Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa
File: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (raw, json)
Hash identifier: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=
Subject key identifier: D4:83:70:B9:65:3E:05:85:CB:E9:EC:38:69:3F:9A:D6:95:C4:6E:B4
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 0194236A3F5317FFBFA6462776CBC264E965
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33941
IP address blocks: 84.21.128.0/19 maxlen: 19
84.21.136.0/22 maxlen: 22
84.21.142.0/23 maxlen: 23
84.21.145.0/24 maxlen: 24
84.21.146.0/23 maxlen: 23
84.21.150.0/23 maxlen: 23
84.21.150.0/24 maxlen: 24
84.21.151.0/24 maxlen: 24
84.21.152.0/23 maxlen: 23
84.21.152.0/24 maxlen: 24
84.21.153.0/24 maxlen: 24
2a01:570::/32 maxlen: 32
2a01:570:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:53:17:ff:bf:a6:46:27:76:cb:c2:64:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d48370b9653e0585cbe9ec38693f9ad695c46eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:f8:c8:30:55:7c:93:5d:3e:f4:87:bd:c3:
8b:ac:52:b2:bb:d5:b3:cb:cc:80:a7:f2:c0:b1:e3:
b4:6e:3f:b2:fa:b4:56:4d:a3:ba:0b:c7:a1:c6:88:
12:e5:1c:22:b9:8a:68:6a:0d:22:54:dd:d7:cf:fd:
c9:e4:6d:42:c4:31:10:7e:ae:35:8a:00:23:67:4a:
15:39:04:18:fd:f1:f4:79:66:cd:ff:69:ab:d4:96:
05:d0:d4:b7:c9:b8:0f:cb:3f:1e:0f:27:b9:7d:12:
60:3e:07:6d:b7:94:32:ea:ec:e5:77:df:ad:9a:29:
d5:d8:98:aa:e7:4f:bd:ba:71:07:89:8d:aa:84:53:
19:30:ad:15:8a:90:8f:32:e9:fc:94:6c:8d:73:9b:
d6:37:0b:31:d5:11:92:7b:af:b0:6b:5e:55:ac:52:
0a:59:b7:3a:ce:b8:1d:f6:cd:03:4e:4d:fd:45:22:
09:71:63:5f:ef:73:5d:fe:d1:02:a3:30:4c:29:d0:
42:51:c6:20:c5:59:0a:6f:fc:48:42:0b:2f:fd:3b:
c7:54:e5:19:ce:f8:7f:f7:8b:54:8b:94:a1:3a:7f:
41:a9:f9:1f:37:33:13:6c:66:cc:70:99:fb:91:76:
9d:e9:0d:a2:4c:bf:68:89:bf:8f:25:97:78:c2:59:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:70:B9:65:3E:05:85:CB:E9:EC:38:69:3F:9A:D6:95:C4:6E:B4
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.128.0/19
IPv6:
2a01:570::/32
Signature Algorithm: sha256WithRSAEncryption
ab:ef:fc:b1:bf:3e:7b:c6:dd:70:f8:08:4a:58:48:d7:02:e5:
40:89:92:4c:50:35:0e:10:e3:4b:36:8f:60:ae:74:52:ce:ad:
a1:80:cb:e6:e4:50:72:aa:2e:a9:ef:b1:14:97:c5:dd:ad:74:
a1:ba:5e:d3:88:92:90:5b:fc:4a:b3:88:fe:a0:0d:25:c0:69:
1d:ae:7b:ed:81:2b:f7:08:b9:2c:50:52:48:27:d8:ff:b6:15:
c1:ce:33:22:7d:d3:be:2f:82:f8:66:b1:e0:2b:ed:06:1d:d8:
b2:ed:e3:05:0e:bd:a2:1f:08:a1:60:02:e3:f1:32:76:79:08:
3a:b0:b6:92:25:9c:23:74:29:d4:25:b7:f5:62:cf:8c:1d:8d:
e5:02:ae:33:77:f7:f9:3d:65:0d:44:77:00:85:52:6b:e4:ee:
2d:40:32:b1:15:9a:f4:a7:bf:49:99:88:18:25:44:8f:0b:55:
62:63:72:6b:99:46:d9:64:65:49:07:b1:60:25:83:80:e2:0d:
89:cb:78:8b:6a:c7:77:2f:c1:1e:71:66:84:c8:2f:7b:87:0f:
fd:cf:2e:52:08:38:97:59:e0:87:97:4f:77:10:51:10:b6:91:
ae:2a:9a:e4:c8:45:14:74:f5:c2:ba:31:0e:8f:94:f6:6d:6a:
4c:2c:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:24 2025 by rpki-client