Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vw2Xpj9qJjijOdc7ppbvMWEnU5I.roa
File: vw2Xpj9qJjijOdc7ppbvMWEnU5I.roa (raw, json)
Hash identifier: 4qEzS+G9Z7FIkGxWUchjyf7UCUqB91w4TOtVWWl8foo=
Subject key identifier: BF:0D:97:A6:3F:6A:26:38:A3:39:D7:3B:A6:96:EF:31:61:27:53:92
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C828808C7B00182685E8A9F4F5232
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vw2Xpj9qJjijOdc7ppbvMWEnU5I.roa
Signing time: Thu 02 Jan 2025 09:50:32 +0000
ROA not before: Thu 02 Jan 2025 09:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61992
IP address blocks: 84.42.118.0/24 maxlen: 24
84.42.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:82:88:08:c7:b0:01:82:68:5e:8a:9f:4f:52:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf0d97a63f6a2638a339d73ba696ef3161275392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:46:8f:2d:75:2e:06:5a:60:ed:03:a4:77:
75:8d:8c:b5:1e:c9:87:45:67:b6:59:37:d0:1c:15:
1a:09:7a:a8:7f:d2:35:6a:bd:33:d7:9d:d1:f4:f4:
4c:b0:fa:54:4e:e3:8d:83:bc:d0:9e:5c:ff:82:5f:
60:4d:a0:89:89:40:44:a6:d4:d2:d2:bb:f6:60:3b:
e1:47:8b:0d:77:5d:70:ba:17:bd:1c:04:4d:3d:a6:
a6:2a:58:18:60:d4:45:b3:d0:9c:75:f4:f3:e2:81:
42:38:eb:80:d7:ba:b6:59:5c:3e:b3:3e:42:13:30:
3d:d4:8d:18:41:fa:ce:27:58:02:61:c4:33:36:a8:
d5:78:c1:bc:ed:39:fb:32:df:e0:15:34:41:0e:32:
a2:ea:a0:e8:65:7b:41:c3:da:c2:74:9b:c1:46:c5:
13:ce:27:7e:ff:a0:ee:ee:67:8d:11:a7:ec:43:4d:
4f:fa:3c:a0:9c:21:4b:e5:cf:0e:4e:a4:a0:8f:04:
d7:d7:f5:c8:cb:cd:55:c7:8d:9a:07:05:fa:46:37:
cb:85:c6:8a:5f:10:de:42:ab:5b:0c:55:5d:02:f9:
fa:17:4d:1e:09:77:20:23:63:ee:8e:44:dd:73:b0:
d4:a5:db:d3:1a:08:ef:21:07:1f:23:28:78:b3:73:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0D:97:A6:3F:6A:26:38:A3:39:D7:3B:A6:96:EF:31:61:27:53:92
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vw2Xpj9qJjijOdc7ppbvMWEnU5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.42.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:b9:c1:16:92:87:25:2c:a3:43:5d:46:81:d1:92:a3:8f:ef:
3f:54:02:72:55:53:bf:be:62:28:1d:04:50:fb:ef:3b:26:94:
7a:2c:c7:d5:81:67:64:c7:61:c3:8a:3f:f5:15:eb:13:4b:71:
a3:74:9e:39:0d:3d:db:33:3c:25:5f:71:dc:a2:1f:bd:06:1f:
e8:f7:a3:6a:c6:24:84:10:a3:cc:26:01:b8:0f:fa:0d:6d:cf:
fe:53:26:de:06:60:42:c9:4b:67:a0:a1:6b:a2:ae:f8:32:42:
88:7c:87:fd:02:e3:ff:dd:25:e3:af:a0:d7:32:59:55:de:70:
82:dc:0b:c8:17:7a:aa:0a:c5:99:bb:35:cd:d1:75:1f:e1:a0:
70:94:84:80:f9:28:37:9b:89:06:af:f2:40:a7:90:fb:cc:4e:
81:5a:4d:32:41:17:19:bb:18:61:20:7e:15:22:80:69:76:db:
1b:fd:2c:93:0a:97:b4:f1:ac:44:5d:8d:f6:96:a7:76:8b:e3:
83:db:39:56:75:80:d3:a9:b0:ec:f6:d2:08:b9:74:b5:ba:5a:
53:f5:dd:df:d4:0b:20:48:ca:d7:d5:da:ca:7b:16:4e:24:38:
96:d5:48:c8:93:1a:49:f6:74:d9:f6:f1:3f:90:87:07:6a:56:
82:2d:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:29 2025 by rpki-client