Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/iyWADMcnmUX-0b3WwxYKzq-CLVU.roa
File: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (raw, json)
Hash identifier: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=
Subject key identifier: 8B:25:80:0C:C7:27:99:45:FE:D1:BD:D6:C3:16:0A:CE:AF:82:2D:55
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61E596E784A6CD842042C62E70394
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/iyWADMcnmUX-0b3WwxYKzq-CLVU.roa
Signing time: Thu 02 Jan 2025 15:50:34 +0000
ROA not before: Thu 02 Jan 2025 15:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207591
IP address blocks: 147.234.78.0/24 maxlen: 24
147.234.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1e:59:6e:78:4a:6c:d8:42:04:2c:62:e7:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b25800cc7279945fed1bdd6c3160aceaf822d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:53:68:f5:f7:77:ff:8b:dc:92:43:e2:c7:
eb:3a:9f:28:a0:2a:77:34:b0:02:8c:8f:27:48:3f:
d0:b7:fb:3e:e5:f5:97:97:3f:fe:72:a5:21:38:56:
53:da:bd:e4:8b:41:34:f4:52:ff:21:ae:6c:b1:90:
97:fc:1a:36:ba:aa:e3:d3:94:b6:be:3f:e7:ce:40:
c4:e3:ab:9c:5a:4a:26:44:d1:23:27:8e:c0:ef:e2:
85:ba:b9:50:12:fc:d6:3c:1d:c2:c5:0c:82:de:be:
eb:55:36:d5:d5:01:b6:46:3e:13:d8:35:6b:7f:72:
a0:96:d8:74:d7:11:4c:9e:41:2b:d7:70:ee:3d:42:
fb:af:50:62:de:68:b3:4b:27:bb:ad:4a:49:a4:a7:
5b:59:75:11:86:a4:7f:a1:a1:41:c3:ac:d0:ff:6c:
70:df:2e:49:65:1e:a7:64:46:b9:11:b3:f9:53:e9:
aa:a8:0f:98:18:53:3c:79:a3:93:a4:f5:b0:d0:f7:
a8:9f:61:81:2d:c2:95:74:89:d3:bf:5c:33:f4:18:
b1:26:a6:ae:af:1b:fd:aa:78:6c:9e:47:4b:70:04:
bb:2c:91:52:e0:a8:d9:a1:60:45:69:c6:94:45:bb:
d7:33:bd:ed:5e:9d:ed:75:6f:f4:a0:00:fa:cb:c3:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:25:80:0C:C7:27:99:45:FE:D1:BD:D6:C3:16:0A:CE:AF:82:2D:55
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/iyWADMcnmUX-0b3WwxYKzq-CLVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.78.0/23
Signature Algorithm: sha256WithRSAEncryption
91:46:f3:6e:f0:a0:d3:f3:43:ec:68:bf:0a:1a:90:09:e8:4c:
8c:d0:fd:a5:b2:e7:9e:38:58:03:88:09:6a:39:db:1c:9d:02:
d0:bd:99:c6:84:47:b3:84:74:8c:26:3b:e5:43:db:fc:b8:0f:
f0:1e:01:af:2b:ca:7a:50:95:43:26:a0:77:c6:1b:5c:21:95:
fe:99:5d:8a:60:18:8e:c3:93:31:83:63:1e:5c:94:fd:03:76:
7a:33:f8:58:00:2b:91:08:c0:c6:be:29:e9:5e:28:d1:cf:50:
28:14:75:0c:fa:6a:68:3c:13:10:52:dc:ab:76:6c:d1:7f:bd:
b3:9f:a6:a4:e8:da:60:8d:b1:40:42:9f:1e:9d:fb:2f:2f:c8:
98:4a:3a:90:3f:9e:6f:1a:99:7b:0c:d1:a4:d4:92:3e:0c:2d:
01:4e:f2:1b:d5:0c:e9:e6:8d:56:a4:e9:b5:5b:4b:0f:40:30:
62:b0:d7:3f:df:bc:49:c1:e3:f0:3a:4f:df:75:af:64:ef:4a:
97:09:39:4f:d6:63:f0:43:09:6d:42:27:33:cc:02:c1:9f:93:
fa:7c:5c:1a:36:fc:40:7a:0c:3b:41:d5:94:8c:ef:ed:0e:5b:
11:e2:08:56:87:4a:03:a7:65:2a:6d:aa:d5:ae:7e:ad:c3:d0:
91:dc:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:48:47 2025 by rpki-client