Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/69weNkggQdywLdI6HZ4IQcqz-Ko.roa
File: 69weNkggQdywLdI6HZ4IQcqz-Ko.roa (raw, json)
Hash identifier: KF75epE3ae0d5pJK0Q4EenAjL73mtTLi03W83AKXQWU=
Subject key identifier: EB:DC:1E:36:48:20:41:DC:B0:2D:D2:3A:1D:9E:08:41:CA:B3:F8:AA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C45405DE9D50E0D9F3C1BFB677C09
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/69weNkggQdywLdI6HZ4IQcqz-Ko.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214918
IP address blocks: 217.156.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:45:40:5d:e9:d5:0e:0d:9f:3c:1b:fb:67:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebdc1e36482041dcb02dd23a1d9e0841cab3f8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:ca:2a:9c:73:0f:26:6c:6c:05:62:c5:32:
47:c3:33:23:7d:27:01:af:8f:a9:cc:ae:cb:ee:6e:
b8:88:27:12:00:36:21:5f:af:14:74:ba:fc:1d:39:
89:f6:3d:d0:46:a3:41:a8:ef:da:62:5c:4f:b4:de:
a6:e1:81:73:41:5b:02:2a:c9:51:65:21:36:29:b5:
db:22:81:27:a2:ad:a0:85:ae:6e:08:da:cc:df:7f:
2a:29:3c:b2:6a:db:ef:01:86:40:f6:83:99:11:b4:
c5:ba:c1:52:92:e5:f3:b5:19:65:1d:ac:d0:eb:75:
71:4c:38:3a:2b:bc:04:bb:36:05:e7:32:17:94:a7:
db:05:1a:69:8d:68:b0:37:0b:2d:c2:88:7d:04:b4:
16:36:a9:dd:95:46:5e:d1:f5:92:09:de:dc:13:44:
b7:c3:59:9e:39:3e:c5:63:9d:ea:92:72:ee:78:69:
62:2a:0a:7b:de:f8:a3:d5:90:f9:d5:72:bf:bb:fb:
2b:90:ce:15:83:5f:d1:31:14:52:b2:d7:ab:63:0c:
0f:c7:73:98:4b:d1:a5:25:25:7d:ae:d7:d7:aa:5a:
d0:87:b1:1e:33:9e:13:54:c8:f9:5e:ee:06:26:81:
8f:6d:24:33:ce:2b:a0:d7:8a:48:a6:f5:ff:f0:6e:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:1E:36:48:20:41:DC:B0:2D:D2:3A:1D:9E:08:41:CA:B3:F8:AA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/69weNkggQdywLdI6HZ4IQcqz-Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:76:a4:5d:50:f0:bd:16:e5:7f:b4:44:c8:4d:b8:38:40:3f:
eb:3c:0f:08:be:7f:bc:5a:dc:59:80:0a:97:3a:a1:5b:2a:fc:
e7:87:35:59:08:c4:25:c8:61:0d:e3:e3:a9:4e:0a:c0:0b:04:
5c:f1:d6:15:73:cc:d0:16:42:3d:e1:a0:2d:25:dc:e5:f4:fe:
9c:98:c6:95:39:38:9d:89:d9:96:ba:b1:4c:ee:74:cb:d9:e3:
fc:46:51:35:fb:61:20:d7:4d:90:30:63:2e:21:a9:ad:cd:d8:
d4:25:c4:1b:7d:83:1b:16:6f:bd:93:ee:63:f1:6f:eb:3c:8c:
d1:ec:cc:6c:b6:45:67:96:f1:cb:a8:2a:2b:cf:2b:4f:25:2c:
f8:81:b5:26:09:72:c6:e0:b2:ad:ff:0f:a1:ad:9f:c7:91:d0:
4d:d5:24:bf:4d:8b:61:c6:0a:54:fc:ff:73:25:d0:01:c9:82:
d2:53:0e:6b:6c:aa:ab:70:8f:b2:15:f9:74:ef:90:e5:97:79:
48:8e:54:e6:3e:4b:9b:17:fd:01:5b:3a:72:ff:f4:d6:61:30:
1f:cb:7d:2e:23:fc:4f:58:06:03:1a:a9:8a:a1:91:ab:a0:3a:
fc:42:19:8d:0d:2c:23:3c:8c:4d:a0:b0:aa:58:a5:bd:7e:8f:
7f:d2:90:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjEVAXenVDg2fPBv7Z3wJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmRjMWUzNjQ4MjA0MWRjYjAyZGQyM2ExZDllMDg0MWNhYjNmOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWbKKpxzDyZsbAVixTJHwzMjfScB
r4+pzK7L7m64iCcSADYhX68UdLr8HTmJ9j3QRqNBqO/aYlxPtN6m4YFzQVsCKslR
ZSE2KbXbIoEnoq2gha5uCNrM338qKTyyatvvAYZA9oOZEbTFusFSkuXztRllHazQ
63VxTDg6K7wEuzYF5zIXlKfbBRppjWiwNwstwoh9BLQWNqndlUZe0fWSCd7cE0S3
w1meOT7FY53qknLueGliKgp73vij1ZD51XK/u/srkM4Vg1/RMRRSsterYwwPx3OY
S9GlJSV9rtfXqlrQh7EeM54TVMj5Xu4GJoGPbSQzziug14pIpvX/8G7D3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvcHjZIIEHcsC3SOh2eCEHKs/iqMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNjl3ZU5rZ2dRZHl3TGRJNkhaNElRY3F6LUtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZwWMA0G
CSqGSIb3DQEBCwUAA4IBAQBqdqRdUPC9FuV/tETITbg4QD/rPA8Ivn+8WtxZgAqX
OqFbKvznhzVZCMQlyGEN4+OpTgrACwRc8dYVc8zQFkI94aAtJdzl9P6cmMaVOTid
idmWurFM7nTL2eP8RlE1+2Eg102QMGMuIamtzdjUJcQbfYMbFm+9k+5j8W/rPIzR
7MxstkVnlvHLqCorzytPJSz4gbUmCXLG4LKt/w+hrZ/HkdBN1SS/TYthxgpU/P9z
JdAByYLSUw5rbKqrcI+yFfl075Dll3lIjlTmPkubF/0BWzpy//TWYTAfy30uI/xP
WAYDGqmKoZGroDr8QhmNDSwjPIxNoLCqWKW9fo9/0pCm
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:39 2025 by rpki-client