Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa
File: Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa (raw, json)
Hash identifier: 8HruGL7yjBEpznKxnMUFMkvUrJXEnuhg3el+Q45d0VY=
Subject key identifier: 46:ED:2A:47:B4:D1:65:A6:2B:F4:7D:1B:39:15:4D:D8:32:82:C6:82
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019493183C16FCA38BDD69D1262F3275DE21
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa
Signing time: Thu 23 Jan 2025 12:17:06 +0000
ROA not before: Thu 23 Jan 2025 12:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 84.55.0.0/24 maxlen: 24
84.55.2.0/24 maxlen: 24
84.55.4.0/24 maxlen: 24
84.55.5.0/24 maxlen: 24
84.55.6.0/24 maxlen: 24
84.55.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:18:3c:16:fc:a3:8b:dd:69:d1:26:2f:32:75:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 23 12:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ed2a47b4d165a62bf47d1b39154dd83282c682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:c0:66:34:d9:ce:0d:31:07:60:09:e6:0a:
df:c1:28:69:7f:4c:45:1c:de:b8:ec:93:91:bf:7d:
21:89:51:f2:2f:99:9d:a8:b4:7a:ef:41:a8:52:6c:
50:84:70:a4:0a:d9:41:dd:6f:07:cb:e9:43:75:09:
93:1b:a4:46:ca:27:16:50:8c:8e:9b:41:40:66:35:
a4:14:a9:39:f5:4b:67:79:a0:b0:36:8a:f9:c6:5f:
ca:3c:d0:75:c2:91:81:d8:de:5f:2b:4b:65:f6:4d:
62:a8:79:dd:c5:9b:83:ad:8e:13:37:dc:e6:0d:fa:
62:d8:9a:38:c4:ee:d7:6b:4a:b9:48:b6:51:a4:71:
b1:30:aa:32:f8:8e:0e:b8:12:ea:54:a5:6b:15:3a:
74:c6:36:5e:6d:fe:39:e7:87:a2:56:ad:b1:d2:d9:
c3:82:45:14:51:12:13:9f:73:52:71:3f:4d:70:15:
b1:4f:9c:d8:52:2d:70:07:3a:14:6e:bb:8f:ad:76:
4b:a7:a1:a9:d9:ac:c0:5a:db:7b:38:19:f8:a8:d5:
9a:91:ec:49:8c:a6:d3:24:70:d7:ab:91:21:da:9d:
7d:e1:a9:4b:e4:80:21:e1:79:35:7c:fb:d4:e9:73:
40:cb:97:6b:b7:00:68:78:6e:98:bd:05:7d:99:26:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:2A:47:B4:D1:65:A6:2B:F4:7D:1B:39:15:4D:D8:32:82:C6:82
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.0.0/24
84.55.2.0/24
84.55.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:03:07:b4:e1:ea:72:bc:7f:ee:c6:1b:ec:55:95:38:d4:78:
35:1b:56:dd:2a:a5:18:a1:10:d5:03:35:62:ba:44:0f:ee:38:
81:d3:44:d0:59:b9:bc:df:68:c4:90:be:e1:b7:f8:b5:66:f5:
84:83:34:37:2f:d7:eb:01:49:91:8e:2c:40:11:06:14:b6:7f:
96:16:86:b7:c4:d4:b8:d2:7e:ae:3c:ac:8c:ce:f6:0a:5a:76:
2b:a9:26:49:05:e8:7f:e3:f1:87:d6:1c:be:16:b9:d9:19:89:
78:21:6b:6f:a6:46:e7:d8:c1:48:eb:55:78:0e:21:7a:17:33:
19:75:66:60:e6:a2:01:fc:59:b1:cf:de:a4:ff:7d:ff:26:12:
d1:40:32:0c:9d:bd:d2:3c:3a:80:00:bc:f2:ba:c2:4a:0d:0c:
70:8b:a2:48:8a:7a:31:bd:72:1f:03:ec:4d:9c:3c:56:08:3b:
82:c7:c4:d5:8e:27:5b:8e:e0:c4:2f:d0:fc:4e:2f:79:4b:cc:
07:aa:0d:d9:c5:85:7b:77:b1:79:91:e4:49:e7:e6:17:f3:6f:
b4:92:8c:f6:a2:eb:4a:3a:cc:ea:47:2e:3b:bb:49:7b:c5:cb:
d3:a8:7e:18:2b:77:6c:49:f0:8a:15:b8:a5:16:5a:6a:45:fe:
9d:10:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:21 2025 by rpki-client