Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/0kdqhMgoXMqa2bGg6WCouazRWoA.roa
File: 0kdqhMgoXMqa2bGg6WCouazRWoA.roa (raw, json)
Hash identifier: m8tqnKE1kxATVgNxV4xo3K5SETCSivJyawzzyZu0T8M=
Subject key identifier: D2:47:6A:84:C8:28:5C:CA:9A:D9:B1:A0:E9:60:A8:B9:AC:D1:5A:80
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 019420D65BF78B0F5AADCACA27129E462B5D
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/0kdqhMgoXMqa2bGg6WCouazRWoA.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201486
IP address blocks: 84.47.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5b:f7:8b:0f:5a:ad:ca:ca:27:12:9e:46:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2476a84c8285cca9ad9b1a0e960a8b9acd15a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:32:d6:f8:66:a7:47:6d:c1:91:d8:a1:f3:
01:cd:30:25:27:54:f8:71:d5:05:08:1c:25:16:c3:
dc:9c:ce:9d:b0:d9:be:2c:c9:e2:fc:ad:3a:55:bb:
0e:c8:8f:80:ad:b6:e8:28:a3:d7:48:dc:09:0e:8b:
e7:cf:1c:e9:36:bd:ec:38:c4:b7:99:2c:b6:5d:41:
ad:2a:70:94:fa:70:8b:6b:4d:df:04:40:04:de:4c:
1b:56:a8:74:80:ea:a9:47:8e:57:f5:01:b2:fb:6b:
34:a1:f3:a4:cc:5f:3b:55:fd:a6:29:7b:3e:89:34:
d7:3e:88:73:d3:83:70:e2:c6:10:63:ec:9d:53:87:
41:fe:3d:d5:9f:ef:8c:0e:12:1d:a4:cc:40:38:7a:
99:55:cb:7c:b7:35:01:c1:52:d1:f1:49:16:a2:fc:
4d:cd:e5:87:5f:ea:6c:ef:55:8c:9c:0c:8c:94:23:
6b:3b:c9:fb:33:a9:98:93:b5:c6:06:5c:c0:89:02:
10:36:40:4c:4d:fb:e6:d1:71:0b:08:e4:1f:40:68:
f8:ac:5a:21:2e:93:ce:65:e7:42:ef:31:4e:81:5a:
6d:53:f4:c3:13:f2:bf:c0:0d:15:8b:70:6f:36:dc:
4d:0a:eb:0f:64:7b:fd:06:39:ae:0e:25:ec:b7:da:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:6A:84:C8:28:5C:CA:9A:D9:B1:A0:E9:60:A8:B9:AC:D1:5A:80
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/0kdqhMgoXMqa2bGg6WCouazRWoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.189.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e7:4d:3e:9d:ec:f1:48:dc:43:b0:5d:1d:8a:c8:06:c4:f4:
9f:3e:86:27:03:21:58:df:ec:4e:ce:5a:dc:29:28:61:80:33:
15:43:82:8a:3f:b5:d0:37:76:1b:5e:5b:86:b8:c7:66:6f:f0:
2a:5c:99:a6:d2:b6:c2:1c:54:1c:52:8d:55:69:fd:78:3a:a5:
b5:6a:55:b0:72:26:90:53:ea:f0:8f:85:b0:18:c6:71:ef:2a:
43:c4:47:68:f4:0c:80:28:5c:8e:c4:57:64:be:6b:75:8f:4d:
a9:3e:1f:52:43:f9:71:f8:bf:58:b1:3a:f5:38:19:22:6b:65:
6f:1a:30:e0:77:56:35:55:cf:44:c9:f1:60:8c:a3:47:a6:30:
69:79:09:3c:53:d0:90:22:ed:9b:61:c7:59:84:02:87:cc:0b:
ea:5a:46:78:71:a0:24:e0:a3:d9:f1:bd:fc:a9:2f:aa:68:ab:
cc:3d:18:8e:e2:9a:45:7e:37:33:a2:c9:6d:91:82:2e:b7:23:
e4:8c:fb:9b:c3:84:bc:55:44:8f:e2:77:60:58:7c:1f:12:39:
65:98:02:0b:31:6b:39:1e:c5:da:11:10:d5:73:c7:05:6f:d9:
b5:21:08:5d:e2:98:a3:3f:e0:8d:b2:ad:c4:da:15:a2:a9:75:
b1:4c:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:11 2025 by rpki-client