Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/xZ-5M5rU8M1glDHMPYz3YUnyZJ0.roa
File: xZ-5M5rU8M1glDHMPYz3YUnyZJ0.roa (raw, json)
Hash identifier: /sNBJV9bCm7wOEdWI4QigO7aal/wVcOe5lQBe4bAu+k=
Subject key identifier: C5:9F:B9:33:9A:D4:F0:CD:60:94:31:CC:3D:8C:F7:61:49:F2:64:9D
Certificate issuer: /CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Certificate serial: 018CC80228DF28D5969832A899F46F938C5A
Authority key identifier: B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/xZ-5M5rU8M1glDHMPYz3YUnyZJ0.roa
Signing time: Tue 02 Jan 2024 02:30:33 +0000
ROA not before: Tue 02 Jan 2024 02:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210545
IP address blocks: 217.119.138.0/24 maxlen: 24
2a11:7b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:28:df:28:d5:96:98:32:a8:99:f4:6f:93:8c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ba52ca7838433f9f045446c1f3e568a78b56d2
Validity
Not Before: Jan 2 02:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c59fb9339ad4f0cd609431cc3d8cf76149f2649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:7f:fb:50:a8:61:4a:6a:c0:89:de:42:42:
5d:bf:a9:87:4c:1b:7d:44:6b:23:48:6c:a7:93:c8:
fd:60:85:b3:97:50:65:d0:6f:bc:89:71:13:f1:ff:
5c:97:fe:66:79:a9:40:8c:ec:45:2f:fe:47:08:dc:
e5:cc:21:c2:ea:00:d7:e4:e3:e6:a1:6c:28:b9:11:
ac:13:d8:9c:ec:cd:cd:65:aa:e2:8f:8b:b4:01:45:
fb:17:5a:1b:c4:b7:1f:01:5f:b7:36:07:e8:71:71:
9b:10:00:5b:75:bb:6c:86:c1:1f:e1:29:3f:5a:a1:
65:bd:d8:57:d8:15:67:91:b4:b0:bf:bf:02:aa:9c:
bc:2c:68:05:52:6c:8c:dd:41:59:99:94:19:7c:d6:
be:1e:7f:6d:0a:e8:ac:51:f7:6b:a2:b2:d3:37:ad:
b3:cd:92:80:07:98:05:fe:d6:8b:7e:64:fa:74:ea:
9b:73:be:94:74:3e:0e:ec:22:bf:a8:95:de:d9:26:
80:31:8a:dc:d7:92:51:f0:3d:7f:51:72:76:b3:47:
24:d2:ad:76:f7:a3:9d:8a:17:c3:d5:66:d0:f1:b4:
5e:02:fb:e8:70:90:19:2f:27:db:11:d8:88:cf:f1:
03:e7:0d:7b:45:0d:9e:ba:f4:1a:88:b7:ce:39:05:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9F:B9:33:9A:D4:F0:CD:60:94:31:CC:3D:8C:F7:61:49:F2:64:9D
X509v3 Authority Key Identifier:
keyid:B7:BA:52:CA:78:38:43:3F:9F:04:54:46:C1:F3:E5:68:A7:8B:56:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7pSyng4Qz-fBFRGwfPlaKeLVtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/xZ-5M5rU8M1glDHMPYz3YUnyZJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25aa70-b806-4f91-91de-5146ef01c21b/1/t7pSyng4Qz-fBFRGwfPlaKeLVtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.138.0/24
IPv6:
2a11:7b40::/29
Signature Algorithm: sha256WithRSAEncryption
80:70:bb:4c:1f:1e:1b:8d:88:12:16:fa:af:8f:27:08:f9:01:
6f:1f:d7:bd:6d:d6:89:de:f3:c0:fc:ed:4c:2f:78:9a:e9:66:
e9:41:c0:a8:8e:83:d1:ff:ab:f0:5c:6f:41:19:34:de:05:1b:
f9:17:ac:72:f8:c3:e4:b3:80:a7:80:3c:1b:73:a6:03:fd:a2:
36:04:76:cf:42:13:27:5a:3c:55:66:94:90:2e:1b:53:4f:d8:
9b:1f:56:f0:3c:aa:2d:c2:15:fd:04:61:76:51:62:c2:31:17:
83:5c:1d:d8:1c:d7:ca:a1:31:ac:b7:e9:cc:1a:7a:61:3b:b8:
dc:cd:7c:8b:7e:c4:df:f7:7c:51:e6:28:69:dd:38:05:f3:a1:
2e:ec:09:61:04:2e:73:bd:0a:45:f9:98:7a:ef:7e:4b:5b:da:
35:36:76:66:b6:58:f4:e1:23:13:7e:77:77:95:36:0b:4a:11:
7e:2f:03:6c:28:09:05:a6:ff:7f:5f:e9:57:1c:45:7d:23:ab:
f7:9f:b9:ac:31:9c:31:7d:41:a8:ad:5a:06:df:82:29:5d:26:
eb:da:ca:d6:9b:f2:8b:92:ff:ba:8b:bd:ac:23:7d:2e:ee:fb:
cf:bf:e2:10:76:f8:d3:7f:f3:59:ac:58:d6:80:7f:5d:d0:54:
d5:83:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:37 2025 by rpki-client