Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/B1-ap9TWx59mMkWCIDDAsnSFmG8.roa
File: B1-ap9TWx59mMkWCIDDAsnSFmG8.roa (raw, json)
Hash identifier: jMf6++AREHdVwUbhjrGsyyLiqyMR2Wy5La8OLxA/Pe8=
Subject key identifier: 07:5F:9A:A7:D4:D6:C7:9F:66:32:45:82:20:30:C0:B2:74:85:98:6F
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194073CE66F4C2CA40E17DE02F3EAA47FC8
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/B1-ap9TWx59mMkWCIDDAsnSFmG8.roa
Signing time: Fri 27 Dec 2024 08:30:19 +0000
ROA not before: Fri 27 Dec 2024 08:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211541
IP address blocks: 84.19.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:3c:e6:6f:4c:2c:a4:0e:17:de:02:f3:ea:a4:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 27 08:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=075f9aa7d4d6c79f663245822030c0b27485986f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:c3:fe:27:3a:40:c3:49:67:a8:0b:34:bb:
6c:d7:5f:74:40:09:41:d5:57:18:26:99:76:4c:1d:
f7:1e:2b:6e:71:13:57:79:4b:37:35:4c:c8:34:9a:
a5:d0:17:d7:4b:ab:ea:00:24:1a:41:e1:26:96:ba:
d1:7d:a8:bf:ac:a1:f3:62:99:24:24:81:60:5e:8e:
33:5f:aa:80:02:a0:0c:cc:c6:33:4d:4a:2b:da:23:
f2:77:51:5f:a5:c3:f0:4e:6a:54:21:42:50:e0:df:
06:b5:70:98:f0:12:4f:82:a0:48:0f:02:aa:fd:10:
14:cc:44:cc:a0:a4:ea:82:8e:8f:a3:55:83:4c:02:
7e:bd:34:9b:15:b5:e3:2e:0e:ff:e4:f4:f0:96:b3:
70:ea:9d:60:5f:36:f7:d6:31:55:ca:43:7f:7e:64:
3a:12:05:2a:34:6e:50:f0:ef:e1:25:15:56:db:c0:
9d:b0:75:f1:93:f7:70:24:a8:d0:ee:dc:21:c3:db:
1b:c3:d9:ea:80:b1:92:50:3c:6f:cb:29:5e:f9:d4:
ee:3a:fe:0e:71:c6:ef:7b:86:9f:29:02:5f:e1:76:
d3:76:5a:bc:c7:b5:ce:a7:e5:52:0a:25:72:7a:84:
4e:9b:6a:8d:b5:5f:e7:45:0c:4c:a9:1e:05:df:97:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5F:9A:A7:D4:D6:C7:9F:66:32:45:82:20:30:C0:B2:74:85:98:6F
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/B1-ap9TWx59mMkWCIDDAsnSFmG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:23:5b:1d:95:e0:37:6e:e3:fe:9a:12:5e:8c:f5:ba:4b:85:
9b:a9:5b:1a:a9:75:68:af:bb:50:94:84:72:4c:f5:0a:8a:ee:
bf:7a:2c:52:0c:e6:dc:87:c9:4b:70:0d:7e:ef:bd:95:c2:39:
34:0b:83:41:cc:3a:2b:47:5d:22:9e:6f:c2:67:6e:6f:75:1b:
32:c2:0e:b6:ce:cd:d0:80:d2:1d:ae:78:34:1a:08:80:7e:c7:
96:2b:7f:f8:dc:fa:cc:7e:bb:ac:57:55:a8:d2:04:a8:4c:11:
b0:c7:5c:a0:5f:46:ce:b3:f7:2e:80:e7:3f:24:11:47:e8:4e:
da:77:1f:42:96:88:9c:3b:da:fc:c7:f9:cb:01:da:c7:49:5e:
e8:12:b0:64:8b:3d:81:66:34:87:70:a4:ef:a1:e8:ec:b6:12:
66:99:0b:33:20:23:ae:4a:26:d0:5f:80:f0:30:79:e9:34:c6:
99:5b:46:ca:e9:e7:18:e2:cd:df:5e:fb:c6:3e:cc:26:40:00:
25:6f:75:c6:ae:56:ae:a2:39:7a:70:b2:5f:b8:7b:3a:b6:97:
d5:7a:ad:30:c6:3f:da:df:0f:b0:38:94:12:18:2d:90:b0:8b:
c9:92:2a:e4:72:3f:b8:09:bd:9a:0b:67:65:fe:0a:e7:f0:c0:
4a:e1:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:17 2025 by rpki-client