Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_esXnKi8frhyKxTNyBGcORNFzu4.roa
File: _esXnKi8frhyKxTNyBGcORNFzu4.roa (raw, json)
Hash identifier: utERn0OrE5EflH9UCA6W8yG+8D0yfs5f+G9H2wqQcUs=
Subject key identifier: FD:EB:17:9C:A8:BC:7E:B8:72:2B:14:CD:C8:11:9C:39:13:45:CE:EE
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 019425FD04DE2298CB5D9381EFC73829E8B0
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_esXnKi8frhyKxTNyBGcORNFzu4.roa
Signing time: Thu 02 Jan 2025 07:48:46 +0000
ROA not before: Thu 02 Jan 2025 07:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 84.22.148.0/23 maxlen: 23
84.22.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:04:de:22:98:cb:5d:93:81:ef:c7:38:29:e8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 2 07:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdeb179ca8bc7eb8722b14cdc8119c391345ceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:48:6b:42:20:7b:dc:9a:b1:d3:38:a8:f1:
3f:60:63:e7:56:88:cf:07:ed:b5:57:ae:56:3d:66:
90:bb:48:11:97:d8:01:c1:c5:a3:74:66:e3:18:d4:
96:ab:bd:da:92:70:09:e9:b8:e3:00:b7:cf:d6:45:
3c:b4:c0:50:16:0b:dd:e6:95:d1:39:04:cc:32:8e:
6e:dd:ac:3d:ab:10:aa:bd:16:3a:e8:d4:89:01:ca:
aa:25:4c:87:df:88:a8:82:0d:f3:9a:84:c8:ce:28:
23:e2:6b:dc:9e:56:a5:86:8d:e3:27:5b:88:f2:07:
a7:4e:7d:70:54:17:9c:53:49:1d:f0:f0:93:86:7a:
b1:46:cd:66:ac:2a:28:b1:f4:85:af:6b:53:26:9e:
02:65:86:c2:5f:0b:31:25:1e:57:80:5d:16:dc:3d:
47:63:fb:0f:33:8e:30:fd:5c:ed:d2:5d:40:ed:3f:
c5:7c:6f:39:7a:1c:24:b1:d9:d0:d9:fd:db:a8:6b:
6f:9c:2e:26:82:be:67:e3:9e:ec:bc:57:49:07:eb:
94:43:e8:40:10:a5:76:e4:8c:f7:b7:0f:f9:ed:2f:
72:4d:c2:60:56:2a:7b:a1:c3:70:ce:47:cf:b1:cf:
26:95:df:5c:00:eb:49:d9:8a:c3:34:60:a1:62:a8:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EB:17:9C:A8:BC:7E:B8:72:2B:14:CD:C8:11:9C:39:13:45:CE:EE
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/_esXnKi8frhyKxTNyBGcORNFzu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0-84.22.150.255
Signature Algorithm: sha256WithRSAEncryption
74:dd:f9:d7:dc:aa:89:e1:08:4e:a1:77:c2:18:20:bb:00:f3:
69:dd:e9:41:07:f9:70:b3:d2:6e:6e:30:bb:e3:c2:4a:7b:fe:
4b:e1:34:43:dd:11:03:ff:88:53:79:42:7f:cb:d0:1b:07:de:
4d:c1:19:b0:f6:2b:31:d1:9f:70:5d:37:67:d4:3c:ac:f5:8f:
20:e0:44:b9:cb:c4:d8:42:51:1a:07:46:d9:3a:dc:83:1e:3d:
77:93:86:d1:28:5d:23:60:07:ab:b1:d4:df:22:a9:d3:db:81:
98:53:73:74:ed:31:87:9a:0d:aa:4e:f0:47:5a:b0:e0:71:f0:
c6:d8:0f:60:14:10:df:8f:7c:ee:8a:33:03:af:8d:10:19:aa:
e9:f2:65:b2:ce:b7:73:b8:12:03:32:20:ff:91:32:93:f3:32:
fd:bf:01:73:69:6c:d4:4b:68:f5:ba:6d:b6:ae:b6:c8:33:4f:
9d:ae:c5:26:f9:d6:5b:79:08:6f:b3:8c:4e:20:1b:9d:f4:7b:
13:51:e3:34:f7:da:be:eb:24:bd:c8:19:ee:f1:cd:a7:3f:6d:
31:b9:90:9c:d9:6c:08:c0:b8:ea:0d:d7:49:c9:3b:06:bf:5f:
1a:f2:73:ab:ff:f8:14:ff:b2:13:b6:0b:42:fb:d1:55:15:78:
87:15:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:27 2025 by rpki-client