Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Zmqv2UJp-lJSJnn4nidupunGeGw.roa
File: Zmqv2UJp-lJSJnn4nidupunGeGw.roa (raw, json)
Hash identifier: 7CaHIycueLSe8PB5DBnnVxBiGO4mKsJVpGh8fqK6Z6U=
Subject key identifier: 66:6A:AF:D9:42:69:FA:52:52:26:79:F8:9E:27:6E:A6:E9:C6:78:6C
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C9D4758ABF9F1DFEFB00C0F3371A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Zmqv2UJp-lJSJnn4nidupunGeGw.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44881
IP address blocks: 84.54.55.0/24 maxlen: 24
178.22.24.0/24 maxlen: 24
213.109.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c9:d4:75:8a:bf:9f:1d:fe:fb:00:c0:f3:37:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=666aafd94269fa52522679f89e276ea6e9c6786c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:84:15:71:58:78:dc:70:6a:de:a7:e2:97:
b8:ab:89:a0:50:27:14:7d:dc:71:c5:b5:4a:ac:2b:
b2:5d:9d:d6:17:78:b6:05:cc:15:7c:62:e9:46:c0:
87:55:c4:13:04:c0:fd:79:7f:31:25:9a:10:ff:24:
21:55:1e:96:be:83:6f:d2:1b:4c:13:ec:33:69:0f:
c7:de:69:b8:8c:33:27:96:b9:9b:67:1c:72:04:3c:
e5:1a:34:50:83:e9:f2:ba:00:a6:74:21:08:29:5b:
d4:0a:58:ca:2d:d2:69:35:6e:40:8d:cb:88:c7:d2:
46:3c:33:e0:02:4a:b6:4d:1f:33:ac:37:36:be:db:
39:77:c9:92:0a:8f:d1:3f:40:0a:19:cf:76:df:e5:
ac:0d:7f:92:b0:d9:21:5c:bc:69:a5:88:fb:41:32:
0f:d0:f7:5b:c8:f0:da:e0:0b:61:c2:41:2c:29:34:
9b:47:78:7b:84:54:5c:7b:2b:98:66:33:22:e2:6b:
c6:d0:69:9e:9c:2b:98:b1:b6:67:56:57:c9:b6:7d:
97:12:35:ea:46:a9:22:ec:d7:39:7d:37:49:dc:ff:
28:3a:e7:30:9c:4e:3d:7d:48:4a:54:d0:02:75:cd:
5b:60:fd:ac:9c:06:29:54:fe:81:30:02:8b:df:ea:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:AF:D9:42:69:FA:52:52:26:79:F8:9E:27:6E:A6:E9:C6:78:6C
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Zmqv2UJp-lJSJnn4nidupunGeGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.55.0/24
178.22.24.0/24
213.109.96.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b0:32:32:25:56:4f:35:5b:1e:24:9e:24:5e:e2:96:18:03:
61:7f:83:34:6a:db:9e:31:d8:2e:43:4d:8e:a2:c0:6d:ea:98:
b5:f3:be:4a:87:f5:5d:c0:51:7f:1a:f7:02:16:3d:08:de:78:
6c:50:c2:84:bb:ee:4a:00:12:2d:5c:73:ff:a9:57:aa:3f:85:
d8:36:2d:25:16:09:46:a5:8d:6f:9e:44:05:e2:27:c4:31:ea:
e1:9b:d1:a4:47:5b:af:0c:4a:d9:27:e5:94:4d:9c:36:77:b6:
6b:c6:89:9c:97:10:e6:62:13:d3:c0:47:d1:4b:26:fe:df:cc:
2f:ee:58:47:0c:f7:fc:ba:48:5a:9f:f6:ac:f9:86:c7:35:d2:
b4:d2:84:33:45:f9:b7:6e:ad:07:92:ca:67:3f:7e:ff:8b:a0:
03:f0:74:e6:e0:8b:c5:54:b0:e6:fd:d7:9e:3c:5e:d6:17:49:
83:35:ec:a1:66:e4:04:6b:78:37:eb:44:d1:e8:0e:26:22:af:
ad:4f:1c:ba:5b:93:64:e0:87:66:9b:88:3c:d6:4c:8f:54:0d:
c5:96:9b:55:fa:e5:7c:ce:aa:c9:11:4d:b3:bf:d8:86:e3:ba:
72:b3:b2:25:4a:27:f1:b6:bb:26:f2:73:03:1b:0a:87:f9:29:
7a:6e:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:47 2025 by rpki-client