Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/2rizs1lf_Ql01fgdZ8EJvIZcH2Q.roa
File: 2rizs1lf_Ql01fgdZ8EJvIZcH2Q.roa (raw, json)
Hash identifier: +aqi8D/plvu9yut6C/9OQHsj9l2FuRGDrReMoKgdrnQ=
Subject key identifier: DA:B8:B3:B3:59:5F:FD:09:74:D5:F8:1D:67:C1:09:BC:86:5C:1F:64
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F0B2B5B2BF7949ABA8389A43C0E13
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/2rizs1lf_Ql01fgdZ8EJvIZcH2Q.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21223
IP address blocks: 84.19.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0b:2b:5b:2b:f7:94:9a:ba:83:89:a4:3c:0e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dab8b3b3595ffd0974d5f81d67c109bc865c1f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:21:72:99:8d:2f:d9:e1:01:01:f9:9c:80:
41:1b:8d:fa:13:50:ff:f0:f1:de:fa:b9:3f:cc:bf:
62:cd:ce:cc:25:49:5a:a6:a8:7e:27:c7:3d:42:84:
1a:2c:ff:a1:06:74:22:c0:1d:a6:99:7e:10:28:c1:
e7:36:9c:65:a9:9b:9a:73:1f:91:a5:e3:e2:f4:44:
99:70:6e:c1:5a:27:05:5a:ea:0b:b7:2c:27:46:57:
2a:ba:bb:04:04:4a:ca:71:aa:08:6b:8b:fb:ea:18:
ac:dd:b1:6c:af:b1:c8:75:13:eb:b3:de:c8:9e:7b:
ef:76:d3:a9:ed:11:ce:48:1a:17:a6:28:99:7a:23:
b6:39:72:e2:70:b8:5e:ff:ba:f1:04:e0:27:f7:28:
02:76:52:52:54:5b:4f:c2:85:7c:c0:49:45:81:e8:
2f:67:d8:13:87:dd:e6:7c:61:54:fe:67:f1:13:31:
7a:60:85:4b:42:f0:e7:b8:a1:7a:c4:17:ac:3f:10:
c4:43:7f:6a:ce:55:39:8e:76:52:1f:b7:6c:85:52:
09:28:c4:19:cd:d7:6a:2a:9a:eb:2b:d8:16:b6:f0:
2e:a5:73:08:79:5f:01:e2:ca:a4:b3:dc:64:d9:49:
1c:81:19:97:98:20:4f:23:37:df:7b:f5:f1:ca:4c:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B8:B3:B3:59:5F:FD:09:74:D5:F8:1D:67:C1:09:BC:86:5C:1F:64
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/2rizs1lf_Ql01fgdZ8EJvIZcH2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.8.0/24
Signature Algorithm: sha256WithRSAEncryption
55:73:1f:a3:28:25:32:9f:0c:33:72:4e:6c:92:a2:7f:d2:52:
b7:c6:ba:0e:07:09:70:f3:f4:92:f1:27:19:55:76:d3:38:41:
c3:ae:b5:95:09:10:fb:c1:bf:5b:a8:11:ee:3e:ba:54:d3:b8:
75:51:ed:43:a3:25:d1:e0:3c:2a:c0:62:57:af:57:23:69:9e:
97:79:9e:7e:cf:67:99:19:68:b0:e5:ba:7b:79:3b:90:69:72:
47:8f:95:88:99:61:16:44:2a:c2:28:b1:18:65:62:d9:3a:f1:
99:54:02:0d:b5:12:88:4e:e5:10:95:9a:5a:a3:c0:f9:ee:fc:
6a:cd:30:c1:a0:89:95:c9:b3:e9:f4:a1:f5:47:57:e2:11:4b:
09:9e:5f:2b:0f:fd:8e:62:d2:f2:e6:cb:8d:99:97:83:c4:4b:
32:11:80:6a:34:c1:a3:f3:95:5f:1e:f1:ed:c8:85:d4:1a:72:
29:d6:95:58:d3:5d:3d:c0:0c:bc:da:b1:0f:6c:bb:7e:96:8f:
08:f3:31:cb:9d:d0:fe:d0:f3:4c:78:d0:9b:67:f8:9b:80:76:
8c:e2:e7:7d:46:66:b1:5d:77:10:ba:bf:3b:01:5a:a2:1b:f3:
bc:64:69:8b:d1:01:f0:0c:c7:0f:27:23:ce:a8:d5:18:51:55:
ac:38:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:37 2025 by rpki-client