Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/wjP874y9X7tkaBvc_HFbBV0R3o0.roa
File: wjP874y9X7tkaBvc_HFbBV0R3o0.roa (raw, json)
Hash identifier: vHwJWvcMFOVy/O/CQb0+O6yyYvMFEOWnSj+tJ3CFAMw=
Subject key identifier: C2:33:FC:EF:8C:BD:5F:BB:64:68:1B:DC:FC:71:5B:05:5D:11:DE:8D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0195D12BE6D183B75D913F3BA73C5DA880F2
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/wjP874y9X7tkaBvc_HFbBV0R3o0.roa
Signing time: Wed 26 Mar 2025 06:37:50 +0000
ROA not before: Wed 26 Mar 2025 06:37:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.10.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:2b:e6:d1:83:b7:5d:91:3f:3b:a7:3c:5d:a8:80:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Mar 26 06:37:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c233fcef8cbd5fbb64681bdcfc715b055d11de8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:96:2a:b5:12:20:e3:fc:2d:07:ac:0d:14:
69:24:a6:af:03:6b:43:ff:eb:62:1a:db:09:1c:aa:
ac:62:8a:fe:b4:09:90:02:62:0b:a8:54:52:e5:c6:
5f:ce:6d:93:bd:27:ca:de:51:45:cb:48:63:98:44:
4a:07:aa:db:e9:86:3a:f3:ed:6e:70:3a:ab:69:18:
5d:77:4f:8c:c8:a0:88:37:37:d5:a5:76:20:df:c4:
a9:27:fb:49:cb:ba:f4:57:04:52:1f:67:9a:57:8b:
8e:24:4c:d5:ac:c6:d8:2b:c3:15:42:3b:7b:0d:47:
6d:3f:0b:0e:0b:e2:49:97:76:94:a1:a3:84:a4:36:
b6:e0:7b:ea:31:bd:58:07:92:b5:27:f6:b7:cd:82:
e0:54:9f:a8:5a:7c:84:c1:2d:24:b7:cf:05:2e:73:
8c:54:32:d3:0e:3e:14:ad:b7:46:2a:ac:e5:5e:2d:
a2:ed:fc:94:98:25:65:e5:5b:66:69:6d:80:07:56:
86:ec:d1:98:26:43:5d:97:13:e9:39:a6:d8:88:c6:
2a:d3:d8:90:48:8a:52:d2:97:db:7b:6d:9b:75:61:
8a:57:a9:14:c9:fa:96:4a:7a:cd:a5:05:d7:c8:5d:
70:ee:f9:f0:ac:38:35:36:93:7a:5e:cf:71:d6:75:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:FC:EF:8C:BD:5F:BB:64:68:1B:DC:FC:71:5B:05:5D:11:DE:8D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/wjP874y9X7tkaBvc_HFbBV0R3o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.10.0/24
84.55.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:02:e9:1d:3f:f0:24:15:de:36:fd:c4:01:50:1f:22:9e:4c:
5a:e2:12:e6:fd:ad:76:48:fe:c6:6f:d7:a9:c9:86:42:e5:fe:
14:29:8b:ff:2a:b4:09:9a:fe:6b:2e:7a:a7:36:af:05:8d:07:
00:5b:ba:b4:6e:4d:5a:bb:57:78:dc:95:3f:c5:bf:e9:5a:1e:
f0:7c:8d:09:46:ac:7b:91:18:ef:7a:c7:6d:99:e3:4a:33:1b:
87:64:ab:f0:75:9d:9b:81:81:aa:c5:ef:a8:68:41:32:9b:e7:
43:b9:d9:00:1f:95:23:5c:85:a2:a2:e1:80:46:d9:33:ea:29:
d4:f6:52:f4:30:4d:25:fa:d3:11:ff:ad:46:7a:4d:35:38:ce:
72:68:b4:5c:ff:29:4a:c4:4c:ee:c0:70:d4:14:4e:79:ee:43:
a9:93:af:0b:12:7b:99:7c:36:67:38:8d:c1:6e:8b:d1:6b:cd:
ca:aa:6e:73:71:9e:9a:b9:04:cf:e1:e0:22:ad:7c:dc:46:b7:
d5:eb:04:89:61:29:3e:8c:4e:43:c3:a3:91:67:7d:f9:23:46:
c4:2e:78:41:d7:bf:ae:ec:c6:16:26:e7:26:d6:13:09:76:e4:
ad:2d:d0:5e:1b:5e:f8:cc:54:6a:ed:2a:92:c1:c2:47:ad:b6:
c0:a1:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:35 2025 by rpki-client