Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/UZjE-GQgoU3nRLnq0ZWQAXM992o.roa
File: UZjE-GQgoU3nRLnq0ZWQAXM992o.roa (raw, json)
Hash identifier: Ph8txzTNR1zk2KVvrV6FeKKiPwZkYzUc7t042+8KNcY=
Subject key identifier: 51:98:C4:F8:64:20:A1:4D:E7:44:B9:EA:D1:95:90:01:73:3D:F7:6A
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0194266BB5C82FA3E9945276B27B655CB5A5
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/UZjE-GQgoU3nRLnq0ZWQAXM992o.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 217.119.96.0/24 maxlen: 24
217.119.98.0/24 maxlen: 24
217.119.104.0/24 maxlen: 24
217.119.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b5:c8:2f:a3:e9:94:52:76:b2:7b:65:5c:b5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5198c4f86420a14de744b9ead1959001733df76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:a1:c1:53:1c:cd:18:4d:23:08:07:5b:95:
47:fb:de:21:dd:76:70:5f:2b:a7:96:3b:9b:fd:e7:
3d:a6:65:c5:4d:fb:c5:bf:01:ba:e6:95:3d:a1:b9:
4a:2c:ac:24:e3:e0:11:82:0e:c1:43:72:32:cb:d5:
9c:2d:62:ad:35:38:51:ac:13:92:a0:54:17:68:e7:
79:d3:b3:9b:f1:24:ca:ba:85:a1:3d:8e:d4:73:4f:
cf:e0:4f:07:f8:3e:6a:22:2b:85:20:71:92:20:61:
a8:4d:1d:e2:ca:99:65:9d:63:8d:04:86:33:3c:df:
b6:b4:4a:3e:a0:21:03:34:87:c5:45:56:f2:6e:a9:
1f:62:13:4a:24:83:7d:a9:1b:72:e6:82:a8:43:16:
db:ca:1b:a6:8e:28:a6:88:fb:45:22:9c:b2:12:cc:
da:2e:88:6a:83:51:b0:1d:53:8f:8f:5e:0a:94:17:
be:6a:12:43:8e:9b:b0:80:9d:89:6c:b6:1e:01:3a:
24:ab:43:ae:5a:96:70:6a:12:1c:8c:78:65:15:6d:
b3:55:e3:3f:e0:cd:72:e0:40:04:2b:7c:32:02:7e:
33:0b:e1:f7:98:79:79:cf:60:0f:a1:94:f8:8f:a2:
23:c1:eb:c8:f1:94:b9:77:bf:24:dd:eb:15:55:d3:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:98:C4:F8:64:20:A1:4D:E7:44:B9:EA:D1:95:90:01:73:3D:F7:6A
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/UZjE-GQgoU3nRLnq0ZWQAXM992o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.96.0/24
217.119.98.0/24
217.119.104.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:b0:d4:44:ce:b2:0f:0b:41:b7:93:cc:18:86:34:cc:64:52:
16:b1:b0:9d:f8:c4:9c:79:21:3b:0a:07:09:12:ba:53:78:5b:
5a:d3:6a:9a:b8:ee:44:2c:e3:0c:d9:0b:99:5c:f2:fb:43:39:
77:7e:32:b2:96:51:27:1f:4d:dc:a5:e5:ea:ca:c6:74:45:12:
2a:ad:fb:64:f8:37:ab:6b:e1:b5:9e:7d:c5:a4:e6:bf:41:38:
c4:0d:29:6c:a5:f7:c2:2f:53:e9:37:c0:78:fb:af:fa:ee:e1:
18:c7:71:f2:e3:4e:53:d9:72:b5:de:f7:8c:50:be:43:f6:59:
02:c6:2a:24:13:a7:c0:f9:06:61:ac:6d:df:eb:c1:99:20:b5:
5d:d4:84:f5:c8:33:db:54:7e:73:4e:46:f9:50:ba:c7:0b:ae:
5e:8e:93:17:36:eb:33:45:1e:34:2a:8c:50:9b:6c:17:68:c6:
95:9f:6f:b0:37:af:8d:89:b4:d5:c9:72:e4:30:f3:3a:f7:09:
f9:b6:61:c1:27:a3:8f:62:e6:0d:a6:bc:96:79:a6:a6:d7:90:
e9:54:85:b2:fd:f4:85:48:9a:35:c7:db:30:ba:90:43:6e:4c:
1e:7a:4f:e4:6d:78:69:f6:30:03:d6:2e:ad:70:22:2c:80:92:
db:29:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:59:42 2025 by rpki-client