Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/k2qVus75QweqwVLaTzgWKFt2l2k.roa
File: k2qVus75QweqwVLaTzgWKFt2l2k.roa (raw, json)
Hash identifier: FHRO2hiAAv4cLirtut9emqOb7BfOEUoCLYXrQqlQbt0=
Subject key identifier: 93:6A:95:BA:CE:F9:43:07:AA:C1:52:DA:4F:38:16:28:5B:76:97:69
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 0194221FACCF26EAABC5FD268540E3A76FAD
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/k2qVus75QweqwVLaTzgWKFt2l2k.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29319
IP address blocks: 84.23.32.0/20 maxlen: 32
84.23.46.0/23 maxlen: 32
217.70.16.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ac:cf:26:ea:ab:c5:fd:26:85:40:e3:a7:6f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=936a95bacef94307aac152da4f3816285b769769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:83:24:36:eb:ab:bd:d8:23:40:43:00:84:
17:5d:50:e5:fc:e9:6c:eb:91:a5:9a:c2:57:68:a1:
56:0c:1e:c2:84:79:68:67:11:ed:a0:01:34:e7:d0:
d6:7e:34:89:69:d8:b0:0a:8d:ea:ed:06:69:55:3f:
49:97:5a:0d:06:16:86:2d:0e:55:bf:de:e7:67:a2:
ba:31:72:cc:93:ca:ce:e6:0e:29:70:d5:ef:ba:39:
d8:37:c6:29:3e:e1:a1:94:92:78:3d:d9:63:d7:b9:
d7:35:5c:d7:0c:24:30:96:6d:e8:c9:cb:b4:75:43:
28:1e:86:41:86:bf:d8:bf:a0:2f:63:42:22:a8:42:
35:e3:97:c4:ad:97:a3:20:1d:78:07:70:b9:ff:d1:
17:1c:74:ce:f3:53:c2:44:03:d6:19:8d:8e:af:c0:
de:6f:5d:93:76:9c:68:d8:cf:d6:82:2c:bc:08:ae:
30:a7:56:30:5d:49:39:ef:4e:f1:4f:dc:53:7e:3e:
22:aa:75:43:fa:d0:c5:ee:a7:29:b3:3c:b7:3c:a6:
0d:7b:61:a0:e4:50:aa:b5:50:f1:bf:a8:d5:eb:73:
6d:a0:57:3f:ed:d1:8c:73:ef:7a:9a:48:55:e1:06:
3c:4c:62:52:60:d7:fd:ab:8c:d8:11:b5:ea:90:00:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6A:95:BA:CE:F9:43:07:AA:C1:52:DA:4F:38:16:28:5B:76:97:69
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/k2qVus75QweqwVLaTzgWKFt2l2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.32.0/20
217.70.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:d3:75:06:62:33:4d:1b:04:8a:0f:0b:6c:89:59:a8:d7:99:
3d:10:c1:85:fa:00:9c:08:58:97:cf:63:b2:f8:74:a4:97:20:
f3:51:75:fb:b1:9b:fa:d3:c8:82:7e:46:5a:20:55:2b:f3:23:
5f:fb:bb:ed:14:d7:57:f4:45:6e:75:0f:5b:23:2e:d6:8e:d1:
74:31:f5:9a:87:2a:35:97:43:ed:cb:c6:75:ae:86:9a:b4:14:
7c:47:61:1b:5a:77:fe:08:ae:9c:fa:05:9f:7a:6c:2c:ac:05:
c0:39:86:3c:80:8d:e5:1f:89:4b:55:5d:fa:b4:a2:74:00:b1:
ca:9a:1b:52:31:d4:05:5e:ad:dd:35:84:20:e7:0e:15:18:76:
d2:45:ad:a3:78:2e:34:58:ea:23:f3:6a:21:58:95:94:fa:e5:
1f:86:e3:7b:f4:19:0f:77:9e:bb:20:cf:79:ec:f9:be:59:dd:
9f:28:ec:9e:71:09:65:d3:24:83:58:98:99:8c:bc:ee:3b:49:
46:3b:a9:70:6e:f4:c9:25:af:c6:2b:10:41:1e:88:24:df:12:
97:bb:bb:dc:87:ad:f0:44:57:f6:e0:02:de:5f:1f:3c:eb:4d:
ed:69:14:61:6d:7c:6c:31:a2:66:01:97:2f:07:f2:e3:2f:6a:
30:fa:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:45:25 2025 by rpki-client