Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/5EACQKaTPvWXvVvRcc7WzwRzJUg.roa
File: 5EACQKaTPvWXvVvRcc7WzwRzJUg.roa (raw, json)
Hash identifier: HX85c+qlJZXdweBK7lDbpm2SYDXref2KZMV56LDgouc=
Subject key identifier: E4:40:02:40:A6:93:3E:F5:97:BD:5B:D1:71:CE:D6:CF:04:73:25:48
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019482677950AAED1405670D3529A461B88F
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/5EACQKaTPvWXvVvRcc7WzwRzJUg.roa
Signing time: Mon 20 Jan 2025 06:30:06 +0000
ROA not before: Mon 20 Jan 2025 06:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.17.0/24 maxlen: 24
84.55.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:67:79:50:aa:ed:14:05:67:0d:35:29:a4:61:b8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 20 06:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4400240a6933ef597bd5bd171ced6cf04732548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:23:a5:84:01:a7:e3:81:c2:a2:e9:f9:16:
91:ae:9c:b7:e3:d1:63:3f:20:05:2f:72:46:d8:82:
ee:2a:15:3d:d9:1a:ac:08:f3:17:06:74:40:54:5c:
bd:60:dd:6d:b2:63:18:b1:c6:0e:dc:61:39:71:22:
b7:67:74:93:a6:e9:41:aa:2d:56:2c:2c:83:fe:a6:
fe:c8:b5:91:b8:3e:74:d4:ab:d8:a1:d8:15:a9:16:
2b:af:9c:cf:e1:d6:67:14:4d:97:64:4a:8a:81:3f:
dd:a6:c9:d9:23:a0:99:86:ed:1f:a3:65:c5:22:16:
9f:bd:df:b5:0f:a8:09:bf:d4:cc:35:f5:c6:cd:53:
b7:2d:d0:ae:b1:c0:54:9e:fb:53:e5:bd:70:c3:91:
42:a2:27:b6:b4:dd:63:4d:76:f7:13:55:5b:88:fd:
02:ee:8b:ea:dc:8c:6d:37:e7:a8:22:ca:e9:24:f0:
88:c1:89:75:c8:a2:e3:5e:f6:cd:54:29:bb:b7:c2:
2c:c7:00:ba:56:69:71:1d:45:db:91:b2:1a:d4:ef:
2a:ed:3d:3f:c7:3d:58:1c:5d:65:a8:30:3a:8f:d3:
f5:c1:70:f7:24:81:9d:0f:1b:47:59:75:73:91:d0:
1d:02:30:86:00:4d:8f:8f:98:b1:00:6c:4b:05:5c:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:02:40:A6:93:3E:F5:97:BD:5B:D1:71:CE:D6:CF:04:73:25:48
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/5EACQKaTPvWXvVvRcc7WzwRzJUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
84.55.17.0/24
84.55.22.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e1:67:c0:a5:39:1a:37:71:4b:6a:f2:42:c4:6b:cd:35:fb:
e2:7b:03:1b:33:16:f2:f9:df:56:8c:d3:3c:8f:28:25:a9:55:
d4:03:19:a2:16:30:e7:83:22:69:5c:4a:c4:33:d9:87:90:5f:
7e:92:e3:89:d8:10:89:60:f6:cd:df:f4:0c:b5:21:ab:9a:24:
b2:fd:ba:55:ce:90:aa:b0:c2:7a:3a:b4:1b:7e:de:cc:12:cb:
9c:13:37:08:8c:8f:75:5d:09:8b:66:2f:c2:32:30:58:dc:fb:
05:52:a9:0c:a6:01:e8:e4:c5:d5:08:7e:79:f0:70:92:af:5b:
9e:1e:71:b5:02:1e:9e:d6:8a:5f:3c:ef:84:09:fc:a9:91:f4:
ba:a1:8a:c6:23:23:15:98:ed:9a:e8:b3:df:43:b9:8a:88:4c:
7e:01:03:14:4a:1a:72:e0:2b:27:7e:cd:48:7d:63:53:36:94:
2b:90:2e:0b:06:2f:80:75:19:63:08:84:d5:9e:50:bc:cc:05:
5d:3e:68:36:a6:36:96:3b:c6:42:5a:ee:c1:85:75:a8:26:19:
77:9b:47:fb:ee:22:ed:3c:33:b6:fd:b0:0c:d8:89:53:ad:30:
b8:96:3b:fe:28:d0:4f:e9:89:a6:31:7b:99:3b:2e:1f:e2:6e:
11:ac:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:57 2025 by rpki-client