Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kMHgDNH9TXu-UX-kOSEubi3iK_w.roa
File: kMHgDNH9TXu-UX-kOSEubi3iK_w.roa (raw, json)
Hash identifier: UgvMhWz/T+kOQxoEXopZfMQQ/N59klcu3OYPLl05/sc=
Subject key identifier: 90:C1:E0:0C:D1:FD:4D:7B:BE:51:7F:A4:39:21:2E:6E:2D:E2:2B:FC
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B94B3CFD7AF6280D7AB27221A8F1E
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kMHgDNH9TXu-UX-kOSEubi3iK_w.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199380
IP address blocks: 84.232.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:94:b3:cf:d7:af:62:80:d7:ab:27:22:1a:8f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90c1e00cd1fd4d7bbe517fa439212e6e2de22bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:0f:45:ae:ce:71:92:92:e9:38:a3:65:2e:
90:d9:f2:6f:2c:bb:17:0e:16:86:df:26:aa:0a:d8:
ad:01:18:6a:de:54:06:05:32:a2:c1:46:bf:10:77:
35:c4:04:54:e5:b0:7d:7b:76:71:b4:7d:59:ed:7e:
03:54:a2:55:f7:d9:5f:c8:af:71:6c:05:48:96:cd:
13:5b:f3:d2:b1:40:75:e2:88:f8:0f:50:d7:22:d3:
f1:78:cd:3c:d6:10:fd:bb:34:35:b6:af:cb:75:e4:
fa:27:39:6c:51:63:4d:be:31:39:8f:3d:de:36:0a:
4b:f1:a3:e8:e2:2a:20:d4:d4:64:8e:d5:b7:96:93:
a8:83:be:df:93:fc:9d:b6:c3:2c:0a:5c:a5:2e:d2:
c0:95:20:55:b0:a0:e6:83:2b:e9:76:95:c2:24:0b:
a8:3a:6c:a3:65:b2:90:5a:45:70:ef:5e:57:d1:e2:
c7:9d:df:e2:b3:cd:9b:24:8a:aa:06:06:75:49:c2:
cc:1e:93:10:d3:33:a3:44:f9:46:05:8f:94:ed:b8:
99:2d:8a:04:aa:dc:8a:bc:51:4a:0c:ec:30:6e:82:
22:df:98:e4:4f:44:4f:64:4c:59:ce:e2:48:60:9a:
76:6b:43:08:dd:93:99:8a:a3:25:1e:41:df:7c:2d:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C1:E0:0C:D1:FD:4D:7B:BE:51:7F:A4:39:21:2E:6E:2D:E2:2B:FC
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/kMHgDNH9TXu-UX-kOSEubi3iK_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.98.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e9:09:ae:48:8a:42:44:9a:bd:61:48:e7:7c:7a:41:63:fe:
ff:9f:92:7a:8a:b6:52:05:b6:3a:48:38:19:18:7f:d8:89:5a:
79:49:37:2a:c4:91:4a:c4:be:3a:1b:4e:fd:92:4a:29:be:49:
3a:8e:d4:8f:54:2d:ae:da:f0:ea:5f:0f:65:28:15:32:79:e0:
75:30:77:08:94:a4:c0:34:13:07:a2:bc:d4:d3:bb:38:1c:92:
00:33:d9:1f:71:aa:33:a5:61:ac:45:33:03:eb:f8:9f:fb:86:
cf:a8:fe:d1:d5:ff:23:18:6e:b4:cf:55:d4:d9:ab:11:80:62:
4e:96:5c:fb:13:1d:d4:d0:37:48:33:75:1e:26:ac:e3:2b:cc:
66:82:cc:16:5f:07:3d:3d:99:47:e7:ed:3a:c9:d5:bd:86:23:
4d:61:a0:5e:7e:89:e5:66:3f:9f:a0:09:6f:21:13:10:ad:14:
2c:f8:3a:ad:b3:fd:b2:c3:a7:bb:e6:3c:95:72:08:1b:83:d7:
74:f6:22:68:1e:9b:1e:6c:3b:0a:58:a7:f7:2c:e3:86:c0:ea:
ea:78:75:4c:64:a2:c5:14:45:93:98:b1:d6:ae:4e:bb:16:17:
72:c2:50:9e:ff:b6:38:bc:24:20:94:d5:0e:c8:57:b2:bc:1b:
ca:18:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:23 2025 by rpki-client