Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/q5FS9BDpV3CrnNAkWyAUvnjY1qc.roa
File: q5FS9BDpV3CrnNAkWyAUvnjY1qc.roa (raw, json)
Hash identifier: iRCjuXyp2rFlni9nMesGE9pNAfiSSHbWmgpj7LiAasI=
Subject key identifier: AB:91:52:F4:10:E9:57:70:AB:9C:D0:24:5B:20:14:BE:78:D8:D6:A7
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019521E444D2D8DA9A3D968D4EB15D4047DE
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/q5FS9BDpV3CrnNAkWyAUvnjY1qc.roa
Signing time: Thu 20 Feb 2025 05:46:02 +0000
ROA not before: Thu 20 Feb 2025 05:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:21:e4:44:d2:d8:da:9a:3d:96:8d:4e:b1:5d:40:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Feb 20 05:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab9152f410e95770ab9cd0245b2014be78d8d6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:86:b9:61:bb:a3:b3:69:1a:c8:65:76:70:
df:54:3c:df:80:e2:a3:e7:cc:5e:2b:43:29:9c:e4:
23:0b:5e:b3:34:24:b9:b2:f0:48:a0:3f:f6:96:b0:
69:dc:46:9b:82:22:3b:95:23:5a:da:69:b9:1d:de:
71:fc:83:83:8e:9c:ea:88:79:38:9d:89:0b:64:ff:
7a:e0:c7:19:0a:ae:4f:3f:db:89:7c:17:6e:66:22:
c0:b6:f6:0d:d4:ad:78:0f:2d:db:b3:dd:35:20:6c:
6b:c5:9d:78:08:64:ee:ae:d9:33:d2:04:f9:c6:6c:
c3:84:ba:c8:52:b0:f7:11:5a:02:90:7c:77:3f:e3:
68:c2:34:12:b0:93:eb:6f:35:6d:bd:bd:c9:4f:5b:
6a:b7:db:28:c0:c8:3c:05:59:c0:c4:d3:c8:00:9c:
a0:98:8b:fd:cc:99:c5:4b:41:ea:51:a5:de:02:93:
32:72:c7:0c:b0:d9:45:fe:f6:c7:56:3a:cc:b4:16:
16:c6:7f:8b:dc:db:56:32:4c:ce:cb:cc:5d:33:47:
77:d2:49:7e:52:43:63:02:70:22:ab:cc:cc:56:d6:
ea:a9:67:79:ac:67:84:25:c1:a7:6e:fb:68:b6:78:
a5:2a:ad:4c:18:9c:be:05:21:2e:1d:c4:c2:f3:12:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:52:F4:10:E9:57:70:AB:9C:D0:24:5B:20:14:BE:78:D8:D6:A7
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/q5FS9BDpV3CrnNAkWyAUvnjY1qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:18:aa:5f:0e:a5:bb:62:2f:d5:cd:88:53:57:4c:d7:2d:34:
5d:8b:53:cd:c0:16:da:58:16:df:91:15:13:6a:37:b0:31:54:
7d:76:6c:93:5e:73:ef:3d:c2:76:9a:9b:2a:e4:76:1c:6d:8e:
40:d8:d5:c0:c3:27:59:c2:62:13:ae:65:4b:5e:23:59:bb:41:
d3:db:76:40:b2:32:63:59:ef:34:39:df:f5:78:63:79:29:ec:
49:9b:0c:bd:34:7a:b4:e8:55:4b:47:b5:56:ef:30:f1:c6:66:
00:64:e8:ec:b8:14:89:51:88:6c:c4:fb:f0:2b:73:3e:2c:41:
d0:cf:67:23:d8:5c:b0:88:d5:c9:61:8a:4c:3a:fc:4d:8a:6b:
98:5c:6b:09:e8:e3:68:3f:ac:d8:31:02:8b:f0:fa:49:8a:d9:
51:23:63:79:a1:59:ea:8c:6d:b6:0e:4d:4b:4b:75:31:3d:14:
d9:78:2e:30:0e:03:e0:a8:29:6e:ba:9e:cf:63:08:e8:fb:cc:
8b:0b:dc:ac:4e:cb:12:a3:75:89:f2:06:8c:df:d7:ca:ed:b8:
a0:59:88:17:7c:90:75:17:77:53:1d:51:10:fe:07:e3:09:cd:
66:fe:f8:48:01:f3:9b:0e:b2:6d:40:f9:3b:47:c9:fc:09:13:
a8:7a:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:13:29 2025 by rpki-client