Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dTXBc0WLJlKTCQ6ClAx-1q3dy4w.roa
File: dTXBc0WLJlKTCQ6ClAx-1q3dy4w.roa (raw, json)
Hash identifier: wuGLzWNUCszVf+TZrYJqXFTqxLJQ9j53vUuNIyUyFqo=
Subject key identifier: 75:35:C1:73:45:8B:26:52:93:09:0E:82:94:0C:7E:D6:AD:DD:CB:8C
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282819DF819E4A11BBFE3ED56CFCC076
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dTXBc0WLJlKTCQ6ClAx-1q3dy4w.roa
Signing time: Thu 02 Jan 2025 17:55:04 +0000
ROA not before: Thu 02 Jan 2025 17:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48458
IP address blocks: 217.79.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:19:df:81:9e:4a:11:bb:fe:3e:d5:6c:fc:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7535c173458b265293090e82940c7ed6adddcb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:aa:a4:79:7e:c7:ba:94:0c:ac:fa:72:5a:
78:47:e2:e0:6f:b3:74:b8:3f:b6:8f:b1:9b:bd:62:
28:12:41:4a:4d:bb:1b:9a:b9:59:d0:c6:5a:44:0d:
a8:d0:36:7f:66:3a:07:02:cb:6f:0f:ad:5f:62:b4:
0f:99:97:bd:a0:6e:43:a0:cb:ad:f2:7e:4a:76:2b:
2d:17:30:73:50:fb:60:58:09:e8:bf:8a:33:fe:57:
5b:ca:9b:dc:43:83:f3:5a:f1:03:ce:aa:5e:1d:5c:
9c:0f:0d:45:09:19:68:8c:90:a2:2e:1d:e9:6e:26:
78:c6:f0:34:a0:67:d9:55:7f:4a:5f:a3:92:2f:d6:
87:68:a7:4e:7d:88:8f:e2:40:49:a1:ec:a3:6b:1b:
92:6c:29:da:5a:14:46:1b:19:c9:09:05:9f:3a:8f:
f3:a6:48:da:8b:79:fe:3e:fb:e6:a5:24:01:19:e1:
99:95:c2:52:f3:c9:45:f3:47:17:57:a5:5a:80:95:
d1:40:06:78:bd:fd:83:00:97:d5:a5:e7:fb:98:7f:
9c:ed:43:38:cb:5f:5c:f3:07:ab:0d:2f:84:8f:1e:
82:40:0d:3f:46:e5:0f:ee:11:9f:53:1b:23:4f:5f:
69:4e:60:68:d7:28:9f:91:0d:a9:81:8b:f2:bf:bb:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:C1:73:45:8B:26:52:93:09:0E:82:94:0C:7E:D6:AD:DD:CB:8C
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/dTXBc0WLJlKTCQ6ClAx-1q3dy4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f8:5a:e4:c1:0f:6a:c0:16:81:06:2e:9d:f9:47:6f:13:7e:
6c:fd:79:a6:09:b7:e4:25:7c:87:3b:6f:a1:1a:99:98:54:5e:
c5:01:06:56:89:3c:cb:e3:71:dd:88:60:57:5f:51:cb:5a:ad:
82:49:f9:98:e8:26:19:bd:78:a3:4b:6a:a5:b6:0d:2f:f5:9a:
a8:05:55:cc:7e:8d:99:91:7a:f4:31:b5:6f:85:08:aa:bc:22:
b7:ad:bc:c9:56:6c:31:97:83:21:73:46:ab:e4:81:4f:6c:d2:
e3:78:dc:be:cf:b5:de:b3:a0:17:19:91:91:cf:d6:f6:b4:39:
09:ce:da:bd:cf:45:07:5c:8e:62:04:fc:c8:30:a7:32:30:bd:
54:bf:2a:1c:45:da:d2:4e:dc:01:51:9a:09:63:f5:76:f4:24:
97:f1:00:c0:6c:d4:5b:c3:07:ee:be:30:2d:db:60:aa:30:32:
9c:b3:ac:30:9b:87:09:da:2e:5e:b6:9d:52:42:fd:9d:86:c9:
a8:1e:3f:9c:92:18:ae:66:b9:8b:04:9b:bb:2c:1b:f1:a3:95:
97:3b:eb:fa:00:ea:a3:4b:a3:c4:f3:1c:64:b6:32:79:19:a8:
95:80:89:b3:8b:78:c2:de:00:d7:b5:38:c9:49:e0:d5:41:4e:
0f:bf:4b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:46 2025 by rpki-client