Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0t2mmgn6eXVwq3wE5hwm8So80hM.roa
File: 0t2mmgn6eXVwq3wE5hwm8So80hM.roa (raw, json)
Hash identifier: cKVf517IxunZeCWkrROQNEBJe473sFyNKtl5Dd++7j0=
Subject key identifier: D2:DD:A6:9A:09:FA:79:75:70:AB:7C:04:E6:1C:26:F1:2A:3C:D2:13
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A1F603D815A04656BF9A35D4FADC
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0t2mmgn6eXVwq3wE5hwm8So80hM.roa
Signing time: Thu 02 Jan 2025 13:50:58 +0000
ROA not before: Thu 02 Jan 2025 13:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 2.56.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a1:f6:03:d8:15:a0:46:56:bf:9a:35:d4:fa:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2dda69a09fa797570ab7c04e61c26f12a3cd213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:2e:e7:b0:e6:28:28:e6:e5:2c:b1:ca:82:
0b:12:78:bc:c3:53:12:6d:20:35:9f:74:8c:a2:c7:
20:bf:9e:3a:a0:b2:5d:b6:63:88:3b:f3:c3:28:27:
15:f0:7b:1a:11:da:fc:cd:4d:28:31:80:c7:96:a1:
dd:20:39:6c:a0:db:e2:fc:1b:4e:84:f8:46:fc:5d:
65:28:82:81:15:ba:ff:56:11:69:e3:d7:f4:16:42:
a4:45:3e:9c:a8:27:4b:5d:b1:73:d7:b7:41:93:f2:
e6:6f:05:60:db:8d:b0:d4:22:5d:64:54:72:16:0a:
6d:7f:92:f6:57:70:fd:c9:a1:fc:04:90:e6:b4:e1:
68:35:17:1f:3e:1d:1f:6b:8b:58:20:13:ce:27:f8:
8b:7e:0c:b7:89:ee:e5:d8:79:68:e5:0b:fa:01:6b:
08:03:10:9f:1b:08:56:b4:5c:3e:6d:89:2d:36:78:
a2:6e:f6:be:40:ff:63:e1:4e:29:45:18:9d:fb:48:
28:1a:16:f3:81:b1:d0:c9:5e:7c:73:3f:11:25:b6:
9a:4f:32:6f:79:e2:cd:53:87:76:55:9e:11:61:e8:
75:d0:24:d6:cd:08:b1:c2:ad:75:3c:a4:91:20:f4:
83:da:1e:2d:c0:f1:66:14:e6:9d:51:d3:7d:ef:22:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:A6:9A:09:FA:79:75:70:AB:7C:04:E6:1C:26:F1:2A:3C:D2:13
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/0t2mmgn6eXVwq3wE5hwm8So80hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0d:b2:54:f4:4a:2f:b3:2b:f7:35:86:fc:db:dc:c3:12:f7:
8e:f4:e6:7f:0f:cc:a0:bc:0a:64:16:ba:ea:1b:bf:ab:49:d3:
7d:90:bb:08:54:77:81:67:5f:26:29:a6:35:a5:2a:d4:d7:78:
a5:0d:f7:47:64:35:bc:52:36:ac:dc:f7:e5:a4:99:45:f2:da:
83:b4:80:73:71:f7:18:24:a5:c7:6c:90:c4:33:12:0e:81:32:
21:4d:a5:86:db:cb:6f:99:de:fa:ec:b5:2d:ec:38:55:9d:54:
2f:13:fd:55:eb:5d:85:89:3b:2d:ed:4a:80:4f:d0:6e:d0:6a:
91:f2:56:3b:d2:7d:52:7c:c7:0e:25:0a:c7:ca:5f:08:91:ab:
4e:0c:d1:71:b9:3d:90:28:44:bd:0f:78:8b:22:d5:4a:38:58:
6c:1f:e0:1a:50:08:67:cc:22:4d:1e:ff:4f:3a:0e:df:ca:00:
e5:3b:fc:5b:6a:04:d5:04:49:8a:ab:f3:12:4d:4a:64:f2:84:
10:98:d9:80:5b:58:c4:e2:a9:c4:0e:f5:22:36:c2:38:61:9f:
3d:59:02:92:14:70:00:ba:30:93:64:15:5b:08:b6:1d:c3:58:
08:24:f1:93:e9:cb:f3:a1:98:d9:d4:17:4b:9e:cf:13:53:d5:
bb:2b:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:33 2025 by rpki-client