Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lMF2qJSf3Ei--WjH4hGdE1QojuQ.roa
File: lMF2qJSf3Ei--WjH4hGdE1QojuQ.roa (raw, json)
Hash identifier: hc42fTCNX4gaZFnn9FgNx6S5P9/BT23eus524VB3UL8=
Subject key identifier: 94:C1:76:A8:94:9F:DC:48:BE:F9:68:C7:E2:11:9D:13:54:28:8E:E4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C48C87AF1FC0EF56DE9566E55824E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lMF2qJSf3Ei--WjH4hGdE1QojuQ.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216088
IP address blocks: 217.156.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:c8:7a:f1:fc:0e:f5:6d:e9:56:6e:55:82:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94c176a8949fdc48bef968c7e2119d1354288ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:2d:2a:29:64:12:21:51:ba:4e:15:cc:58:
22:95:b8:cb:37:5e:50:70:a6:7e:0f:88:3f:4c:58:
6a:ce:cd:29:1a:da:9d:d2:8c:ef:be:90:66:5e:96:
c0:1e:39:dc:09:7f:be:06:9e:67:2e:a9:cb:ee:93:
2b:00:78:58:77:03:8e:39:d6:67:c7:de:97:a2:b4:
d0:b9:28:7a:56:44:b4:7b:8b:79:16:b4:60:43:34:
1a:4b:e6:f7:b4:20:f8:7f:b7:74:04:a4:9a:fd:da:
00:99:9b:65:e0:1e:63:f7:36:93:e1:8f:9c:be:60:
59:95:87:37:a0:91:54:c5:1d:3b:5d:fe:88:98:a3:
81:9a:32:44:1a:2d:59:e7:ea:6a:3a:b0:49:39:72:
3c:a2:c7:61:60:3c:1d:39:23:70:09:c9:04:74:24:
e1:d6:48:f3:b2:ae:f2:b4:2d:59:34:69:0c:d5:2c:
23:42:51:44:8b:71:2b:15:63:9b:a0:4f:b3:21:c2:
ec:5d:7b:2b:55:66:e3:2a:cf:7e:c0:61:1e:25:ef:
83:d7:5d:52:2e:2d:4a:53:1e:26:03:ba:bc:f0:96:
48:9c:f4:45:32:8f:73:7c:4a:41:eb:10:1f:63:05:
50:8d:4d:82:a9:36:13:b2:33:03:91:ef:7c:ef:7a:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:76:A8:94:9F:DC:48:BE:F9:68:C7:E2:11:9D:13:54:28:8E:E4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lMF2qJSf3Ei--WjH4hGdE1QojuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b4:fb:ad:4a:e1:83:3f:1f:28:88:aa:3a:88:2a:b9:4b:0d:
ad:b6:a1:d9:6d:38:f5:78:61:74:a6:35:3d:f3:2e:f5:90:86:
60:08:d5:d8:5f:0b:a6:82:89:ae:3e:11:3b:aa:9f:74:2f:ce:
c9:1c:da:f0:e5:87:31:34:a8:b0:21:57:50:c9:40:75:e1:dd:
29:2b:89:69:90:8d:6a:35:4b:73:49:3f:fb:d8:51:c9:1c:61:
0a:a4:e9:c3:e8:74:70:1b:71:0d:c0:32:80:dd:ee:02:84:f7:
c6:9b:3a:68:d8:2f:86:41:12:8a:ab:0e:4a:d1:fe:47:d3:74:
cb:05:b7:ac:39:3b:a1:e0:e5:9d:ac:dc:21:b1:10:5a:bf:2d:
5b:93:a5:20:fe:88:de:fb:d7:89:04:da:ce:f8:53:df:5e:8f:
cc:b0:c5:07:84:5e:c1:f9:53:02:e7:fa:12:f1:57:b7:65:b3:
65:08:b4:83:36:a1:09:d9:cc:59:bf:41:30:f3:fb:fc:a7:03:
75:a7:05:dc:cc:3c:40:9d:ab:a9:ca:6f:ce:d8:d6:17:41:ee:
c4:94:fe:d6:7c:56:23:8c:34:ba:66:f7:e1:14:48:6f:f8:72:
7e:26:88:cc:80:c5:8c:7a:97:0d:b4:4a:e0:27:f2:6b:18:d3:
27:82:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:32 2025 by rpki-client