Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/plAotPIJcnO1GD9GAvV2p3e4oXE.roa
File: plAotPIJcnO1GD9GAvV2p3e4oXE.roa (raw, json)
Hash identifier: VIIy5RzPKsrQcOKiOVG9O6ZXVm5ZFEu0FdrFTfw28QM=
Subject key identifier: A6:50:28:B4:F2:09:72:73:B5:18:3F:46:02:F5:76:A7:77:B8:A1:71
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D21905695914BB0757A0492A37AFB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/plAotPIJcnO1GD9GAvV2p3e4oXE.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16321
IP address blocks: 84.204.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:21:90:56:95:91:4b:b0:75:7a:04:92:a3:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a65028b4f2097273b5183f4602f576a777b8a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:09:92:60:89:5b:88:50:50:19:13:d3:6e:
2c:c5:59:d3:9a:cb:21:de:60:29:13:ed:e8:54:0a:
ee:f8:1a:d3:66:e8:27:5f:e7:52:fe:75:93:eb:76:
e7:03:5e:2a:35:55:97:b4:5a:6f:e4:90:9e:03:60:
b6:15:8e:b0:bf:0e:d1:be:7e:60:90:e6:1e:b6:ce:
6f:9f:c7:4b:b6:40:c6:6d:70:ad:93:63:7c:b9:17:
e5:2f:d7:ae:82:78:4c:14:ff:15:d3:d6:35:9e:3c:
33:8c:da:77:98:66:04:3f:ca:d4:ec:46:34:83:66:
84:5b:33:df:36:b4:54:74:da:8b:92:5b:0a:fe:6b:
fd:e2:cc:9f:9c:ef:50:b3:14:d1:39:1c:f1:20:5f:
d4:cc:8d:15:f5:4c:3c:a2:45:3e:46:2a:36:3f:b2:
25:c0:33:59:7d:44:0b:50:90:0a:df:30:25:02:f8:
14:b2:f1:3c:01:07:cd:cf:b7:54:02:39:1c:60:ab:
c6:6f:6b:56:ea:3b:7b:61:bb:0a:ff:a0:c4:91:20:
4b:d9:8d:92:f1:65:91:db:c4:4a:33:4f:e1:bc:b3:
1c:f6:8c:94:07:89:f9:23:12:23:c7:13:d7:c0:48:
05:0b:d1:21:1c:86:99:d4:9a:89:60:a9:b8:7e:0c:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:28:B4:F2:09:72:73:B5:18:3F:46:02:F5:76:A7:77:B8:A1:71
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/plAotPIJcnO1GD9GAvV2p3e4oXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.204.225.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f6:f5:de:54:97:2c:6e:f3:86:0e:99:b1:76:fb:e0:17:8d:
86:87:fa:f9:ce:06:09:72:0b:ee:d4:ea:3d:f6:fb:78:44:26:
8f:bd:5f:23:cd:28:48:68:be:5d:b8:ee:1f:93:1c:8a:00:5e:
9e:9f:5a:47:30:54:0e:d2:17:16:61:71:89:25:c8:1d:8b:d4:
73:9c:56:8f:fe:7a:15:6d:d5:f2:1c:28:15:4d:a6:56:ae:10:
02:73:4f:84:9d:55:97:08:52:44:44:ea:2f:d5:c0:55:a3:28:
89:83:d8:7b:15:4b:38:0f:aa:ce:0f:58:58:cf:38:d4:ff:05:
49:11:57:bc:18:03:49:a6:35:90:ba:f5:47:e3:1b:d6:d4:eb:
f2:15:6b:9e:fd:a4:eb:c8:99:aa:35:65:a0:61:c7:be:04:e2:
aa:52:e6:26:8d:b3:80:76:54:ca:c3:cc:5e:d0:11:32:03:07:
37:09:76:d6:69:7c:6e:79:50:3c:70:2c:a4:1a:71:ef:5f:0d:
13:9c:c4:81:77:e9:53:8b:96:37:4f:cd:27:f0:a9:93:f5:c7:
74:2d:26:d5:2f:55:1f:cb:56:2e:a0:f0:b3:4a:fa:c4:c6:4e:
a2:36:39:b2:46:2a:96:8e:f4:a3:1c:12:8a:fc:81:7e:74:5a:
25:2e:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:14:09 2025 by rpki-client