Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/5V2g6MJj7dsq53aQs_gefLBp5Z4.roa
File: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (raw, json)
Hash identifier: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=
Subject key identifier: E5:5D:A0:E8:C2:63:ED:DB:2A:E7:76:90:B3:F8:1E:7C:B0:69:E5:9E
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F1399F99120FB52F075BC0E261211
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/5V2g6MJj7dsq53aQs_gefLBp5Z4.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211541
IP address blocks: 84.19.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:13:99:f9:91:20:fb:52:f0:75:bc:0e:26:12:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e55da0e8c263eddb2ae77690b3f81e7cb069e59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0d:62:be:c9:80:f6:b4:31:6c:a4:b3:41:39:
59:3b:dd:9b:b8:b1:7d:06:f3:66:0a:dc:d1:df:4c:
83:fd:3b:2e:38:50:5f:8f:91:82:df:fc:51:dd:cc:
c6:19:ab:13:8e:4d:fa:b3:e7:24:a1:09:38:f0:c2:
3e:a5:7f:d9:42:22:2d:1c:0a:cd:5a:98:ff:70:8e:
09:a9:83:a2:72:98:9d:4c:84:0c:aa:fe:08:6b:46:
9d:69:69:35:33:08:70:9c:02:e2:60:1e:d0:18:a3:
a1:cb:33:f7:ad:67:da:af:87:c0:fc:b0:b9:54:a6:
e9:25:af:78:60:3d:2c:fd:b7:32:4e:eb:d1:71:f4:
0e:6c:82:d1:33:9a:de:53:4d:16:0d:12:28:ea:ef:
13:b7:bf:7c:78:59:a6:9c:1c:75:c8:b7:c8:88:bb:
de:a4:8f:39:e4:c8:c5:a1:87:9e:45:e4:d9:26:be:
3e:0c:9e:c3:3f:ed:8f:4f:e5:2c:2a:81:bf:4f:3a:
53:43:64:04:3d:59:77:12:be:45:0a:21:b7:19:2d:
71:f3:c0:24:48:73:90:17:44:64:5a:2c:af:01:e6:
81:27:b4:57:47:a4:fb:0f:48:e4:64:cc:1e:68:fe:
1a:e4:d9:59:ea:7a:fc:3a:cf:1b:74:bd:15:0a:39:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5D:A0:E8:C2:63:ED:DB:2A:E7:76:90:B3:F8:1E:7C:B0:69:E5:9E
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/5V2g6MJj7dsq53aQs_gefLBp5Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ce:88:52:fb:7b:a6:98:2c:e6:a3:17:9a:59:0f:1a:ab:9c:
72:55:1c:99:48:cc:a2:c3:02:87:76:5e:09:75:86:c3:34:6c:
9e:3a:f8:66:84:36:83:71:6a:60:2f:a1:08:54:32:f2:7b:f6:
ca:76:bd:82:61:d1:f2:25:ea:54:00:da:c1:6a:90:6d:31:a9:
c8:0e:69:24:43:e8:aa:24:92:a8:5b:94:52:d5:04:49:ae:f3:
09:f9:f9:9b:1f:40:43:a1:e5:cc:37:de:0e:57:27:ee:55:19:
0c:b7:14:4b:60:49:f0:d6:07:28:82:4c:7a:41:a6:b7:67:b0:
85:eb:2f:44:11:41:3d:e0:be:35:9b:af:f3:26:84:6e:75:34:
2d:85:ef:36:2b:05:06:16:6f:88:69:04:39:85:f5:38:6e:e9:
3d:07:35:c1:40:fe:5a:e4:67:80:92:ed:d6:3a:46:49:cd:02:
55:1d:fb:4e:ca:d2:5e:5e:54:ac:13:d1:56:df:42:cb:49:88:
22:c0:20:f6:26:2d:b2:bd:9b:df:74:dc:6c:15:3f:30:20:b9:
e7:5a:f1:6a:e4:6f:7c:6a:14:be:57:a5:cc:83:94:f2:80:1f:
75:78:78:b7:7b:83:9c:78:40:60:df:2a:7e:88:bd:f4:0f:6e:
1a:b2:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:31:41 2025 by rpki-client