Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c6wP5JxfTJCNzCjdXipeSRFVNV0.roa
File: c6wP5JxfTJCNzCjdXipeSRFVNV0.roa (raw, json)
Hash identifier: o9vyNyXbo2C+97hrb2YOrOLw93h8kg+/Hrj06TBZ/xc=
Subject key identifier: 73:AC:0F:E4:9C:5F:4C:90:8D:CC:28:DD:5E:2A:5E:49:11:55:35:5D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C146B9222B1DBCC2FBA3475E16582
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c6wP5JxfTJCNzCjdXipeSRFVNV0.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21294
IP address blocks: 217.156.85.0/24 maxlen: 24
217.156.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:14:6b:92:22:b1:db:cc:2f:ba:34:75:e1:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73ac0fe49c5f4c908dcc28dd5e2a5e491155355d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:8e:b5:57:b0:02:0e:64:10:05:e6:ad:7e:
b4:6f:66:94:02:ee:8a:9b:a4:ba:20:e9:a8:bc:5b:
3d:40:07:26:b7:6c:1d:4c:72:7f:47:ed:9a:ef:7c:
5d:52:61:ad:99:54:b0:51:e0:aa:d5:43:23:b1:b5:
32:11:a8:3c:ae:de:fd:46:f7:a2:78:86:45:ba:ec:
f2:34:64:db:00:3e:2f:e9:b5:ad:a8:a2:c3:d6:a7:
74:6f:47:f9:ae:0a:18:42:7d:27:8d:52:8e:50:75:
25:60:c4:9e:ce:8b:21:38:5f:ba:cd:c7:86:0f:6c:
aa:b1:b8:fa:b8:8a:06:40:ee:22:c3:d1:d8:e1:44:
18:09:83:a0:e7:c2:a8:62:75:a6:7a:1a:8a:b6:14:
f0:4c:e3:1c:2b:41:b8:43:04:2c:fa:3e:4a:11:f4:
76:be:1d:32:69:c0:88:4d:cf:c9:8f:cb:ac:36:93:
14:30:27:5f:2c:16:1c:e9:0b:7d:1e:11:33:40:2a:
79:4c:3b:42:1b:d3:66:fb:30:e7:49:17:f3:86:d8:
58:f9:95:c1:62:23:32:d0:8b:98:13:77:16:52:a5:
74:04:b2:2d:cb:e6:95:e5:5f:bf:be:eb:cc:cc:cb:
51:67:b5:06:8a:36:47:3a:29:6d:0a:b0:f2:4f:39:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:0F:E4:9C:5F:4C:90:8D:CC:28:DD:5E:2A:5E:49:11:55:35:5D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/c6wP5JxfTJCNzCjdXipeSRFVNV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.85.0/24
217.156.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:98:ef:dd:e0:a8:bc:9c:42:62:df:26:5b:c7:90:bf:c2:d1:
cb:31:b0:81:82:ac:08:db:ed:b9:a1:55:94:a1:17:60:21:6d:
fd:c6:3f:9f:8c:82:6e:ef:a5:c6:d0:7e:e6:3c:35:c2:0e:2e:
23:3b:08:71:32:11:38:cb:20:35:ff:4d:d3:8b:c6:2f:f0:75:
af:52:78:5d:cf:84:5f:50:d4:86:ed:d5:0d:c4:97:9b:7c:8b:
57:08:e5:62:85:ec:68:d5:17:c3:57:1a:cf:f7:78:2f:f1:e5:
c7:57:a0:db:99:f2:25:37:3d:2f:bc:1c:e4:44:b0:f2:75:f1:
42:b5:26:2a:aa:34:5d:be:eb:62:f3:44:c0:68:92:49:9e:c7:
88:53:0a:6e:d5:c8:5b:cb:c7:2c:2c:ae:1f:bc:bb:2b:48:04:
54:d8:90:a4:62:d1:6f:8d:a9:80:e6:15:e6:00:47:87:9d:e2:
8c:79:3b:ed:e4:35:bb:50:f1:a7:d5:f5:cc:f0:17:a1:1c:35:
d7:8d:f7:1e:32:e9:1c:a3:10:75:b4:e5:99:29:03:cd:d6:a2:
ac:46:39:95:a3:78:98:1b:3f:47:83:de:79:f5:61:68:11:0e:
79:d6:d6:4f:af:cc:9b:7f:68:e9:c2:bf:55:d8:29:95:4a:34:
b3:17:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:26 2025 by rpki-client