Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/wKGyrrFyaBqNrXVfIn21-Aht03M.roa
File: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (raw, json)
Hash identifier: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=
Subject key identifier: C0:A1:B2:AE:B1:72:68:1A:8D:AD:75:5F:22:7D:B5:F8:08:6D:D3:73
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019421B1DEA60C087E64B79EB2AB8683A827
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/wKGyrrFyaBqNrXVfIn21-Aht03M.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5541
IP address blocks: 84.239.0.0/22 maxlen: 22
84.239.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:de:a6:0c:08:7e:64:b7:9e:b2:ab:86:83:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0a1b2aeb172681a8dad755f227db5f8086dd373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:9c:34:70:84:74:45:e0:d8:3a:6e:14:ea:
80:a7:e7:cf:f3:54:4d:76:80:76:d8:e9:be:a9:cc:
e2:c4:22:47:e9:bc:80:cc:84:9a:02:e0:97:92:73:
41:7b:a9:9a:85:84:94:b2:d5:7d:6f:7d:b8:63:c7:
7f:8f:de:28:33:93:cd:7f:4d:7d:9b:a5:f3:bc:50:
6d:d2:8e:2d:4c:79:e7:27:3a:12:8f:45:cd:e6:13:
c5:96:0f:b5:0f:f9:32:53:94:68:a9:50:db:14:e9:
f4:68:f8:e5:b3:4a:b7:b8:a5:be:a0:76:ab:f1:f7:
81:ad:b6:7f:d7:4b:24:ad:32:7e:e9:0d:48:49:df:
aa:02:d9:78:bd:d0:ba:42:9f:69:50:cd:37:7c:dc:
9d:88:fb:1c:7b:f9:c8:01:41:13:2a:96:c0:2f:5d:
21:7b:6f:e1:f5:dc:78:dc:72:b2:c5:a1:ec:0c:ed:
1c:88:50:8c:f9:3b:80:6f:80:6e:ee:79:7f:43:37:
45:4e:05:69:7c:8e:5f:70:74:94:83:45:96:10:0a:
a9:07:d7:c9:04:9b:67:ae:d2:80:d3:5a:24:06:85:
62:7e:d1:03:3f:3f:15:40:2e:3f:ff:50:da:e7:2a:
54:63:57:48:2e:f2:8c:77:e4:8b:43:86:40:0a:40:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:B2:AE:B1:72:68:1A:8D:AD:75:5F:22:7D:B5:F8:08:6D:D3:73
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/wKGyrrFyaBqNrXVfIn21-Aht03M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.0.0/22
84.239.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b1:5b:0f:60:a3:fa:80:cc:3a:22:d4:81:1d:a6:d1:57:b7:
f9:42:90:bf:4e:87:3f:0d:37:72:42:91:76:b1:c4:10:e3:55:
8a:dc:15:1c:d5:41:4b:b1:95:38:7c:a0:fc:22:f5:44:4d:1e:
20:80:58:c7:6f:cf:ae:ac:c5:be:7b:8a:3a:4a:4e:b4:f2:fe:
ae:dd:1d:c3:ef:8c:20:4d:04:27:09:1e:c3:a5:48:aa:e6:11:
55:9d:86:a9:b0:c3:b1:dc:04:6a:c3:d6:00:4a:e0:9c:df:e2:
10:83:89:67:98:7c:2c:63:45:70:3d:b7:51:86:9e:87:75:6f:
3c:b8:c4:c4:12:eb:0a:04:60:cd:65:9d:1d:a2:dd:4f:4f:35:
9f:29:f8:52:46:42:fa:0f:78:cd:57:4c:33:d6:e8:a5:65:d7:
75:9e:fe:d7:95:95:01:49:a3:48:b1:9f:01:aa:80:3f:bd:de:
51:ce:f9:54:bf:df:9b:40:43:95:50:4f:cc:2d:ef:f4:8b:fb:
95:8a:4e:d8:7c:b1:a8:88:9f:e8:2a:b9:ca:cd:49:4d:49:be:
22:4f:8d:f6:e9:68:56:8d:4b:84:0b:8c:20:92:50:80:0d:05:
18:8f:7f:6a:f6:31:f9:1a:bc:a0:0b:ce:de:e4:a7:44:6b:ff:
a6:9f:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:54 2025 by rpki-client