Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa
File: ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa (raw, json)
Hash identifier: IdqA08w4c392oup88bupHi8JbgCB0Dbq9+iQXGt6xQA=
Subject key identifier: 8A:4F:FE:B6:F2:EB:4D:02:4D:FF:C2:FA:D2:C6:DB:90:39:8A:93:14
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 0183CAFC05444D394E30ACB6AC15F1C1B9C8
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa
Signing time: Wed 12 Oct 2022 06:57:37 +0000
ROA not before: Wed 12 Oct 2022 06:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49825
IP address blocks: 84.23.50.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ca:fc:05:44:4d:39:4e:30:ac:b6:ac:15:f1:c1:b9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Oct 12 06:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a4ffeb6f2eb4d024dffc2fad2c6db90398a9314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:cd:25:da:02:f6:01:56:de:02:1d:95:56:
b6:e0:e2:a9:b8:1c:0c:1a:85:0e:e1:6c:72:bb:52:
d8:56:41:9b:7b:e6:53:0d:9c:a8:ba:0c:71:aa:08:
d5:7c:3c:62:44:fc:21:0a:75:c7:4a:4b:a6:3c:3c:
40:f5:29:71:9c:b5:7b:5e:8f:c7:b9:82:13:3e:65:
f3:f3:50:3d:53:47:d0:d0:84:25:c3:10:8f:22:47:
8b:f0:25:2a:ad:48:63:ba:73:ec:a6:4b:a1:38:7e:
f3:93:4c:cc:2f:62:18:d9:bc:9a:bc:9b:c2:62:ac:
90:c2:67:48:c4:b8:21:89:66:6b:91:46:b6:90:9d:
f4:e9:2a:d7:d7:28:69:be:e0:2f:7f:a8:f7:6b:52:
5c:71:ad:5f:35:6b:20:38:ce:87:fc:5b:85:29:eb:
74:94:97:64:2b:98:b9:66:12:22:94:6c:3a:18:2c:
06:d7:7e:38:cb:fc:a9:e6:51:a3:08:6d:34:9e:c5:
d6:d0:63:0c:9a:07:83:56:c5:e1:ae:6d:e6:1e:11:
f4:e4:65:c0:dc:a3:e7:f2:b0:16:58:a7:4d:06:07:
07:61:d3:7d:41:bf:43:37:87:8f:2c:55:20:6b:90:
80:d0:73:2a:0b:1d:b3:47:33:b6:bb:e2:9b:4f:ca:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4F:FE:B6:F2:EB:4D:02:4D:FF:C2:FA:D2:C6:DB:90:39:8A:93:14
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ik_-tvLrTQJN_8L60sbbkDmKkxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.50.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a8:93:ff:b4:3c:53:b1:e7:1a:9b:28:23:00:93:9c:a0:ce:
97:6d:7a:46:10:c8:df:b2:99:a0:df:d6:5b:18:64:d9:41:2c:
14:31:cd:46:10:b2:6f:dd:b6:ca:31:5b:a7:7c:a0:6e:a0:0e:
74:26:20:fb:ec:24:71:08:d6:2a:d3:7e:5f:11:7f:ce:4f:84:
1a:4b:31:98:15:4b:29:88:0a:3c:75:8e:6d:39:3c:03:74:d7:
93:d5:fb:2d:ff:1d:e8:c1:91:01:60:0d:19:3e:07:f2:5a:fb:
06:da:5e:24:fa:81:e9:3a:7e:f0:fd:16:ad:5e:5a:03:a3:1b:
20:bc:dd:07:40:f2:8f:46:b0:ad:f9:47:19:66:fc:5c:2f:42:
42:56:66:c5:ac:e4:15:ee:ac:06:73:74:af:bd:1d:c9:b6:e4:
eb:8f:38:a2:ab:a7:08:9e:9f:67:35:6c:7b:cb:e1:62:a6:cd:
fd:3e:2c:fc:3a:57:f2:6f:01:6e:bd:11:ad:e9:2e:a5:a5:48:
68:fd:6b:09:6b:93:85:da:5a:65:c3:49:16:93:a4:3b:6f:ed:
93:8d:a1:47:2d:6c:26:0d:5c:cb:e6:ff:49:c3:68:e2:71:f3:
93:5e:df:1c:4a:6c:98:ec:0b:1f:61:53:77:b4:ed:d6:bb:f6:
53:57:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:29:34 2025 by rpki-client