Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RogHKP7fQRbIU6e70mXQ9uTCE8g.roa
File: RogHKP7fQRbIU6e70mXQ9uTCE8g.roa (raw, json)
Hash identifier: RHeQ8EoL9VaxWKBTYVn3/BP5ITyROM90tzQ+9Yz3uGU=
Subject key identifier: 46:88:07:28:FE:DF:41:16:C8:53:A7:BB:D2:65:D0:F6:E4:C2:13:C8
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193BACB8EDB0885DF97402BAEE6751F3BCF
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RogHKP7fQRbIU6e70mXQ9uTCE8g.roa
Signing time: Thu 12 Dec 2024 12:15:22 +0000
ROA not before: Thu 12 Dec 2024 12:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 217.18.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:cb:8e:db:08:85:df:97:40:2b:ae:e6:75:1f:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 12 12:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46880728fedf4116c853a7bbd265d0f6e4c213c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:73:af:74:c6:6b:9f:7f:f1:81:eb:4c:2b:
e6:a8:e6:f0:8e:f3:a8:3c:c0:e0:2b:0f:c2:5f:08:
36:d6:15:95:dc:fd:9a:45:10:74:49:6d:dc:74:0f:
8b:ba:43:ee:da:ed:10:e9:0a:07:b2:07:bd:7f:1e:
a5:b2:50:2b:10:39:5c:cd:f3:fa:72:fa:93:76:78:
c9:ca:79:cd:e4:b6:af:09:41:fb:a2:27:0f:74:7f:
c8:6b:c2:60:ac:3d:cd:4d:46:60:fd:74:c6:8f:56:
14:c4:da:a6:69:0e:e8:36:3c:07:bf:d4:ff:83:92:
06:b8:f9:ce:cd:46:96:e9:fc:1e:f6:bb:b3:2d:43:
88:43:a5:75:3f:5e:4a:a8:e4:33:d2:2f:1e:9d:09:
d3:0d:ec:ad:cb:50:c7:99:d3:15:b1:dd:01:2b:0a:
45:80:9f:48:52:6a:4d:8b:51:f8:b7:6f:0b:25:76:
f3:5c:94:d6:8c:1d:f0:9a:3c:ab:ba:49:4f:8d:24:
4f:15:f6:ae:d1:50:82:6f:b9:24:00:0b:af:8b:3c:
25:61:38:c0:bf:53:38:17:14:d2:ce:98:f8:1b:8f:
fa:79:5b:8e:69:e7:7c:7f:8d:18:dd:3a:34:d7:d1:
e8:d6:04:04:48:0d:e6:f4:e4:ae:27:a3:38:50:a8:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:07:28:FE:DF:41:16:C8:53:A7:BB:D2:65:D0:F6:E4:C2:13:C8
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RogHKP7fQRbIU6e70mXQ9uTCE8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:37:9a:a5:be:92:82:57:04:2e:71:ab:e3:d7:08:89:63:93:
d6:54:f9:c4:6b:2c:13:0a:1f:26:28:6a:31:d1:5b:cc:96:49:
aa:cf:ab:29:99:ad:46:e0:d9:3b:8f:35:f3:93:9e:58:3b:f4:
5b:41:0b:88:cd:17:04:86:75:a6:da:7b:f5:d4:79:79:05:1a:
af:48:20:b4:9a:67:a7:63:3f:6c:f6:9c:a1:fe:a7:17:1a:ae:
b8:33:50:9e:48:72:63:5c:08:48:3f:a3:62:60:4a:96:7f:ac:
23:96:79:4d:82:ed:ce:96:b0:f9:ac:68:2d:96:94:b7:6b:6d:
56:e4:87:21:0e:21:d2:f9:d3:fa:4d:f7:e2:7a:e5:67:85:1b:
2d:a3:4b:38:bb:61:3e:e9:0f:62:dd:48:94:11:fc:d0:9c:b6:
2d:95:8d:9c:39:3e:ea:f0:8e:d7:11:93:05:ba:3d:a2:83:c1:
f8:41:3a:5b:5b:74:1e:f6:95:40:29:6f:1a:c4:df:12:fa:e3:
a3:3e:a2:6a:9c:ea:3b:86:8e:4c:a1:fe:aa:9e:a6:a3:89:6e:
0a:c6:ec:c8:da:2b:92:80:a4:07:5e:b3:d8:63:e6:ea:d0:d8:
77:dd:2d:7c:31:a8:b3:e5:0e:2e:78:02:71:34:c6:5e:6c:41:
85:c0:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:25 2025 by rpki-client