Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/N04EfiNPlhcajYlah0Fj2OOKHzU.roa
File: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (raw, json)
Hash identifier: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=
Subject key identifier: 37:4E:04:7E:23:4F:96:17:1A:8D:89:5A:87:41:63:D8:E3:8A:1F:35
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019428278F14FC373CEDCD89D93D35DF8642
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/N04EfiNPlhcajYlah0Fj2OOKHzU.roa
Signing time: Thu 02 Jan 2025 17:54:28 +0000
ROA not before: Thu 02 Jan 2025 17:54:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44152
IP address blocks: 217.110.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:8f:14:fc:37:3c:ed:cd:89:d9:3d:35:df:86:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374e047e234f96171a8d895a874163d8e38a1f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:c2:df:7a:e1:87:9a:30:2a:3f:91:2d:e3:
3b:90:d6:ef:9b:8b:45:69:17:58:cb:a5:18:a3:1c:
28:8d:d1:67:0e:93:b2:82:5d:ca:22:e4:f5:fb:1d:
ad:6d:35:2c:1e:37:59:19:ea:d3:aa:de:9a:b0:87:
65:ce:3c:b5:28:57:dc:da:e7:0f:a8:7c:ad:16:b6:
23:6a:dc:d3:0a:47:e0:c1:65:15:a1:35:39:d3:6f:
a8:00:43:84:ed:b7:3c:7a:51:a0:c5:1a:fb:8c:d3:
71:a7:31:60:be:d7:c2:cf:b8:64:d9:33:a4:7e:21:
d7:08:bf:b7:80:22:36:4d:34:b9:87:a3:f8:74:de:
64:8a:dd:0d:c5:8e:fa:9b:a7:b8:28:90:b6:b3:49:
f9:1f:81:e7:5c:49:56:0b:46:2e:5d:73:92:d9:0f:
0d:cf:cd:d4:6c:4c:f3:9d:cb:6d:9f:cb:98:26:69:
90:da:82:d0:ab:2c:1a:d8:57:c0:44:d8:42:d3:8a:
1a:6a:f0:82:78:18:68:57:26:6e:55:ab:5f:0c:ec:
df:ce:7d:18:ff:a9:23:92:06:5a:6c:0a:72:2a:8e:
dd:02:fb:aa:1e:15:d8:bc:f2:80:65:b6:0d:70:37:
5f:4e:a5:1d:4e:06:e0:ba:11:21:a3:b6:bc:b4:72:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:04:7E:23:4F:96:17:1A:8D:89:5A:87:41:63:D8:E3:8A:1F:35
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/N04EfiNPlhcajYlah0Fj2OOKHzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.110.44.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c4:3a:d4:4e:e7:a1:1a:50:2f:0e:d5:3c:c3:e0:f6:4c:46:
f0:39:74:a8:a1:64:13:6e:6c:ac:e2:6e:c2:68:00:da:b9:f5:
ca:a3:c3:30:c1:6b:c1:51:80:d1:25:d1:bd:db:55:33:57:85:
d3:e4:de:de:79:f6:8f:e1:7b:b1:7b:9c:92:72:ca:cb:11:b6:
26:b7:d4:d1:f2:32:78:29:f0:46:7b:46:cf:09:fe:0d:53:86:
ba:e4:1b:3a:5b:f1:06:92:b5:77:f6:3d:7e:06:b3:c5:7e:4c:
d0:8d:2c:9a:d0:83:e6:16:6a:f0:68:b5:10:9d:08:53:ac:d7:
7f:38:d6:56:45:36:6d:b8:4e:66:9e:a5:a9:c3:fc:fc:23:23:
58:57:09:f4:cc:67:ed:26:9d:c5:37:8b:19:c5:7f:ca:62:1e:
0f:9b:4f:b3:69:91:ac:99:1e:cc:d5:f1:e3:14:c7:63:bb:87:
65:23:9b:08:f4:3e:a3:a7:c5:75:9b:aa:df:f9:cb:d5:1f:38:
6d:28:3a:47:08:0c:8d:46:d8:de:93:a9:58:b0:4d:f7:81:1b:
8c:7e:30:9d:10:53:06:fa:78:be:5a:12:57:12:df:8a:a0:38:
5b:3c:ec:bb:e0:e8:0e:56:07:8a:5b:6e:3a:17:26:09:d5:06:
08:a8:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:31:59 2025 by rpki-client