Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/lW8QARrIK7UIW4M3JIEGPijJ8cI.roa
File: lW8QARrIK7UIW4M3JIEGPijJ8cI.roa (raw, json)
Hash identifier: zRjbJkcUZy131TXsOeG5uokZGrH6fU95s3m8Z3kzb+Q=
Subject key identifier: 95:6F:10:01:1A:C8:2B:B5:08:5B:83:37:24:81:06:3E:28:C9:F1:C2
Certificate issuer: /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial: 0194221FB2AA8AFA7271596D35E5E933DD1D
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/lW8QARrIK7UIW4M3JIEGPijJ8cI.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208097
IP address blocks: 84.38.245.0/24 maxlen: 24
192.122.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b2:aa:8a:fa:72:71:59:6d:35:e5:e9:33:dd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956f10011ac82bb5085b83372481063e28c9f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:f0:67:0d:67:84:ab:23:7d:91:0c:d0:78:
03:6b:81:cf:e8:c3:f9:ea:00:33:25:0a:c6:a2:f1:
cb:c2:f1:22:df:e8:13:c1:e6:60:2b:09:ae:3d:56:
bd:e4:62:25:e0:c1:ae:a4:5f:61:df:57:5e:89:0b:
6c:04:0e:bc:ee:a2:37:b2:30:02:ee:84:78:66:81:
0a:08:1d:b4:8a:4e:a0:58:f5:ad:9c:6f:99:b4:8c:
08:f5:57:c0:7d:39:df:88:5c:0b:5f:6b:1c:51:97:
bd:b3:14:16:02:db:1d:a9:83:19:6f:f4:2d:e1:39:
64:9e:4d:84:8f:24:98:ed:09:16:5a:4b:b7:30:b5:
16:de:80:3b:03:19:db:a1:05:b6:fe:6f:7f:4d:8a:
0f:29:19:c1:7e:c6:56:ca:48:a0:4d:dc:21:d5:73:
8f:1a:e1:b1:38:87:50:f1:c2:77:38:7d:76:41:a3:
df:d3:18:07:15:4c:9f:48:6d:7d:02:ce:53:f1:19:
33:af:5c:d4:80:91:a9:ff:31:32:22:a7:63:ca:11:
a8:ca:4e:44:0c:47:ab:46:ca:cd:18:76:43:27:23:
b6:42:05:18:e1:c6:69:83:78:4c:a0:a2:2a:21:2d:
3d:8c:bb:b7:1e:ab:82:ed:2f:c7:f5:eb:dd:ca:69:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:10:01:1A:C8:2B:B5:08:5B:83:37:24:81:06:3E:28:C9:F1:C2
X509v3 Authority Key Identifier:
keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/lW8QARrIK7UIW4M3JIEGPijJ8cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.245.0/24
192.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1d:89:64:61:ef:0b:2e:f3:41:d8:46:e2:42:02:0d:d6:a3:
f8:74:a5:97:cc:30:14:a0:f2:49:d4:28:b2:f5:31:b3:89:00:
6e:3f:6a:4d:d7:74:23:f2:67:ff:57:53:cd:7f:fd:26:9c:7b:
9e:52:1d:8e:3a:59:47:19:c7:39:70:37:a4:63:ef:92:ec:a2:
70:5a:4e:66:11:05:ce:36:4c:42:1d:71:77:c4:7f:b6:f3:da:
ab:92:c4:f3:f4:16:28:9a:c6:87:85:68:d8:8b:b3:56:ad:29:
22:72:f5:46:66:15:99:64:42:11:a4:16:2f:dd:97:8a:c5:9c:
d2:be:2d:be:77:a6:e3:06:45:c8:31:e7:57:fa:35:5c:9c:17:
36:bd:0a:3b:d8:84:23:0b:43:44:97:9e:3d:d1:b7:60:26:ad:
53:7e:d0:cd:30:61:36:cf:d8:d1:ed:d1:41:2c:12:ce:5b:c9:
d3:31:60:7e:27:23:b2:bd:69:6f:e4:b2:10:5e:87:f4:91:a7:
ab:32:c4:c7:df:45:a5:99:e8:99:d0:41:1a:5f:1b:19:7c:c2:
52:f0:bf:2b:d5:da:6d:ed:78:40:ce:95:3f:c1:30:a3:63:52:
a0:7d:e1:86:e7:6a:c3:2e:fa:ee:17:99:16:80:55:2a:4f:5e:
7f:df:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:21 2025 by rpki-client