Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa
File: 9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa (raw, json)
Hash identifier: viMMVl7z3d1MZstaQ+g6rnL64YomgnG0JZZWPIY8by8=
Subject key identifier: F5:04:9A:0C:BC:17:59:DE:70:E9:C9:98:C5:B0:95:A5:9B:12:25:81
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9C03FF71124A240DF6350992CB01
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204741
IP address blocks: 84.232.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9c:03:ff:71:12:4a:24:0d:f6:35:09:92:cb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5049a0cbc1759de70e9c998c5b095a59b122581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:8e:90:00:b6:c3:46:0f:0a:ba:60:b6:e8:
d0:1b:3b:cf:c4:3c:98:72:1b:28:01:2c:c7:7a:80:
6a:d8:2b:6e:e4:c6:ec:1c:bc:95:d0:e7:d3:78:dd:
39:04:f8:ab:eb:e0:d9:42:91:e5:05:93:fb:1b:92:
a6:07:73:db:ab:7b:39:c2:7f:c2:9a:12:70:ff:c7:
cc:99:f9:93:37:7c:1e:56:65:c3:ba:ee:56:be:99:
05:66:5e:3f:df:89:4a:36:56:7b:33:07:fb:cd:ef:
71:f0:b8:62:3d:3d:8b:e1:2d:bf:50:73:a5:a8:73:
dc:d2:d8:bb:9c:d5:ab:ef:9d:0c:50:a9:85:11:68:
61:22:f8:44:7c:3c:44:57:2c:d4:be:be:96:37:27:
9e:08:6c:ed:d2:a1:ed:f7:93:6f:47:54:c9:d6:a0:
ad:c3:7b:4f:ed:2b:ef:09:45:84:a1:a4:bb:0d:3e:
3c:41:26:ad:07:78:71:a8:59:90:1f:0b:e4:f3:32:
f2:72:f6:38:a2:a0:ae:9a:e8:8a:56:49:89:91:1b:
2f:6b:d2:a3:4a:da:1f:29:b0:01:88:5f:7c:57:9a:
10:0c:90:fc:11:8d:bf:f1:87:8e:70:a9:52:44:5a:
c1:30:58:1a:5a:72:31:28:0b:54:23:18:9e:44:bf:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:04:9A:0C:BC:17:59:DE:70:E9:C9:98:C5:B0:95:A5:9B:12:25:81
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9QSaDLwXWd5w6cmYxbCVpZsSJYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:97:21:49:ba:77:b8:a6:82:12:6f:a0:f1:54:1f:63:b9:4b:
b7:cc:d6:7b:40:ea:ad:f4:a5:c5:8f:6a:a5:ad:ef:1a:df:ed:
a4:40:4d:53:0e:45:b1:1f:55:2d:71:f8:64:15:fb:07:9b:a0:
f4:3e:e6:be:f4:e4:10:56:f0:32:96:eb:7d:43:60:7c:03:dd:
74:75:2f:7f:a3:3f:e4:a4:f0:d9:b1:fb:a3:61:7e:9f:b4:ff:
c8:dd:2c:dd:f9:8a:3f:69:fc:0b:f6:f5:57:db:42:19:a9:6d:
8d:c8:d4:3e:e9:90:8d:53:56:e2:00:56:8b:1f:06:51:6e:c7:
8a:98:06:b5:96:ab:5c:03:f7:c8:dd:d0:18:32:4c:65:34:23:
d7:7c:ec:20:c4:f5:e1:c9:c8:5f:54:29:2b:b8:ce:3b:e7:84:
70:6d:b7:fe:41:06:fe:69:40:a4:99:08:80:52:3a:41:a8:0a:
bf:b3:88:c5:ad:04:26:ce:73:01:d5:4f:75:c9:0f:01:38:ae:
17:24:41:55:2a:79:b9:eb:d0:04:89:f3:bc:6a:68:22:d1:db:
c4:81:9e:b9:11:da:6a:ce:ed:22:fd:3d:03:71:f6:5b:19:d3:
37:b0:73:29:a0:12:d4:c2:6b:94:85:52:86:b7:e5:f4:9a:55:
0d:d9:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:25 2025 by rpki-client