Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/j8PaDOqMy9bnUnm61uhmKRQqO40.roa
File: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (raw, json)
Hash identifier: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=
Subject key identifier: 8F:C3:DA:0C:EA:8C:CB:D6:E7:52:79:BA:D6:E8:66:29:14:2A:3B:8D
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 019425FDC52880937E03FBED74C5A46024BD
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/j8PaDOqMy9bnUnm61uhmKRQqO40.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4913
IP address blocks: 84.22.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c5:28:80:93:7e:03:fb:ed:74:c5:a4:60:24:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fc3da0cea8ccbd6e75279bad6e86629142a3b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:1c:9b:8c:f7:70:0e:25:91:09:f5:80:dc:
39:89:6b:0e:ad:44:b4:a6:2e:63:82:6e:16:e2:a9:
83:5c:19:fe:5f:fc:e5:b9:7d:08:d9:54:59:f2:fd:
15:db:12:4e:34:66:e9:72:8c:d9:cc:71:46:81:9d:
8b:f5:f2:69:55:cf:a7:97:ac:3d:d0:87:6e:f3:b2:
2c:e9:d6:bb:66:10:38:f3:04:84:1e:f7:43:25:29:
76:70:d4:64:8f:f1:08:fe:4b:ab:22:26:86:45:fc:
48:fe:67:aa:2b:ce:d7:f0:5c:0f:4d:73:4a:43:5c:
30:e5:e8:5f:1b:1f:61:f7:1a:05:d1:1b:ea:62:e7:
bc:30:e9:3e:17:63:c6:f2:c2:05:bc:c9:c1:c2:eb:
c8:a4:40:76:e6:78:39:c7:f6:dc:28:6a:c4:b5:a4:
d3:1c:3a:0a:35:88:ba:14:98:00:70:6b:d9:c8:6a:
62:1b:fb:4a:04:df:af:68:db:e5:48:c8:05:86:65:
ac:41:0d:d3:16:83:58:04:ea:36:b2:91:8c:aa:b7:
47:01:9b:88:a3:bb:6d:9e:84:4d:16:51:e8:9c:fb:
09:4d:62:5f:27:b4:ca:1a:c2:66:79:29:09:6c:e0:
9a:b3:d9:22:40:95:5f:bb:c9:f4:41:a7:ef:0b:07:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:DA:0C:EA:8C:CB:D6:E7:52:79:BA:D6:E8:66:29:14:2A:3B:8D
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/j8PaDOqMy9bnUnm61uhmKRQqO40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a7:bc:51:b8:07:c9:75:e0:2c:88:30:80:fc:37:75:da:3b:
a8:ab:fa:b9:ec:c0:99:e3:a6:8d:5e:72:66:c0:82:43:9a:72:
68:3a:6f:d0:7d:2f:76:d6:a8:3f:28:ec:03:46:8c:c6:1e:38:
fa:c1:32:da:2c:89:7d:e4:5a:5a:e6:7a:89:c8:c5:82:da:0a:
aa:c6:61:63:6d:43:82:cf:cc:45:33:a7:52:69:e3:f6:be:97:
ad:72:50:0a:93:ae:a0:22:e8:db:4e:b9:ba:3e:84:29:c3:43:
f6:b9:84:14:44:89:e8:c9:79:3a:46:0c:6f:62:2b:69:93:87:
70:91:3e:ec:f6:e7:74:97:52:75:c2:33:e3:d4:11:9b:36:b3:
a0:f6:8d:62:91:ac:e3:23:67:62:3c:5c:2c:e3:9f:3b:d0:91:
de:22:52:9f:6a:e2:35:6e:4d:4b:af:5b:3e:70:1a:ed:9f:41:
d2:dd:48:6f:55:49:0a:26:eb:f1:0c:34:b6:e1:96:32:c7:16:
64:18:94:64:87:84:5e:5e:46:20:1e:c0:32:4e:a7:d5:53:d9:
40:6f:85:0c:e9:90:3c:37:3f:98:f1:7d:c3:6d:c8:62:2a:d6:
6c:cf:8f:84:0a:eb:d6:b8:9b:39:0c:bb:7f:b9:09:a6:81:22:
cb:43:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:02:59 2025 by rpki-client