Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9yUcmXnYY8VdowBaDrFd-oJ_iZ0.roa
File: 9yUcmXnYY8VdowBaDrFd-oJ_iZ0.roa (raw, json)
Hash identifier: DsbLaforB3ylOiLLyp/6sGGJdaTGE6KuZvjpWND+/BM=
Subject key identifier: F7:25:1C:99:79:D8:63:C5:5D:A3:00:5A:0E:B1:5D:FA:82:7F:89:9D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0194826778E156A900EA42ED005A49034F82
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9yUcmXnYY8VdowBaDrFd-oJ_iZ0.roa
Signing time: Mon 20 Jan 2025 06:30:06 +0000
ROA not before: Mon 20 Jan 2025 06:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.0.0/24 maxlen: 24
84.55.2.0/24 maxlen: 24
84.55.4.0/24 maxlen: 24
84.55.5.0/24 maxlen: 24
84.55.6.0/24 maxlen: 24
84.55.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:67:78:e1:56:a9:00:ea:42:ed:00:5a:49:03:4f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 20 06:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7251c9979d863c55da3005a0eb15dfa827f899d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:a5:01:15:26:ed:41:63:bb:84:d1:5c:19:
18:96:b6:b5:52:03:56:69:1d:71:ba:cd:bd:d8:d8:
eb:93:0d:43:c0:4f:73:ed:eb:57:0e:aa:a4:64:3b:
04:c0:eb:27:27:7f:27:af:c3:af:6b:d8:3a:4c:9f:
e2:f8:b6:f9:95:2a:e5:03:6a:d6:2c:68:a8:e0:1c:
b8:cb:ae:88:11:34:2a:5a:15:b1:1e:50:49:73:ee:
8c:c5:27:3b:c6:74:c9:5a:a3:ba:6f:f2:e8:ca:55:
88:98:4c:eb:8e:30:ff:b5:d5:bc:67:52:ed:e4:ee:
33:18:be:6b:8f:0b:62:87:c7:32:0a:5f:f5:d3:2c:
c2:e2:8b:43:d0:c6:6d:75:76:b7:b0:ee:3f:49:cd:
c2:2b:e5:32:be:71:69:a3:da:b1:c5:02:a1:bc:2f:
bf:1e:49:70:56:66:1a:dc:2e:1c:73:e7:2a:51:32:
b0:67:b5:17:ed:9c:9b:d3:0d:80:0b:3b:b0:13:88:
4a:1b:46:5a:96:c3:da:7e:51:b9:ed:ba:cd:7e:99:
5a:91:1f:67:58:28:43:02:ac:7e:8d:82:6c:c9:b4:
d9:4c:e0:83:cf:c8:b9:40:18:62:48:a0:9d:51:27:
8d:27:b9:ba:27:85:2b:72:52:b5:7a:0a:30:0d:1b:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:25:1C:99:79:D8:63:C5:5D:A3:00:5A:0E:B1:5D:FA:82:7F:89:9D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/9yUcmXnYY8VdowBaDrFd-oJ_iZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.0.0/24
84.55.2.0/24
84.55.4.0/22
Signature Algorithm: sha256WithRSAEncryption
61:82:77:c4:ee:c7:a7:f6:99:a9:4f:af:d5:3c:1f:a3:38:86:
2d:40:90:48:ef:d3:c3:21:67:bb:32:a8:56:3a:a6:82:94:2d:
18:8d:fa:2d:3a:84:43:55:40:f7:7b:85:eb:f8:5f:3f:bf:45:
83:94:7d:39:eb:a7:f8:3b:5d:4e:1d:b0:8b:42:1b:02:4c:e8:
8d:40:41:26:a1:31:d4:f2:d4:1f:4f:c3:e6:57:5f:43:51:c9:
ad:f0:2d:bb:40:99:67:26:2c:5c:df:7c:d0:42:aa:26:ba:1d:
2d:0f:1c:4f:59:9e:15:1f:1d:d7:00:b3:94:b2:93:f1:a2:78:
1e:bf:b6:bb:fe:b2:e0:69:78:55:44:bb:2a:cc:52:f5:64:c1:
b7:f3:9e:75:c6:3f:e5:4b:b6:d7:a4:b0:d8:06:b1:54:d0:ad:
5b:87:92:60:44:1f:46:6c:b0:3e:1e:59:52:90:e5:b2:eb:88:
e8:28:ad:b7:9d:1a:ce:f8:42:42:54:a7:a9:e4:1f:83:8e:e4:
d4:d7:7f:a8:bb:b1:94:78:63:70:34:92:9b:13:94:b5:df:42:
89:53:13:ef:fc:e8:27:72:7d:c5:63:85:04:4f:e0:0e:8c:a6:
a3:c7:34:9d:02:e9:3c:cf:6c:cb:c0:c4:b1:1a:44:86:05:d5:
f1:2c:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:45 2025 by rpki-client