Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/28Clr4Ex1l2uqo6qlmoWgDRx4JU.roa
File: 28Clr4Ex1l2uqo6qlmoWgDRx4JU.roa (raw, json)
Hash identifier: idGohMKsNgyo0RBS8sMY69MlW8nQfQuAaP7Q0HBe0uM=
Subject key identifier: DB:C0:A5:AF:81:31:D6:5D:AE:AA:8E:AA:96:6A:16:80:34:71:E0:95
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 019428270F1B59EDF45E2C58FC4D6D3A45AF
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/28Clr4Ex1l2uqo6qlmoWgDRx4JU.roa
Signing time: Thu 02 Jan 2025 17:53:55 +0000
ROA not before: Thu 02 Jan 2025 17:53:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205984
IP address blocks: 84.246.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:0f:1b:59:ed:f4:5e:2c:58:fc:4d:6d:3a:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jan 2 17:53:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbc0a5af8131d65daeaa8eaa966a16803471e095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ef:5e:c4:f1:ea:f3:66:e3:4b:ed:1d:d5:24:
a9:b3:2f:4a:1e:04:f1:2a:0f:cf:f4:07:93:40:32:
c8:6f:0e:0f:64:8d:27:32:61:65:9b:da:4f:1f:e3:
1e:b9:d0:32:aa:89:66:30:ec:d6:64:84:db:b4:1c:
4d:14:47:9f:e1:ea:4c:b5:fa:78:12:97:4a:d8:3c:
f5:35:b9:69:e7:ba:ae:cd:74:d2:b0:5e:2f:a0:14:
85:48:b9:e1:ab:98:b8:cb:ad:22:45:57:6b:08:c4:
98:ad:e2:6b:d2:2a:59:e1:8f:4b:de:7c:c9:f1:4b:
79:b6:c2:99:07:f7:21:22:77:b5:32:7c:73:9c:fc:
e8:67:d1:14:9e:19:f6:cd:8b:aa:b8:07:d2:4c:3a:
7e:e3:56:02:a1:22:b2:14:a6:b2:c5:94:ec:8e:11:
07:57:b3:e7:a0:cd:d3:05:cd:0f:96:58:dc:d5:fc:
ae:6a:68:0e:9c:5c:8e:05:a8:9c:54:92:97:2b:dc:
4d:82:64:45:2b:9f:38:eb:72:aa:27:d8:26:a1:c1:
bb:38:ff:58:16:a2:20:77:24:5f:e5:55:0f:8e:7f:
39:ad:d3:f7:f9:b1:50:e6:9b:79:8a:2b:3e:af:35:
ad:86:c5:62:8d:eb:51:c5:f4:59:1e:c1:81:b7:d4:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C0:A5:AF:81:31:D6:5D:AE:AA:8E:AA:96:6A:16:80:34:71:E0:95
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/28Clr4Ex1l2uqo6qlmoWgDRx4JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:00:81:d5:6f:4d:bc:37:40:1e:ee:66:5b:24:14:c5:59:1e:
0a:c6:1c:08:e8:da:cd:d8:b3:f4:5a:34:0b:75:26:e2:09:0b:
fd:59:b6:e8:e9:90:51:f6:9a:98:ea:bf:f9:09:8d:92:01:29:
87:ea:02:be:ce:6c:82:a2:68:7e:30:cf:05:0a:49:37:68:3a:
66:21:b7:6c:19:64:56:d3:bb:2c:58:c6:6b:1f:b9:3d:19:7c:
b3:5e:4a:01:97:49:7c:c3:e6:34:da:ce:db:64:28:0f:6b:d0:
56:e3:e4:0f:03:10:29:9a:af:ee:8c:e1:84:67:54:13:63:1b:
34:a9:84:fa:8a:aa:16:8c:20:e0:b7:8e:57:0f:ea:b8:4e:8b:
f8:c4:31:53:ae:c9:99:18:a6:d1:e2:99:d2:64:88:52:c3:11:
6c:27:39:b1:5d:91:7e:13:6c:98:ee:50:5b:9c:54:3c:9d:a0:
9e:34:52:2f:0a:63:7f:19:f3:54:1c:f8:be:8a:53:d5:45:26:
e5:fd:0d:9c:d9:fa:b3:69:ac:d4:61:c8:e5:51:0a:35:e2:32:
d6:fb:29:69:92:19:de:96:3a:e9:5c:4d:58:30:67:14:6b:5e:
68:d0:ab:9a:ca:05:8e:99:85:53:a5:c8:b0:36:d1:4a:4b:24:
a6:82:b5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:04 2025 by rpki-client