Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/tKgBqg_rLrlFGJvqmdrP_jnooGM.roa
File: tKgBqg_rLrlFGJvqmdrP_jnooGM.roa (raw, json)
Hash identifier: tpbpHr7/WtsAKH6NIHCmBsfYfjVLkAOk8pTuaYRtsII=
Subject key identifier: B4:A8:01:AA:0F:EB:2E:B9:45:18:9B:EA:99:DA:CF:FE:39:E8:A0:63
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019421B1E1D17034C3161B9AC11E47D4DCF1
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/tKgBqg_rLrlFGJvqmdrP_jnooGM.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 84.239.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e1:d1:70:34:c3:16:1b:9a:c1:1e:47:d4:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4a801aa0feb2eb945189bea99dacffe39e8a063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:8f:e8:bd:43:6d:59:84:96:cc:9c:4f:32:
78:e5:e4:1a:b0:3e:e2:da:db:2f:69:0d:ac:1f:8b:
eb:6a:74:26:71:e4:24:f1:e5:a5:2a:3b:ff:85:20:
20:17:e6:19:5b:89:b2:23:88:f6:46:60:0e:a6:f1:
34:4b:30:32:fd:29:8e:7b:d0:ae:b1:1e:79:e5:44:
e6:1c:cb:89:84:37:a9:64:25:41:75:2d:32:4d:84:
cc:a8:b1:e6:ab:ba:0a:2a:88:cc:be:70:f6:d5:8b:
a8:b3:f5:e9:a7:7f:a4:13:02:59:7a:da:27:8d:ea:
65:2d:b6:ec:95:22:66:86:0d:0c:0b:75:56:58:b3:
26:c5:49:85:c1:f7:25:ae:c8:a0:4f:bb:32:12:6e:
a0:79:dd:dd:56:60:ce:40:03:72:16:1b:5f:bc:32:
c4:5d:de:a2:ab:b6:22:cc:28:3e:4b:92:b7:ee:33:
62:5c:6c:27:af:ee:f1:8a:4e:3e:77:7e:aa:81:3f:
8b:a1:be:d9:b4:af:9c:2d:da:86:f0:d1:36:2c:64:
71:5b:31:af:84:88:9e:ef:0b:4e:e2:e8:b5:01:d2:
d4:df:4e:2a:9a:87:85:9d:c6:d9:1e:42:00:6b:98:
43:9d:76:04:57:42:74:4a:2f:8a:3b:7e:6f:c5:25:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:01:AA:0F:EB:2E:B9:45:18:9B:EA:99:DA:CF:FE:39:E8:A0:63
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/tKgBqg_rLrlFGJvqmdrP_jnooGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.62.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d0:e0:e3:06:b0:0c:a3:df:9b:c1:7b:5e:9d:d3:d5:dd:1c:
5a:11:0c:10:a9:31:64:44:66:87:68:18:8c:33:22:3c:14:05:
1d:a3:cd:26:ad:fb:16:0f:64:6c:28:e7:2f:43:a8:40:22:1b:
28:dc:fb:87:6d:1c:cc:ef:fb:b0:9f:85:24:36:13:a8:05:68:
06:dc:53:91:2b:9d:08:0a:53:4a:cc:ba:e7:f0:eb:e0:50:66:
a8:85:b8:57:3a:5e:be:84:00:45:e0:2e:e3:44:5d:99:02:1b:
9b:f9:ff:6e:f0:4d:20:54:81:d5:fe:de:76:91:6d:98:cd:41:
5f:76:74:6c:51:5d:8f:60:41:3a:a7:74:72:e7:7c:01:fe:df:
90:61:37:2b:e9:93:d1:d0:cc:7d:a4:d0:fe:72:91:75:5a:97:
93:97:c4:0a:e8:81:67:17:f4:92:e3:f4:1f:6e:ee:3f:ec:ea:
62:b4:3c:9e:3a:21:0f:27:bb:0c:d0:1d:53:9e:f6:99:83:50:
5b:26:e1:fa:67:3b:4d:8a:2c:14:73:4c:85:6a:53:a7:80:70:
75:f4:26:de:c0:88:42:34:33:73:4b:dc:3e:2d:1a:fb:68:01:
c4:32:97:c0:db:a5:b0:c3:8a:e9:69:e7:16:5e:a0:9e:8c:61:
b0:28:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:34 2025 by rpki-client