Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/CtCbhWxGoJNHBvqvwpZKPGUMkfg.roa
File: CtCbhWxGoJNHBvqvwpZKPGUMkfg.roa (raw, json)
Hash identifier: AcYJLvFN2bLCW3IV8KjRh1pQs2Autasdf57fU35dMNM=
Subject key identifier: 0A:D0:9B:85:6C:46:A0:93:47:06:FA:AF:C2:96:4A:3C:65:0C:91:F8
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019537B068E5A8CA46D0530E113CDF41BF64
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/CtCbhWxGoJNHBvqvwpZKPGUMkfg.roa
Signing time: Mon 24 Feb 2025 11:21:02 +0000
ROA not before: Mon 24 Feb 2025 11:21:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 84.17.78.0/24 maxlen: 24
84.17.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:b0:68:e5:a8:ca:46:d0:53:0e:11:3c:df:41:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Feb 24 11:21:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ad09b856c46a0934706faafc2964a3c650c91f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:2b:04:7e:dc:5f:d5:a2:74:2d:e0:ca:45:
c1:45:fc:44:52:99:54:1c:b5:00:03:94:38:c5:97:
10:b9:1b:03:87:d4:6a:ec:cd:c4:12:28:85:35:9a:
9a:5d:c7:72:60:07:76:eb:47:e4:08:37:32:f1:6f:
2b:8e:6d:7b:fc:b7:94:31:93:d1:55:42:95:b8:3f:
46:9a:9c:9c:5b:fd:11:a2:2f:2d:6b:95:7a:53:f0:
bb:17:bc:fd:6f:eb:c7:28:5b:3b:a5:60:be:16:be:
27:6d:5f:e6:50:cf:ae:1c:a5:71:81:63:3d:ae:72:
8a:76:6d:40:81:35:9a:91:9b:ef:ac:25:10:ec:8b:
a4:90:ae:f2:3a:9c:6f:55:ad:e1:52:c8:1f:11:3b:
22:ea:58:e1:0b:f5:da:c6:f0:ed:2c:f8:60:2d:34:
19:5c:c9:ee:51:e3:93:37:b8:fb:1f:1f:15:a6:33:
ee:0b:db:8b:8d:f2:a7:8e:c9:65:1d:29:a1:a4:4a:
04:61:bb:4d:4c:2e:f9:db:ab:08:a0:fa:ee:f1:d1:
e0:a1:4d:6a:d2:a8:5c:92:bc:35:91:25:5b:f5:e4:
94:e5:ee:d9:47:97:2c:4f:b3:b3:3e:ce:be:89:ce:
10:7c:7b:5b:ce:86:78:67:4a:02:4e:72:fa:2c:04:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:9B:85:6C:46:A0:93:47:06:FA:AF:C2:96:4A:3C:65:0C:91:F8
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/CtCbhWxGoJNHBvqvwpZKPGUMkfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.78.0/24
84.17.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:28:aa:47:79:e3:93:4a:4b:b0:87:e1:de:a0:d4:b4:ff:cf:
59:82:76:6f:65:76:2d:e3:4d:4a:ad:2b:0e:02:06:a6:0c:2d:
d5:89:bd:98:30:9d:f6:e6:cd:8a:a3:6a:d1:02:87:b6:b7:bf:
1c:48:29:5f:c5:23:53:3b:e6:e5:16:16:0f:a8:a9:6c:53:ec:
c9:d3:9d:f4:fc:79:42:ff:9e:a6:d0:af:25:b8:e0:18:05:37:
a6:3e:5b:69:d1:4c:d2:5e:46:03:8a:c5:a2:b6:c0:d5:03:fa:
6d:42:60:5a:1b:dd:91:7f:e7:47:dc:55:22:37:4d:4b:5a:fb:
a5:8b:a9:e6:03:57:a9:f4:d3:7c:d2:5b:fb:8c:0f:13:11:e3:
d6:5a:ba:03:3e:7c:48:92:d7:55:98:73:87:d3:8a:e1:5e:9e:
f2:65:25:cb:49:93:45:e4:ba:a5:96:db:88:2b:ed:30:84:d0:
e0:19:68:05:fa:13:8e:70:64:7a:4a:f1:cc:9c:0e:27:9e:10:
73:2b:43:9f:5b:ea:b7:cd:2f:d1:60:35:46:9a:a3:a4:26:46:
bf:2f:2e:28:ea:eb:d0:02:9e:aa:bc:c8:3d:2f:ec:62:bb:b1:
a7:2a:36:71:e0:d0:5a:48:be:ab:93:45:5c:20:78:d9:35:ff:
e1:07:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:54 2025 by rpki-client