Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa
File: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (raw, json)
Hash identifier: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=
Subject key identifier: F5:FD:43:4B:A0:AC:E6:6C:1B:B1:28:AB:2C:5D:62:32:23:C5:C0:1E
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019425FD7EE29E65DA901FBE06857D557FED
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa
Signing time: Thu 02 Jan 2025 07:49:17 +0000
ROA not before: Thu 02 Jan 2025 07:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49788
IP address blocks: 84.243.128.0/18 maxlen: 24
185.57.252.0/22 maxlen: 22
2a02:6060::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7e:e2:9e:65:da:90:1f:be:06:85:7d:55:7f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Jan 2 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fd434ba0ace66c1bb128ab2c5d623223c5c01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:21:77:f6:3d:8f:32:22:c0:9b:93:a0:06:
f9:70:8c:12:22:35:a3:46:cc:f2:c1:23:e6:c0:52:
66:46:0a:02:95:c6:b1:35:7e:89:e1:06:84:74:6d:
28:8d:88:07:d3:91:79:c6:ee:db:a2:92:0a:2b:c5:
5b:9a:4b:50:3b:f9:50:a8:61:2c:9c:ba:e2:ba:84:
83:55:4d:b7:3c:5f:92:76:c2:c2:4e:e1:d0:75:f0:
c2:ce:11:e6:72:50:16:8e:b6:2a:60:b8:ec:dc:34:
f6:82:02:cc:a9:38:00:c4:ec:8a:c7:46:e0:7c:7b:
f1:c9:d8:c9:33:b9:c5:af:01:8c:67:44:b0:e1:32:
b9:8a:7d:67:4c:4a:dd:9b:69:b8:c6:80:85:4d:95:
46:d9:7e:93:7a:9f:13:3c:3d:37:8a:66:67:68:92:
3d:d6:52:8d:6b:91:43:ce:88:7a:af:7b:55:69:de:
02:5f:37:6e:42:01:81:88:ba:72:7f:c9:66:38:d0:
ff:82:04:12:f7:af:07:12:80:34:d6:9d:c0:aa:1f:
8f:08:18:da:65:21:e7:dc:4a:6d:51:76:58:2a:48:
f6:6c:4b:65:79:46:3d:e3:e4:06:1e:b6:97:fe:a6:
04:9b:67:94:c6:de:0d:85:76:74:d3:ba:c9:ae:2d:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:43:4B:A0:AC:E6:6C:1B:B1:28:AB:2C:5D:62:32:23:C5:C0:1E
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.243.128.0/18
185.57.252.0/22
IPv6:
2a02:6060::/32
Signature Algorithm: sha256WithRSAEncryption
6b:15:1e:ab:2b:05:7c:f5:84:8b:72:87:9e:b6:15:98:95:a9:
c1:85:7d:30:93:cc:77:20:66:bb:ea:fc:d1:e7:28:0e:dd:6a:
f5:95:b1:d7:e2:29:58:9b:65:82:ba:d2:50:fc:f5:68:0a:c9:
1d:38:fc:2e:91:71:77:f4:4d:d9:e6:be:74:b6:cd:f9:1a:63:
7a:21:50:4e:a7:e1:3c:d7:49:eb:22:df:83:16:fd:e1:05:d0:
31:e1:42:ae:00:75:0e:15:3c:fb:de:22:d3:4e:65:d0:cd:ef:
be:83:f6:3e:a0:f2:17:6e:56:40:5a:9f:27:10:7e:9f:7d:8c:
b3:56:d5:69:d7:bc:7d:a3:3b:75:8b:10:d7:2c:99:66:be:c0:
7c:1d:de:6b:80:2e:1e:a0:b1:47:ae:31:d8:91:c0:77:1a:e8:
e8:9d:3d:2f:80:3c:c4:de:6d:3b:78:0d:65:c7:af:0e:03:32:
b9:b0:2a:8f:20:cf:b7:35:86:0d:3e:e4:38:ab:4e:2c:71:41:
52:f3:90:2f:72:ea:68:03:d8:fc:f4:cb:83:bc:8e:9e:0b:5b:
30:9c:26:d8:3e:8b:c9:c9:a4:56:0d:35:b6:1a:13:8a:d3:8a:
a4:f6:9f:b3:41:11:06:0e:44:c0:80:e8:70:c9:21:76:8a:a9:
f5:dd:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:45:30 2025 by rpki-client