Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/u1J2kBRs212JEGMGSHserDahw3s.roa
File: u1J2kBRs212JEGMGSHserDahw3s.roa (raw, json)
Hash identifier: 6BbhyIYRUo9FrZZmqCtRrKTo0+k8eWRUgzKqMee447E=
Subject key identifier: BB:52:76:90:14:6C:DB:5D:89:10:63:06:48:7B:1E:AC:36:A1:C3:7B
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194073CE5F17B30113917F33447782C7B2D
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/u1J2kBRs212JEGMGSHserDahw3s.roa
Signing time: Fri 27 Dec 2024 08:30:19 +0000
ROA not before: Fri 27 Dec 2024 08:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21223
IP address blocks: 84.19.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:3c:e5:f1:7b:30:11:39:17:f3:34:47:78:2c:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 27 08:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb527690146cdb5d89106306487b1eac36a1c37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:b1:7f:a3:e9:33:35:1b:20:82:74:f4:29:
ea:b1:9e:3d:3d:2e:0f:2b:8f:4e:b5:bb:c8:cb:2a:
a6:85:b1:cd:b1:26:01:76:77:3c:38:56:21:b4:41:
f6:59:5d:f2:db:6d:4e:d3:bf:8f:64:5a:d8:a1:c5:
f9:0d:9a:60:c6:03:27:78:5b:8d:af:27:21:b9:20:
c5:7e:c9:32:6f:7c:f3:c1:c9:1b:c4:c3:5f:45:e3:
49:51:5d:fb:30:f2:95:2a:39:6c:c7:b7:89:6d:67:
4b:ec:32:07:a5:fe:5b:c4:8d:ef:67:fd:fd:14:74:
a8:7f:14:7e:fa:a8:24:a5:cf:6c:91:d7:9f:ce:8d:
f9:d5:19:bd:f1:c9:3f:fb:5c:09:ab:1e:35:20:df:
9a:83:92:03:1a:fc:24:50:86:d7:49:b4:04:20:2b:
3b:67:8f:55:90:43:c6:9f:63:11:e3:11:e9:3f:02:
a4:a4:33:ff:0c:12:03:2e:26:f2:49:ce:1f:59:54:
62:77:11:ed:32:16:60:bd:63:22:ed:e6:59:36:a8:
44:74:24:2f:e5:47:9c:95:e4:b2:78:51:7c:fb:dc:
26:fc:02:3e:53:d4:d9:1a:8c:ed:2b:3c:57:bd:87:
1c:1f:36:6e:4d:4d:7b:01:4a:de:35:ba:55:9e:40:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:76:90:14:6C:DB:5D:89:10:63:06:48:7B:1E:AC:36:A1:C3:7B
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/u1J2kBRs212JEGMGSHserDahw3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.8.0/24
Signature Algorithm: sha256WithRSAEncryption
09:25:42:e2:17:55:86:1e:30:40:e9:29:5a:02:1d:80:b1:24:
85:5e:0f:b8:0b:34:b6:9b:a8:cd:7a:9a:32:13:db:44:f6:ef:
bb:5f:15:de:44:44:c5:f5:c5:3f:84:67:a6:03:7d:f2:b9:a1:
39:c3:94:dc:1a:9e:8e:ca:27:1c:d1:cb:5e:0a:44:c4:2b:2c:
19:62:05:ad:cf:31:78:a8:ff:5a:ea:8c:d8:9e:9c:c9:cc:56:
50:b6:40:0e:a5:ef:db:fb:3e:c0:ae:48:ce:72:61:2d:aa:e7:
28:7e:42:29:e4:a5:be:67:a6:2a:85:3c:ff:93:c2:1e:74:c4:
5f:92:5e:52:37:5f:f0:1e:f5:46:c9:1b:89:44:67:c6:2e:03:
d0:12:79:e6:ec:4d:36:96:60:1a:83:e8:d4:97:13:e5:9b:4c:
28:50:42:05:1d:f3:fe:60:11:0e:d6:91:f8:2d:6a:88:78:83:
43:be:a2:fd:de:73:1c:dd:bb:c9:32:4f:7b:d0:63:cc:c1:63:
33:5f:be:be:20:ae:0f:eb:41:de:f2:28:3f:6c:42:d2:10:3b:
b1:84:49:4a:06:69:d3:a7:13:43:19:57:e9:f6:25:73:b4:27:
2f:e0:68:4f:ac:ea:ea:c7:f1:63:59:3f:2a:9e:15:cc:f4:ab:
2a:9d:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:22 2025 by rpki-client