Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/w_3OHe3oBHAstdFpj23_j9IY5z0.roa
File: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (raw, json)
Hash identifier: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=
Subject key identifier: C3:FD:CE:1D:ED:E8:04:70:2C:B5:D1:69:8F:6D:FF:8F:D2:18:E7:3D
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 01943FA0EEAC27BC7BD4E1D435CE85E5B40F
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/w_3OHe3oBHAstdFpj23_j9IY5z0.roa
Signing time: Tue 07 Jan 2025 07:18:19 +0000
ROA not before: Tue 07 Jan 2025 07:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.19.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:a0:ee:ac:27:bc:7b:d4:e1:d4:35:ce:85:e5:b4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 7 07:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3fdce1dede804702cb5d1698f6dff8fd218e73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:55:f4:a9:5b:14:35:e6:54:fb:b0:fa:ad:
80:ad:f2:10:23:f7:f7:2b:02:3a:2e:da:ff:cf:da:
2b:d0:e2:f3:6c:08:8b:f5:41:c3:98:fe:59:3b:3e:
d5:bc:11:e4:9c:40:92:2b:fb:3c:35:5a:e7:85:88:
34:9f:02:a7:2f:b3:b8:23:85:54:fc:b5:d3:b9:da:
90:2f:16:49:0a:6a:b6:89:c4:d4:48:6e:42:57:32:
9d:aa:dc:8a:ae:60:f7:7e:39:91:9a:01:62:40:58:
ca:b2:92:84:3a:40:58:e5:80:2a:2e:7c:cd:e3:18:
dd:51:fa:f1:ad:e3:c6:45:a2:11:56:0d:7b:a3:b1:
68:2b:50:5f:a2:95:93:ab:47:88:5c:25:cc:3b:9c:
5c:54:5f:e9:0b:3c:39:6b:13:a6:b3:4b:6a:67:11:
6f:be:c6:31:c4:7b:37:d3:d9:56:b8:b4:84:cb:2f:
e4:95:4c:6d:37:4b:c8:ba:60:2d:85:2c:59:9f:b6:
18:60:63:4f:45:e3:61:61:0b:52:83:ec:9a:9e:c6:
5e:5e:30:4f:09:15:30:09:6f:09:15:23:37:68:15:
3e:ee:a2:6d:f7:29:70:d2:7c:d2:7d:01:ec:a8:97:
a1:4e:8c:d7:0f:41:f7:7d:42:e2:bc:89:02:1b:7c:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:CE:1D:ED:E8:04:70:2C:B5:D1:69:8F:6D:FF:8F:D2:18:E7:3D
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/w_3OHe3oBHAstdFpj23_j9IY5z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.8.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3b:9f:97:69:f6:99:0c:34:96:c4:fb:06:81:01:50:75:fa:
46:ef:03:9f:03:58:e0:32:85:ae:10:c0:4a:40:73:0d:d6:3b:
a6:c2:38:d8:e2:f9:81:0f:81:1c:61:dc:5d:58:f2:9d:25:2c:
d1:bc:d4:a4:c6:86:8b:80:2e:f2:a4:46:94:5e:02:37:8e:bd:
69:19:93:9f:4f:2e:75:00:0e:30:a4:f3:41:10:c5:77:ae:97:
f4:66:ea:db:2b:66:90:b6:46:07:31:5e:06:0a:44:ca:fd:b9:
4b:91:b2:ce:e0:27:a6:61:0b:d3:ce:34:8e:9e:92:32:98:57:
5d:9c:86:6a:ff:9f:7b:39:54:16:43:8c:25:a1:09:14:10:95:
31:7e:24:b6:66:9a:ac:f6:dd:5c:0c:29:c4:b0:b8:a3:a0:14:
04:ee:a9:07:1f:26:ed:6a:f7:87:07:1b:26:fe:19:4e:9c:be:
69:20:ca:b9:69:28:e6:c9:76:b6:88:dc:c9:8e:ad:4b:88:9c:
70:b5:c6:b7:3c:fe:6d:f5:31:f2:b9:84:7a:2f:dd:f0:9c:74:
4a:58:df:ed:f7:c6:e7:2c:5d:e6:24:db:a4:2a:5e:73:97:49:
4b:f4:9c:ff:89:ed:ec:02:9b:c3:2c:a7:4a:f5:d6:2f:0d:a7:
55:73:11:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:21 2025 by rpki-client