Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Goh4aWxXmwf3149KhVZTNlshxWA.roa
File: Goh4aWxXmwf3149KhVZTNlshxWA.roa (raw, json)
Hash identifier: ObNYcRR+p5MEQfKOIJoKfRxXEu/iWeFniRVFSUEN37s=
Subject key identifier: 1A:88:78:69:6C:57:9B:07:F7:D7:8F:4A:85:56:53:36:5B:21:C5:60
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01949194F8D71D809988BAE1BA56CA672AA7
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Goh4aWxXmwf3149KhVZTNlshxWA.roa
Signing time: Thu 23 Jan 2025 05:14:06 +0000
ROA not before: Thu 23 Jan 2025 05:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 84.55.0.0/24 maxlen: 24
84.55.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:91:94:f8:d7:1d:80:99:88:ba:e1:ba:56:ca:67:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 23 05:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a8878696c579b07f7d78f4a855653365b21c560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:e0:9f:54:bd:d7:9a:09:a3:d8:28:d2:48:
d1:83:7d:c1:73:f8:c1:a3:d5:67:65:c9:07:8c:b6:
9a:3d:eb:7f:aa:e5:d0:4b:91:89:47:d6:a4:3d:73:
f2:e7:1c:95:63:66:31:08:6c:a7:d0:c0:fc:75:20:
93:6c:6e:3c:e8:f9:55:30:0c:d0:a5:a0:8a:5e:2b:
b6:56:3c:ac:c3:e5:e5:0d:24:c2:30:4e:42:48:12:
2c:b6:e8:43:e3:cd:54:f9:71:34:e0:85:55:9a:d5:
65:05:70:2a:55:d8:31:d1:83:2b:3b:4b:aa:a7:7d:
cb:c0:ae:ea:56:7a:bc:c9:e3:99:4c:6e:1e:79:7e:
59:8d:be:a1:3a:40:ff:91:dd:32:0c:94:f5:e3:40:
37:02:9b:c4:14:e2:5c:1b:65:d8:50:30:6b:c7:b8:
9f:57:36:da:e5:01:6b:87:6d:4c:e2:2d:ad:13:2a:
31:77:fa:2d:0e:6d:ca:02:23:1f:20:89:ee:f0:85:
cf:ec:1f:bd:19:c2:80:ef:16:5b:84:11:21:b1:c3:
fd:c9:89:a2:58:b3:f0:ba:7f:2f:2c:d0:1d:ff:ca:
47:d6:0b:62:fd:e2:16:06:d7:de:07:37:8e:29:e1:
b0:96:1f:1f:92:9b:72:a9:ed:8d:c3:9c:be:21:bf:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:88:78:69:6C:57:9B:07:F7:D7:8F:4A:85:56:53:36:5B:21:C5:60
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Goh4aWxXmwf3149KhVZTNlshxWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.0.0/24
84.55.6.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c1:61:fe:10:a7:79:25:c3:2e:26:80:c4:24:04:7c:33:37:
e4:dc:b8:81:fe:9e:2d:e7:c4:36:08:94:a3:a6:34:5a:07:14:
7d:3d:8e:67:7e:48:98:58:46:d4:a3:e8:38:ee:50:91:b8:ba:
c3:dc:99:76:a7:1c:ea:23:03:a5:b9:07:b5:5c:0e:f1:a2:d3:
b5:18:1a:9f:0f:17:e1:ab:43:40:6e:6a:6a:b2:fc:a9:6c:b1:
f1:10:d1:9e:da:29:93:d4:a8:fe:8a:6c:83:cf:0d:38:b3:30:
20:2d:01:54:fc:a0:ae:02:c1:6a:68:5f:68:91:da:ea:90:a9:
8a:c5:cf:cd:29:f4:6b:e7:ba:84:10:75:17:9c:95:b6:26:32:
bc:7d:22:7a:c5:e2:e6:15:08:45:6d:0f:de:22:40:1c:c0:6c:
d8:5f:87:53:d8:e3:41:e4:c0:28:4c:6c:b9:67:55:79:39:9c:
96:e2:c5:00:44:89:b4:06:03:11:07:3c:63:d4:32:bc:50:fe:
82:7e:52:10:6f:91:54:d8:6d:f9:8d:d8:e8:d2:0b:7b:b4:64:
ec:5d:68:3d:87:c8:ab:97:eb:cf:f4:c4:94:b7:f7:aa:d2:84:
1b:a7:25:40:ce:12:9f:4b:f8:41:dd:6c:53:a2:9a:5f:8c:15:
e9:44:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:33 2025 by rpki-client