Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/vXPdTshBqnn4ghgMByB7XXaLYRA.roa
File: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (raw, json)
Hash identifier: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=
Subject key identifier: BD:73:DD:4E:C8:41:AA:79:F8:82:18:0C:07:20:7B:5D:76:8B:61:10
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 0194C515799FCA0EAFD3E3B935DDAF12E743
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/vXPdTshBqnn4ghgMByB7XXaLYRA.roa
Signing time: Sun 02 Feb 2025 05:15:06 +0000
ROA not before: Sun 02 Feb 2025 05:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 217.9.1.0/24 maxlen: 24
217.9.2.0/24 maxlen: 24
217.9.12.0/24 maxlen: 24
217.9.14.0/24 maxlen: 24
217.9.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:15:79:9f:ca:0e:af:d3:e3:b9:35:dd:af:12:e7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Feb 2 05:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd73dd4ec841aa79f882180c07207b5d768b6110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:3c:4a:7f:89:c5:9f:0a:1b:b3:fd:9d:14:
f6:32:58:48:98:32:ae:fc:fb:86:1b:7c:db:64:64:
90:75:d7:79:c6:ab:cd:7a:78:5f:fa:81:58:66:7a:
b6:47:21:27:9d:93:a3:9b:02:df:d6:dc:b5:84:da:
96:1c:fd:26:64:68:bd:a0:b9:dd:90:87:80:2c:a9:
d2:01:a6:6b:c7:6b:ce:73:7b:f6:54:68:c2:c9:04:
27:de:ee:eb:ec:77:41:1a:40:6f:c2:15:b3:35:33:
68:8e:f2:2a:d7:5b:a9:a0:c2:6d:a2:ec:dd:c5:5c:
de:58:53:2a:df:82:12:79:26:17:eb:99:d0:8b:4a:
7f:a7:d3:20:8c:85:4b:39:d7:65:bd:ef:26:5c:27:
a8:e4:c4:46:54:d1:cc:08:a8:bb:2c:86:96:5f:27:
fe:c7:74:bd:25:69:b5:7e:8d:c3:1f:2e:6c:7f:1c:
51:70:b3:ce:fc:c1:42:6b:95:1f:7d:35:02:90:8f:
c0:f1:80:7d:18:78:2c:0a:88:32:12:cd:8f:0b:3c:
d0:41:b3:1d:c6:4d:13:26:8e:70:55:e0:c5:ed:5e:
22:ed:bc:0a:49:d6:8b:57:ca:7b:24:17:66:b3:93:
02:3a:75:c4:04:59:8e:d6:b9:6b:bc:38:62:3f:84:
22:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:DD:4E:C8:41:AA:79:F8:82:18:0C:07:20:7B:5D:76:8B:61:10
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/vXPdTshBqnn4ghgMByB7XXaLYRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.1.0-217.9.2.255
217.9.12.0/24
217.9.14.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:54:3f:bd:bb:f6:3a:f4:84:96:4c:e2:5b:c7:f0:e7:eb:f5:
2b:76:fe:4e:7a:a7:81:5a:3a:77:d7:33:e7:f8:b9:85:2b:67:
8e:a6:7e:93:91:58:64:b2:80:3c:78:8a:8d:e8:f0:fe:81:cb:
df:c1:0d:3b:f5:9b:31:92:5e:05:81:26:b0:94:53:34:c0:04:
31:b0:aa:60:13:bb:6f:2f:a1:30:b2:00:16:de:d0:4b:42:71:
06:b9:10:fa:bd:a0:98:ed:96:27:b1:bd:6c:dd:f5:52:cd:94:
30:b9:1c:00:4b:fa:d1:2f:1c:75:e9:9c:8f:37:10:d3:e0:9a:
0d:ed:2c:43:76:22:3d:ba:87:8b:b9:7d:c5:20:14:b5:21:a5:
b6:35:5d:e7:dd:08:17:d7:75:b8:fc:07:6b:44:3e:ee:ad:92:
be:82:db:f1:ef:d3:93:8a:c9:27:04:15:e8:ce:53:17:ee:51:
2f:2a:f5:c5:3c:82:e6:c9:d4:0d:05:86:97:ab:36:44:1e:4b:
7e:29:9a:d0:1e:fc:09:94:44:99:42:16:30:0c:57:fa:f7:1a:
34:93:c3:67:70:07:c4:7a:b3:3f:ce:83:21:20:15:16:0c:b0:
9e:01:15:19:c6:39:07:dc:1f:1e:31:3b:f6:ba:d1:20:70:83:
33:7c:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:31:23 2025 by rpki-client