Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/b9PYXqxGlSyQH2-f09qRnR7BtV4.roa
File: b9PYXqxGlSyQH2-f09qRnR7BtV4.roa (raw, json)
Hash identifier: GNrsBDitY9yK9BtxdtZTBRNdTWuo2KzJBuabuapNYr0=
Subject key identifier: 6F:D3:D8:5E:AC:46:95:2C:90:1F:6F:9F:D3:DA:91:9D:1E:C1:B5:5E
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0194252228E95CE24A1B5C03D47B85A0666E
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/b9PYXqxGlSyQH2-f09qRnR7BtV4.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 84.55.0.0/24 maxlen: 24
84.55.1.0/24 maxlen: 24
84.55.2.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.4.0/24 maxlen: 24
84.55.5.0/24 maxlen: 24
84.55.6.0/24 maxlen: 24
84.55.7.0/24 maxlen: 24
84.55.17.0/24 maxlen: 24
84.55.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:28:e9:5c:e2:4a:1b:5c:03:d4:7b:85:a0:66:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd3d85eac46952c901f6f9fd3da919d1ec1b55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:d1:4d:66:7b:a9:c8:90:5a:6b:0c:42:79:
4a:3b:af:03:a7:bf:ca:25:1a:48:3a:57:1b:84:5f:
1b:1b:0b:d8:83:7b:f8:75:e0:9d:09:9c:33:71:5a:
f4:b3:70:bf:9b:2c:3d:eb:df:e4:02:0f:86:27:4a:
c7:29:20:9e:45:93:51:03:7e:83:20:1a:bb:4d:0c:
50:e2:6a:4b:c7:40:94:ba:91:7d:a6:87:26:d9:5f:
1b:6e:50:90:6f:6f:fe:20:34:ae:01:db:69:0f:9c:
b3:9b:76:7a:8a:f8:23:03:c1:7f:23:29:a5:78:85:
d0:0b:b1:f8:49:bb:3d:1b:e6:6b:5e:01:e2:34:07:
d3:a9:56:7a:3e:ad:86:54:56:62:05:25:b7:1c:1e:
af:4e:78:4d:31:58:7f:39:36:8b:78:30:01:95:1d:
b9:d1:28:12:c1:4d:51:c0:58:ac:15:fb:49:0d:d4:
10:89:72:eb:ff:e8:dc:b4:aa:e6:98:a7:73:5c:91:
00:3a:e0:9b:9e:33:5d:a4:0f:ae:3e:a3:81:5c:38:
09:15:9c:2b:c5:8c:ec:5f:a3:6b:65:af:b0:34:10:
0d:fc:6f:86:9e:bb:a5:4c:5a:d9:56:fe:1f:00:20:
93:2a:0f:36:1a:9e:b1:2a:d7:b3:06:13:e1:9b:94:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D3:D8:5E:AC:46:95:2C:90:1F:6F:9F:D3:DA:91:9D:1E:C1:B5:5E
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/b9PYXqxGlSyQH2-f09qRnR7BtV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.0.0/21
84.55.17.0/24
84.55.22.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fd:1e:83:ab:3a:f9:36:13:a5:a5:31:a4:b7:7e:71:01:91:
20:54:08:21:17:03:29:c2:b5:56:04:06:7d:09:42:5a:8b:1d:
a3:98:ea:36:5b:1a:d7:ad:f7:4b:7e:7d:7f:0f:fb:65:82:50:
6e:55:64:a4:3d:b6:ac:09:bf:a2:ea:6f:05:a7:ac:fa:41:61:
49:52:34:0d:0f:94:ab:86:7f:53:e8:b9:cb:cc:86:b7:e7:a2:
2b:be:83:59:93:ad:4b:35:a9:bd:55:72:0b:4e:f1:a2:6c:ab:
b0:a9:b0:88:1f:6e:a0:f8:d0:60:fa:07:0f:7d:f3:be:3f:62:
e9:e8:24:88:81:a3:af:7d:71:4a:d1:86:f5:0a:da:dd:af:9c:
73:20:aa:c7:cd:5f:b5:2a:f2:2a:f9:ae:ea:9d:df:35:e7:9c:
95:49:cb:23:c8:94:44:d5:91:89:77:38:bc:04:64:92:a9:d9:
2b:4a:15:18:c9:cd:36:a1:3c:5c:c9:13:58:47:99:46:2e:6b:
92:27:88:55:68:21:0e:d8:be:31:d6:52:ff:f1:95:f5:30:64:
a6:fa:dc:6b:07:8f:42:c2:7b:c9:75:de:3c:ca:ab:11:3a:a3:
4b:1e:fd:b3:26:18:c5:32:ed:e2:5c:80:a3:1c:b2:bf:88:4b:
be:00:94:7d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIijpXOJKG1wD1HuFoGZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwMTAyMDM0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQzZDg1ZWFjNDY5NTJjOTAxZjZmOWZkM2RhOTE5ZDFlYzFiNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFvRTWZ7qciQWmsMQnlKO68Dp7/K
JRpIOlcbhF8bGwvYg3v4deCdCZwzcVr0s3C/myw969/kAg+GJ0rHKSCeRZNRA36D
IBq7TQxQ4mpLx0CUupF9pocm2V8bblCQb2/+IDSuAdtpD5yzm3Z6ivgjA8F/Iyml
eIXQC7H4Sbs9G+ZrXgHiNAfTqVZ6Pq2GVFZiBSW3HB6vTnhNMVh/OTaLeDABlR25
0SgSwU1RwFisFftJDdQQiXLr/+jctKrmmKdzXJEAOuCbnjNdpA+uPqOBXDgJFZwr
xYzsX6NrZa+wNBAN/G+GnrulTFrZVv4fACCTKg82Gp6xKtezBhPhm5Q6AQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG/T2F6sRpUskB9vn9PakZ0ewbVeMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvYjlQWVhxeEdsU3lRSDItZjA5cVJuUjdCdFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVDcAAwQA
VDcRAwQAVDcWMA0GCSqGSIb3DQEBCwUAA4IBAQA2/R6Dqzr5NhOlpTGkt35xAZEg
VAghFwMpwrVWBAZ9CUJaix2jmOo2WxrXrfdLfn1/D/tlglBuVWSkPbasCb+i6m8F
p6z6QWFJUjQND5Srhn9T6LnLzIa356IrvoNZk61LNam9VXILTvGibKuwqbCIH26g
+NBg+gcPffO+P2Lp6CSIgaOvfXFK0Yb1Ctrdr5xzIKrHzV+1KvIq+a7qnd8155yV
ScsjyJRE1ZGJdzi8BGSSqdkrShUYyc02oTxcyRNYR5lGLmuSJ4hVaCEO2L4x1lL/
8ZX1MGSm+txrB49CwnvJdd48yqsROqNLHv2zJhjFMu3iXICjHLK/iEu+AJR9
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:35:49 2025 by rpki-client