Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/vZn07E66o6wHhMCeWvyGAyQjzcM.roa
File: vZn07E66o6wHhMCeWvyGAyQjzcM.roa (raw, json)
Hash identifier: tp2dIgsdcNQkWq0TE+1+pnOKLYDrms2wcDhUA1cmnDE=
Subject key identifier: BD:99:F4:EC:4E:BA:A3:AC:07:84:C0:9E:5A:FC:86:03:24:23:CD:C3
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F3A1F742B15109BB141CF56FEA91
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/vZn07E66o6wHhMCeWvyGAyQjzcM.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59620
IP address blocks: 90.154.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f3:a1:f7:42:b1:51:09:bb:14:1c:f5:6f:ea:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd99f4ec4ebaa3ac0784c09e5afc86032423cdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:2c:ce:31:77:ed:fc:14:47:4f:b6:e2:50:
bb:ac:63:67:d7:04:31:de:a9:87:0d:04:2b:b3:13:
bb:b1:dc:b7:87:05:29:ff:47:fd:b8:b5:1e:6e:08:
7f:fb:8c:1f:4e:ca:2b:69:73:ff:10:21:97:85:04:
f9:c0:a7:82:b4:2f:34:7e:22:c9:b6:02:00:4a:c3:
aa:8e:0e:84:a1:dd:14:01:6e:1f:1a:79:13:8d:39:
97:36:8d:90:31:ae:be:2c:a5:06:04:c8:14:79:c5:
ef:7e:fc:68:72:ad:54:4d:8d:d7:a2:4f:93:d1:87:
a3:92:ac:3e:6b:d6:73:9d:8c:84:76:7f:77:ba:48:
f6:0f:e3:20:de:f8:1f:a5:36:48:b7:06:ae:e4:fb:
a1:2d:60:9c:e6:36:57:e0:72:29:62:a6:bb:b7:02:
7c:00:50:84:77:ff:35:a9:e0:5a:26:72:57:12:2b:
21:e5:be:07:c0:15:b2:b3:07:c4:d8:3e:c8:c0:b6:
63:47:fb:08:47:75:aa:0e:ea:41:76:5a:43:bb:a0:
e4:43:21:bb:0f:87:39:84:18:17:7d:d3:a3:b9:1a:
5b:4c:46:97:98:51:dd:2b:c3:5a:b4:f6:bb:b9:04:
b3:6a:72:0a:a5:ca:2e:ef:0f:56:9e:96:42:c1:9e:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:F4:EC:4E:BA:A3:AC:07:84:C0:9E:5A:FC:86:03:24:23:CD:C3
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/vZn07E66o6wHhMCeWvyGAyQjzcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.154.224.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4e:c8:8f:19:78:3d:7e:1e:45:46:4a:99:b6:48:87:4a:3d:
c9:e0:3a:be:47:ae:93:93:8e:a8:51:ed:e6:c4:ee:ee:a7:d3:
cf:3e:81:cd:3a:11:e5:46:e1:56:7b:5b:c4:02:dc:fa:dd:a8:
c4:d6:56:8c:e0:c1:e4:f0:9e:dd:92:3d:0c:c8:77:94:d3:fa:
fa:a7:bf:33:68:4a:a7:2c:23:99:9c:21:d5:56:b0:40:6b:3e:
41:e6:88:de:3b:e2:f6:da:68:17:05:1b:fb:96:0b:8b:33:af:
92:af:e2:61:b8:3b:a9:f1:89:c2:81:a7:45:c6:a0:71:de:8b:
23:c7:7b:9c:20:36:61:01:fe:fa:99:01:79:7a:0d:e6:fd:5c:
1f:e1:7d:0e:41:08:af:e0:7f:e1:f5:75:7e:ee:63:28:2c:96:
49:24:17:f6:ce:e3:b9:da:cf:79:e3:23:58:30:fe:ec:62:55:
7e:c4:6a:50:3c:51:95:fc:39:9b:6a:24:c8:16:fe:52:7b:64:
eb:a6:b1:66:36:c8:4d:87:ec:dd:60:7e:e9:36:9e:50:a0:37:
54:cb:ad:77:c1:78:0a:89:0c:6f:95:15:e0:6f:77:56:95:06:
a7:93:46:b4:81:b0:d2:9f:ec:8a:c8:2f:03:b9:36:95:e6:fa:
37:82:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:19 2025 by rpki-client