Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/xFa_0d92IrO8m7csJzay_dvaZmU.roa
File: xFa_0d92IrO8m7csJzay_dvaZmU.roa (raw, json)
Hash identifier: xAfvHq52NGCMs4kvhFfhegyEhswRxRHnoX0SPcrz5zY=
Subject key identifier: C4:56:BF:D1:DF:76:22:B3:BC:9B:B7:2C:27:36:B2:FD:DB:DA:66:65
Certificate issuer: /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial: 019423D731F7338F0DAEBDE534AB5E795B9D
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/xFa_0d92IrO8m7csJzay_dvaZmU.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 217.169.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:31:f7:33:8f:0d:ae:bd:e5:34:ab:5e:79:5b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c456bfd1df7622b3bc9bb72c2736b2fddbda6665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:b7:1a:b1:e2:5e:58:b4:44:0c:ae:5d:58:
ed:8e:ad:f8:a6:91:52:f2:d9:77:b5:76:cc:d9:1c:
9f:55:6a:6d:fe:f1:ad:dd:ec:6e:ef:95:12:b2:78:
84:ad:ff:6e:23:58:ad:64:b8:30:e6:70:ba:6b:c2:
50:cf:29:b3:5c:d5:86:60:56:ad:33:04:60:78:5c:
03:c1:c2:d7:0c:a5:a6:99:83:b5:e3:8c:ba:c9:4f:
f9:29:db:00:d9:f0:dc:51:21:69:50:cd:c2:70:d8:
3f:ac:41:1d:f5:5c:db:d6:1e:19:d8:cd:55:30:16:
ba:7e:0a:c1:15:ea:4e:58:59:50:86:7f:a0:05:4a:
a1:5b:35:a7:af:a3:ba:fe:36:cc:5c:f4:ba:1b:b1:
e1:4a:fd:32:ee:b4:fa:86:bc:54:77:47:e6:3b:df:
07:26:3a:3c:e4:b6:2d:09:b9:09:ff:84:a0:33:a6:
e8:4b:be:5a:48:69:c9:fd:17:44:d3:51:5b:79:eb:
49:13:9d:cd:a0:33:af:f0:d5:b5:dd:3f:2f:52:94:
bf:95:de:31:a8:6e:f8:95:e5:0c:e8:74:2b:aa:6f:
28:c7:5c:28:f7:d8:4a:7f:d0:8a:c7:02:23:45:f0:
4d:f7:30:50:98:74:86:72:31:30:17:da:5b:d2:f0:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:56:BF:D1:DF:76:22:B3:BC:9B:B7:2C:27:36:B2:FD:DB:DA:66:65
X509v3 Authority Key Identifier:
keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/xFa_0d92IrO8m7csJzay_dvaZmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:a2:f3:63:7e:8e:e5:e8:ad:21:ae:d7:84:ff:f6:eb:85:02:
5e:fd:d7:4a:da:5d:ac:4b:9f:c6:be:f4:f4:7d:9b:f9:07:96:
c8:8d:1a:f7:f0:e6:f0:cd:07:cd:6a:19:56:f7:3c:f2:4e:3c:
73:6d:4c:3c:a5:ba:d4:1e:80:4d:ce:ab:98:04:f4:c6:7b:42:
6d:c9:22:80:65:9c:1f:03:18:78:04:5f:44:e2:d7:26:1b:79:
f3:6a:85:23:03:d2:af:98:18:48:26:a5:79:4c:3a:4b:dd:a5:
8b:89:af:0d:8e:44:47:21:56:3e:f8:a0:b5:72:1a:61:7c:93:
6e:45:b5:96:71:eb:8d:59:31:59:d2:d4:26:bd:7d:c0:12:e2:
c7:e8:60:9a:4a:6b:1c:dc:e2:08:0e:b9:0c:ac:f0:70:02:16:
67:f4:e9:fb:fc:4c:2e:21:e1:e4:78:e5:97:8a:67:f9:80:1b:
04:b8:3d:1f:be:2a:94:7c:19:b8:bf:4b:4b:f2:31:d3:fa:47:
9c:25:50:9d:25:9e:39:4f:b7:87:c0:db:c2:48:16:21:a2:68:
3c:5e:36:a7:35:ce:4a:b8:86:fb:8f:53:5a:1d:db:a3:74:00:
6d:31:11:c0:af:de:3f:76:3c:fa:fe:8b:70:38:e0:ae:fa:d4:
ce:9d:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:55 2025 by rpki-client