d:0d:40:c1:17:a6:
32:26:87:5d:b1:e2:dc:d8:ed:65:83:f5:db:0c:11:
a5:56:70:36:30:e2:35:b9:74:aa:e0:0a:cd:84:81:
e6:5f:e2:03:51:17:10:f5:79:44:3f:3f:7c:6e:1b:
b1:f4:81:44:c5:7c:a6:73:a4:44:ce:c8:77:29:c0:
93:66:22:89:47:8c:b0:3e:7b:60:0d:86:af:62:6f:
3b:4d:9a:b1:07:83:08:47:c0:5f:9a:99:57:65:b2:
d6:f8:ef:43:28:88:09:72:f6:0c:9d:4a:b9:3b:64:
24:08:4b:68:56:47:fb:47:3c:22:19:a5:21:35:7c:
04:ec:f5:fb:2b:21:d3:02:47:3e:95:9f:7d:30:27:
81:2f:9d:26:fb:00:83:3f:90:5d:74:3f:32:72:1b:
7f:a2:fc:a4:be:3b:9d:71:62:51:b1:f3:1c:52:e9:
0b:4c:52:7e:22:2b:cc:33:d8:e1:bb:65:fc:b6:24:
3d:e6:e9:21:b7:c4:b3:9a:ad:85:c1:58:cb:48:f9:
58:5f:ab:cc:5d:3a:08:a0:72:42:6a:e4:d1:c9:00:
18:41:10:d6:dc:d5:ae:82:2c:35:6b:ec:2f:24:ee:
86:a1:b1:38:be:d1:4f:27:5f:f4:ab:cd:d0:05:db:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1E:F6:8C:47:81:6A:DF:06:55:23:34:AD:96:03:8F:2A:20:AF:B6
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rB72jEeBat8GVSM0rZYDjyogr7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
192.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f0:6a:2a:20:55:f7:b3:c3:32:d9:d5:8b:20:99:a0:cd:55:
0a:f6:1c:27:81:1a:46:9e:a1:d5:ff:7a:df:dc:b4:5b:4e:05:
b9:a9:8d:db:98:7b:f6:e2:c1:29:27:7f:67:ea:3a:b1:49:51:
6c:8b:4a:58:72:09:89:d7:e9:ae:05:c7:e9:47:14:24:3e:7c:
97:4c:dc:b8:d2:b9:0f:44:a6:ed:d7:a6:60:aa:bb:95:bc:bd:
26:de:2b:47:7c:44:fe:83:b7:e6:36:95:2c:da:d9:32:f7:48:
1d:73:64:ed:a8:6b:14:7b:b2:e8:e2:0e:51:2f:cd:95:65:2d:
5b:66:69:f9:45:3c:b8:a7:de:4f:20:57:87:c4:41:a7:8a:da:
77:3d:85:c5:4a:1a:66:d9:2a:1e:f1:b9:c3:1a:0d:8b:72:1f:
f8:cb:d3:5e:ac:27:6b:b1:36:6b:9f:3a:c9:b0:2e:7a:06:7e:
49:25:04:d4:80:1d:13:73:d8:72:74:28:d0:59:8a:8b:4a:b8:
96:8e:b7:1c:13:8e:d5:0f:e5:98:b6:b7:41:4f:e7:9b:e9:9c:
9e:5a:37:28:77:be:b5:03:74:f1:3a:66:df:a2:e5:00:8f:d1:
3e:01:0f:3a:03:f5:9a:e5:01:62:17:0d:b6:63:5c:52:e6:03:
11:eb:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:06 2025 by rpki-client