Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/GZZZd0E2JzKq81KcLf_dhPoCme8.roa
File: GZZZd0E2JzKq81KcLf_dhPoCme8.roa (raw, json)
Hash identifier: QQqLRpOdKUXqcvSJDtZabDjSLQ4Foo6pXlieIzExa/U=
Subject key identifier: 19:96:59:77:41:36:27:32:AA:F3:52:9C:2D:FF:DD:84:FA:02:99:EF
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274802572A45C35645F2F9617929AF18
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/GZZZd0E2JzKq81KcLf_dhPoCme8.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206410
IP address blocks: 84.238.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:02:57:2a:45:c3:56:45:f2:f9:61:79:29:af:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1996597741362732aaf3529c2dffdd84fa0299ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:68:87:2a:af:50:16:54:93:fd:dd:23:18:
5a:5e:97:10:a4:4d:f9:a9:d0:c3:21:ce:c1:e2:c3:
2a:37:7a:d5:98:9a:52:df:da:64:f7:5c:31:92:01:
e9:17:6e:78:24:ca:27:d1:d0:73:a4:21:ae:7e:b8:
e2:78:f9:d0:9c:10:ba:45:04:58:eb:1a:80:72:87:
64:c2:e4:71:03:1f:f3:94:40:07:db:1a:1a:e8:77:
ef:be:bd:25:68:de:f3:29:e9:9b:7f:9d:d5:c2:bd:
7c:b2:e1:30:34:6f:a3:53:ed:b8:04:a5:1b:64:5d:
c7:eb:08:22:be:ad:6a:87:f4:84:f3:78:11:35:ef:
48:f0:8c:bf:05:8d:bb:73:51:81:13:95:bd:b0:7b:
e6:37:cd:0e:db:88:6f:44:4c:a5:c9:e9:e6:fe:64:
e1:f8:6e:de:bb:ba:93:95:b1:d0:8b:eb:83:f9:9d:
cb:bd:ff:2d:60:37:93:06:02:fd:1b:60:07:7b:24:
81:46:60:50:ae:a1:1b:89:fb:af:15:72:a4:de:78:
00:9a:de:45:d9:a2:29:2b:ff:e0:c3:a4:f8:4a:73:
74:4f:f7:8a:70:17:53:b2:e5:42:55:54:0d:d1:86:
b1:f2:d2:dd:30:51:e0:67:95:e8:fc:2d:22:d9:1f:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:59:77:41:36:27:32:AA:F3:52:9C:2D:FF:DD:84:FA:02:99:EF
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/GZZZd0E2JzKq81KcLf_dhPoCme8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.238.165.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0a:aa:f1:46:22:cf:98:09:50:15:65:49:e3:ca:a8:00:ef:
7c:87:c9:9c:6e:14:7e:a8:9f:cf:04:aa:83:7f:1d:e2:ef:31:
57:5f:28:de:b5:d1:a8:3f:a7:6a:dd:24:ad:32:65:ca:3b:8f:
0b:0b:79:63:1a:5c:5e:69:b6:55:c5:69:a0:f9:13:29:7b:43:
6d:b8:5b:2e:bb:bc:2d:0d:5c:ce:dc:4e:68:2f:57:c5:c2:c0:
b6:2b:24:63:57:71:83:79:30:10:a0:3e:ba:dd:99:e6:79:57:
33:4a:77:96:87:c8:8d:5d:64:11:4c:b5:f0:35:b5:57:f2:7b:
28:56:c0:21:a5:0d:0d:f5:15:53:c8:32:f5:1b:4b:ba:d3:49:
f7:99:fd:f5:9e:07:89:3e:f4:5c:5b:ef:2a:f5:92:2b:a7:d8:
de:85:b7:da:4b:19:9b:48:35:3d:31:35:62:36:2a:99:6f:34:
c8:74:83:b1:36:89:61:b1:9f:46:15:fc:28:0c:6b:4a:99:f7:
d9:b7:78:a7:cb:b0:9a:83:8b:0a:30:3b:ed:3c:a5:f3:ad:30:
ff:71:8c:65:89:e5:d6:d7:8c:96:ca:9b:9c:f5:15:32:74:c4:
98:23:d9:ef:05:b0:ff:b9:6c:8a:f3:02:31:1a:39:a0:0d:01:
5e:f6:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:15 2025 by rpki-client