Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/_ZHo0DXp29WN4BOS9yj8UgLowqU.roa
File: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (raw, json)
Hash identifier: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=
Subject key identifier: FD:91:E8:D0:35:E9:DB:D5:8D:E0:13:92:F7:28:FC:52:02:E8:C2:A5
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 01942143AF5A751666F32350DFFD60C1AA07
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/_ZHo0DXp29WN4BOS9yj8UgLowqU.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15510
IP address blocks: 84.19.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:af:5a:75:16:66:f3:23:50:df:fd:60:c1:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd91e8d035e9dbd58de01392f728fc5202e8c2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:39:0b:62:f7:dd:0f:4e:ba:1e:c3:e9:1e:
0e:05:e4:06:d4:45:bc:50:42:4d:85:5f:a1:28:74:
43:40:71:bf:8f:f8:ac:d9:5a:a8:09:6d:b3:3c:3c:
c5:57:21:a9:b0:12:c3:c0:e5:da:a9:62:8c:ed:bf:
38:e2:20:f1:9e:1b:ff:90:4f:c4:9c:27:bd:ba:fc:
d7:30:de:0e:15:7b:81:67:a8:ec:eb:4b:44:03:74:
c8:bf:91:1c:10:0c:94:41:62:58:cb:83:0c:22:e9:
98:d0:f3:6e:75:22:7c:ef:0c:7d:b4:0f:82:b9:fb:
b9:b2:81:a8:e7:58:e7:1b:ac:94:da:3a:dd:23:3c:
3c:87:52:4c:ec:49:9c:1b:f2:16:f0:d7:12:dc:20:
31:9d:b5:c8:5a:c7:eb:5f:b9:98:7b:48:2e:6e:1b:
bc:2e:cd:63:45:ec:9d:c2:9a:08:06:9c:83:06:19:
e2:ee:b1:37:d4:48:f0:6e:11:b2:a9:2d:5e:da:c6:
95:ed:c7:f5:6f:41:65:34:77:18:76:5a:49:58:24:
99:48:bc:01:e9:0f:5f:a2:00:d2:fa:ec:43:fb:a2:
48:32:1f:73:df:4b:38:dd:48:48:fb:9b:90:b2:bc:
07:f4:5c:95:0a:31:0d:82:68:f8:33:17:77:17:69:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:E8:D0:35:E9:DB:D5:8D:E0:13:92:F7:28:FC:52:02:E8:C2:A5
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/_ZHo0DXp29WN4BOS9yj8UgLowqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.112.0/21
Signature Algorithm: sha256WithRSAEncryption
53:1f:73:03:b7:4a:41:53:8f:de:45:28:3d:df:ff:53:fd:94:
21:3b:36:26:5f:29:14:5a:58:1b:6c:7c:bf:a0:ff:2a:cc:37:
fe:42:77:f0:4b:40:05:0b:4a:f2:04:b8:81:f7:3a:32:dd:cd:
cf:4e:f6:cc:6a:be:d0:b4:fe:99:a9:a3:a5:b8:82:ce:45:37:
3d:13:cc:d1:34:b8:21:53:1f:18:5e:87:ea:70:36:59:1c:34:
97:5e:47:4c:da:6f:0d:13:91:2c:cf:b0:6c:04:c8:fb:ae:a8:
4a:4f:0a:6f:51:03:ab:70:dd:3f:10:6e:f3:24:c8:dc:f5:24:
79:42:d2:be:04:19:aa:f8:d8:8b:bc:43:fb:73:b3:d3:b8:27:
92:9a:4b:2a:81:28:86:80:b1:e5:3d:f0:8c:19:ed:31:04:c1:
e3:1e:c0:19:91:12:03:a5:8c:22:65:78:52:6a:da:b2:89:63:
6d:8c:22:c4:61:77:93:df:60:cb:b2:83:72:dc:71:a5:b1:c8:
4b:bd:8d:e2:36:4c:e2:7f:c4:b8:e4:2a:28:fd:61:79:cf:97:
db:f5:e3:ac:ca:3f:83:9b:d3:18:f4:85:17:af:99:70:cb:6a:
26:29:ee:4c:94:24:c1:ce:26:67:18:c0:2a:90:8e:d0:63:c8:
07:60:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:06 2025 by rpki-client