Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/doG5McLIdwL8HhbrM79b4y9iUlQ.roa
File: doG5McLIdwL8HhbrM79b4y9iUlQ.roa (raw, json)
Hash identifier: llnAuT6LT8u6B95xaLXVRBim+V/wxv/wY5bhKo+3UaU=
Subject key identifier: 76:81:B9:31:C2:C8:77:02:FC:1E:16:EB:33:BF:5B:E3:2F:62:52:54
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0193DF75415CC24E4578D0B808066EB9C9FC
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/doG5McLIdwL8HhbrM79b4y9iUlQ.roa
Signing time: Thu 19 Dec 2024 15:07:03 +0000
ROA not before: Thu 19 Dec 2024 15:07:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50053
IP address blocks: 84.19.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:75:41:5c:c2:4e:45:78:d0:b8:08:06:6e:b9:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 19 15:07:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7681b931c2c87702fc1e16eb33bf5be32f625254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:89:21:fb:6e:53:35:62:4e:e7:24:b7:68:
99:10:3e:9e:cb:9c:a8:2a:e6:ba:1d:d7:bd:1f:07:
a4:7a:c4:d5:a6:b0:b9:b9:d3:e8:05:08:eb:55:18:
4a:46:d6:07:0c:89:46:82:c3:28:cc:ad:5d:1a:3c:
3b:9e:99:29:de:04:bf:32:3a:72:5a:5d:0c:8e:0e:
47:06:c5:c6:3d:ec:80:5d:35:27:71:4a:07:76:4b:
70:78:f6:27:4f:73:3b:f6:a0:81:e3:12:99:d6:71:
83:51:b3:08:b9:8e:bf:1d:d5:49:d5:df:6f:0e:ff:
0b:8c:27:ae:13:a4:1c:34:1b:aa:b3:c5:19:ba:98:
41:81:a7:fd:a2:c8:d6:90:77:74:97:ee:ff:fb:22:
f0:c8:cf:f6:f2:03:bf:57:bb:38:51:07:7a:9f:df:
f8:bd:99:05:d7:57:4e:7e:b2:8c:49:11:f8:54:ae:
0f:fe:17:53:0d:74:7e:6a:51:1f:a6:29:84:c0:8b:
54:cf:3a:a2:f9:1e:ff:53:f4:14:dc:5e:a4:c0:9c:
69:66:b6:36:1f:b5:61:07:22:de:b5:08:63:41:30:
9b:d8:a1:ca:46:36:67:0f:69:14:fa:f5:ca:2a:f6:
4b:f2:4f:dc:59:f1:ea:1c:ec:29:e9:be:a8:52:b3:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:B9:31:C2:C8:77:02:FC:1E:16:EB:33:BF:5B:E3:2F:62:52:54
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/doG5McLIdwL8HhbrM79b4y9iUlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:2c:65:a6:23:b9:71:d5:83:83:e8:a9:7e:2c:13:89:36:3d:
fe:5b:1b:ac:34:d0:43:b8:a9:4d:67:a3:fa:48:45:ee:ca:30:
3f:b3:cc:5b:9e:66:a1:e7:ec:79:60:fb:0f:43:e1:cc:55:6c:
19:68:c4:f7:e1:00:38:4a:d3:bf:0e:a5:a1:7c:76:2b:4f:16:
8d:10:02:ba:9c:a6:0f:5f:26:61:8f:8a:0d:e2:f2:2e:ec:2e:
b2:59:4c:64:d3:6e:21:b2:93:ce:f4:ed:f9:f4:61:b0:5b:e0:
7e:97:c5:ee:39:56:de:00:96:4c:38:b7:ef:a5:b8:02:54:a0:
da:cc:51:95:68:1c:fa:b5:a3:d1:58:ad:9a:ea:dd:bd:46:50:
7d:94:49:1c:7f:be:a9:a4:c1:30:d2:4e:07:36:9d:ca:81:3d:
b6:2e:6c:a5:be:6c:f1:00:b7:dd:a8:6b:29:00:9e:af:0a:60:
bd:a4:a5:dc:5f:3e:83:2a:28:0e:e1:c4:af:d8:62:df:40:7a:
a5:39:b4:d6:dc:00:2c:76:22:14:5a:f5:3f:0a:76:4c:07:57:
a1:76:21:5a:42:a3:3d:0b:d7:44:29:28:51:ce:06:d2:09:26:
7f:38:b7:3a:a5:e3:17:66:82:9e:dd:8a:d0:ac:e3:cd:14:e4:
44:be:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:00 2025 by rpki-client