Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa
File: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (raw, json)
Hash identifier: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=
Subject key identifier: 97:87:82:0B:24:1B:AA:79:8D:69:6C:C2:B0:EF:82:4C:76:89:2C:14
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01942520807D20B1719B8EF431D048A58999
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa
Signing time: Thu 02 Jan 2025 03:47:54 +0000
ROA not before: Thu 02 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216235
IP address blocks: 84.47.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:80:7d:20:b1:71:9b:8e:f4:31:d0:48:a5:89:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9787820b241baa798d696cc2b0ef824c76892c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:62:a0:59:2a:55:19:d3:c1:b3:0d:c8:9d:
9f:72:5e:e2:e1:a7:47:c6:6a:20:ee:78:1e:f6:16:
50:df:53:c8:06:91:e6:64:a6:c2:d5:c1:4e:f3:2c:
18:a3:f1:21:f3:eb:62:aa:e3:4e:d0:c9:25:7f:5c:
12:df:62:e7:6c:00:ea:8b:72:d7:1c:99:98:66:ec:
ae:cf:0d:9c:f8:6e:94:14:44:f8:91:cb:59:b0:29:
fa:31:8e:b3:2f:cb:e7:3b:90:44:bd:96:8f:f3:a9:
7d:fd:c0:bf:d9:65:d7:c6:5f:6c:b0:4f:6a:e2:5b:
ee:6a:af:7d:82:98:0d:d6:6a:59:09:0b:09:ed:19:
07:6e:ea:ea:a1:04:b8:da:0a:2d:43:b8:74:4c:86:
81:77:8e:8e:58:8a:26:51:0c:d0:18:0e:18:62:a9:
c9:f9:78:04:c7:e7:a5:4c:99:0b:7e:24:2a:48:f4:
39:e7:99:76:c5:d2:82:d2:2d:4e:6a:67:bb:68:71:
d1:a9:72:01:58:d9:32:13:64:0b:26:56:1d:56:f6:
51:d7:51:64:86:16:2d:85:f3:58:54:9f:c7:d3:96:
c4:b2:b5:e0:93:e9:94:37:c8:ab:85:f7:a2:41:8d:
42:b7:97:c9:98:f6:38:5c:ed:cc:4f:cc:17:15:0f:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:82:0B:24:1B:AA:79:8D:69:6C:C2:B0:EF:82:4C:76:89:2C:14
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.172.0/24
Signature Algorithm: sha256WithRSAEncryption
18:88:dd:61:8f:6a:34:52:53:55:0a:41:a4:a4:34:a3:c3:89:
51:37:11:fd:a7:40:89:95:0e:f0:6b:f1:0c:02:b1:8f:9c:60:
61:78:78:6f:85:63:f9:d2:3f:41:ec:e3:3a:d9:7a:0e:06:86:
e9:f4:5a:61:f1:9b:5a:aa:3a:16:21:09:22:40:c1:b9:e1:47:
36:06:a4:4d:79:3b:7a:1f:57:34:dc:7f:c6:87:8e:23:63:e3:
5e:98:df:d3:e9:ee:39:cf:c9:f1:6d:1b:80:b1:41:2a:cb:5d:
65:3f:12:b5:cc:9e:4d:79:d2:95:f6:08:7c:25:45:77:e3:96:
bd:e4:ac:13:61:77:11:6a:29:2a:32:2e:17:c5:d0:a9:47:69:
96:c9:03:70:ab:2d:9d:d0:8d:51:ff:fd:b0:70:92:62:4c:31:
26:67:e9:b2:9d:ca:cd:4e:e1:d7:76:1f:65:d0:ff:fd:fb:f4:
be:e1:b1:44:30:42:38:8e:b3:61:43:fe:5b:05:41:b3:1c:fc:
b5:e2:29:ae:dd:3c:af:39:ae:b4:bc:c3:81:73:88:27:f5:ce:
ad:2f:dc:bf:26:7b:0f:80:a8:a9:dc:90:6a:fd:b4:0b:5c:ba:
c5:ae:ff:2b:c9:51:a4:fc:ac:d9:67:91:07:77:e2:12:56:df:
ca:ff:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:05 2025 by rpki-client