Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/uNNMjOXDXLLFlgLmYL6_VITIgKg.roa
File: uNNMjOXDXLLFlgLmYL6_VITIgKg.roa (raw, json)
Hash identifier: a3e02ImGbK2kUqKfO42hbPGQOzMfZPf/XDqL56EjfEY=
Subject key identifier: B8:D3:4C:8C:E5:C3:5C:B2:C5:96:02:E6:60:BE:BF:54:84:C8:80:A8
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 018FA1565CD5C634649135213C5392F5C635
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/uNNMjOXDXLLFlgLmYL6_VITIgKg.roa
Signing time: Wed 22 May 2024 17:25:42 +0000
ROA not before: Wed 22 May 2024 17:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213245
IP address blocks: 84.17.69.0/24 maxlen: 24
84.17.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:56:5c:d5:c6:34:64:91:35:21:3c:53:92:f5:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: May 22 17:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8d34c8ce5c35cb2c59602e660bebf5484c880a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:e5:ae:3c:91:2f:4c:ae:55:3b:27:3b:c7:
7b:81:49:01:8d:8f:f1:a7:f5:84:c3:66:1c:54:af:
68:ac:13:f3:42:43:db:b5:8b:b4:81:68:b8:11:4f:
79:0a:da:6a:73:85:17:ae:d1:de:bf:f0:9a:fe:47:
61:10:09:d9:82:5f:f4:fb:bc:df:37:e3:b1:43:eb:
7f:07:6c:8d:0a:91:95:a6:7f:8a:47:4e:73:1c:d4:
45:75:e5:c5:0c:ae:f3:71:26:55:69:12:95:b6:9d:
6e:ee:d6:a1:d9:18:ad:36:b5:2f:c6:26:d0:52:1b:
12:79:a9:9b:0c:b1:b0:66:c6:83:a1:87:3c:bb:07:
52:00:69:c3:4c:a7:83:49:66:21:a3:d9:ba:79:40:
93:92:92:cb:ba:27:01:59:f5:c8:cd:b5:b2:be:89:
fc:0e:dc:b1:92:09:b2:7e:7d:c5:39:85:e6:fb:ad:
79:61:ff:67:2d:6a:f5:00:71:83:66:88:ba:d2:af:
39:cf:c9:3d:f9:f0:61:9d:c0:b8:f5:ee:60:6e:1f:
8c:eb:bd:86:56:be:82:88:36:c5:83:5b:44:07:ab:
1b:8e:2f:4a:6e:23:db:ee:48:a1:c9:f9:2b:2d:b8:
83:cc:3a:dd:28:eb:63:c8:25:ac:79:7e:c1:e6:d2:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D3:4C:8C:E5:C3:5C:B2:C5:96:02:E6:60:BE:BF:54:84:C8:80:A8
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/uNNMjOXDXLLFlgLmYL6_VITIgKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.69.0/24
84.17.88.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a9:65:a4:03:7c:e0:a1:7e:a2:91:3e:65:64:12:e7:b6:25:
1c:9c:ad:f8:80:30:7b:80:75:44:b5:e0:7f:37:26:4b:24:95:
03:41:b7:8e:34:9a:01:b7:d5:bf:5d:bd:f7:19:f3:9f:b3:d4:
6b:49:8f:26:ae:3a:44:61:46:cf:da:37:e5:25:8a:1b:68:b0:
19:6a:80:fe:e2:d4:5d:18:b5:63:63:9b:cd:2a:c5:21:54:66:
b9:2d:52:1a:9d:dc:cf:6d:90:20:2d:b4:48:de:b1:0c:51:0f:
73:01:f5:0b:0b:60:97:6e:ec:24:f9:95:81:91:21:cf:68:0c:
05:ad:88:44:c8:b6:bd:05:82:a9:7a:5b:15:e0:e1:41:4b:52:
0c:0c:ea:6a:9e:3b:73:e3:38:bf:f1:77:9c:15:14:1c:de:15:
ff:27:aa:96:e5:e1:03:84:70:7f:c9:bc:67:e0:0e:32:ac:48:
55:ea:35:55:7d:b4:dd:2f:b7:bb:b8:fb:67:19:1f:86:86:32:
07:c5:0b:36:67:17:bf:50:19:c4:2e:72:86:02:67:ad:49:fd:
69:f7:bc:9d:04:1b:fe:70:b9:6f:c8:6e:57:2f:5f:cd:c9:35:
f8:64:5e:73:b4:ea:6a:f0:f0:57:ac:a5:85:2f:ee:69:04:4f:
03:1f:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:07:56 2025 by rpki-client