Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Mg7DOEkGCgrAXaKDjZsayEEaBQg.roa
File: Mg7DOEkGCgrAXaKDjZsayEEaBQg.roa (raw, json)
Hash identifier: w3j7OuYkxdWFTFp0ine540dYGeBObldcde8vZtUUQH8=
Subject key identifier: 32:0E:C3:38:49:06:0A:0A:C0:5D:A2:83:8D:9B:1A:C8:41:1A:05:08
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01942522291A38086C67880E5898D69543A5
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Mg7DOEkGCgrAXaKDjZsayEEaBQg.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:29:1a:38:08:6c:67:88:0e:58:98:d6:95:43:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320ec33849060a0ac05da2838d9b1ac8411a0508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:cf:b1:33:80:99:d6:ab:5c:59:27:a3:35:
f7:ec:4d:c7:0e:5a:ea:72:dd:85:d4:cb:45:73:35:
35:23:3b:b2:58:6e:c7:b4:c1:12:b4:d6:e3:12:fe:
29:08:26:eb:7d:4f:12:fc:d7:03:86:c7:34:6a:55:
80:30:7c:38:35:14:38:bc:cd:e2:1f:8b:64:42:e2:
b5:b6:d5:d1:9c:dd:41:b7:ed:bc:04:05:63:65:7f:
97:ab:1c:63:c7:e2:49:4a:a7:bb:e5:d4:b0:9c:34:
5f:21:a9:15:f0:75:8b:15:86:52:a2:60:48:07:6f:
b9:5d:f2:9f:a8:75:8f:ea:dd:1d:b6:5f:d6:d2:f4:
4d:af:e5:13:08:90:88:7e:83:ea:8f:59:1d:0e:12:
d3:be:bb:cf:ab:86:77:fd:cd:7b:01:65:e4:a9:9b:
4a:3a:1f:5b:bc:8f:ef:ef:5c:e5:6b:8c:a3:bc:92:
b1:f4:16:76:6b:c0:10:63:26:71:e8:e5:75:36:26:
28:04:a0:51:48:42:85:61:ad:cf:c4:cb:bd:31:b9:
fe:d1:ca:0f:80:12:26:5f:25:53:fe:92:6c:1b:a2:
fd:6d:9e:5b:28:9b:cb:c0:15:fc:44:bf:57:62:b7:
6d:39:1c:34:c6:d2:de:44:5b:0c:b5:db:43:8b:70:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:C3:38:49:06:0A:0A:C0:5D:A2:83:8D:9B:1A:C8:41:1A:05:08
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Mg7DOEkGCgrAXaKDjZsayEEaBQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.18.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c5:14:79:28:92:6f:d8:b8:71:19:d0:79:8a:84:f7:d4:be:
a5:44:4a:d7:05:ea:43:9a:f3:22:8f:af:b7:02:3f:d2:11:b1:
aa:e1:ef:ba:e8:3d:c7:6a:d0:f5:56:d8:2b:98:23:31:8b:0d:
13:e0:4a:1b:58:6f:f2:e4:37:34:b8:9a:74:33:2f:69:7c:af:
91:fa:eb:c4:65:c5:c0:c1:6b:6a:8d:4c:67:09:56:c6:76:92:
24:80:57:91:5e:55:de:89:d5:8a:f7:39:bb:3c:48:70:5e:5f:
ae:c7:17:de:2a:0e:2f:11:16:ee:93:d7:f1:01:7c:1e:d6:38:
22:37:5a:03:d5:21:63:09:be:f7:29:e1:e8:6c:de:38:f7:ce:
c3:eb:a7:c2:8c:ea:b8:60:1d:ec:c7:e4:bd:a9:b3:ee:1f:2e:
c0:27:ce:c4:3c:0a:ca:48:19:3e:ac:f9:2b:23:20:0a:e5:d4:
42:2b:25:7d:87:42:2a:e7:df:95:67:39:75:a6:14:d3:13:89:
8b:9e:62:fc:a8:80:f7:80:3a:f1:5b:59:db:d4:37:bb:b0:aa:
91:36:33:a1:32:da:fd:ef:c6:6f:68:af:8d:5b:39:32:21:01:
34:82:ad:5e:e5:01:8e:5d:d1:7d:dc:23:e7:2c:b3:af:9a:b0:
bb:c6:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:12:24 2025 by rpki-client