Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fEFjyCUorYQXlRC5iYHfyYlTTJk.roa
File: fEFjyCUorYQXlRC5iYHfyYlTTJk.roa (raw, json)
Hash identifier: ilpcTieithWAqndZtncjjuZKOSabsw+7foKSN4bYuCE=
Subject key identifier: 7C:41:63:C8:25:28:AD:84:17:95:10:B9:89:81:DF:C9:89:53:4C:99
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBD13A14EB095DC87777419ED734E6
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fEFjyCUorYQXlRC5iYHfyYlTTJk.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213945
IP address blocks: 217.18.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d1:3a:14:eb:09:5d:c8:77:77:41:9e:d7:34:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c4163c82528ad84179510b98981dfc989534c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:04:46:e4:78:38:b0:dd:1d:af:88:76:f2:
9d:3f:77:7f:b0:c7:a8:d0:1a:41:bd:45:3b:0c:7c:
08:9d:9a:40:b8:e3:60:10:cf:63:f0:9d:64:9f:a1:
db:a5:3e:3b:ae:7d:11:73:cd:61:eb:d2:2c:96:2d:
56:13:f7:fb:f3:40:ec:12:88:7b:74:d3:42:8f:84:
9f:97:af:5d:44:e3:ee:20:01:3c:70:d0:8f:47:22:
8d:41:c0:5c:d7:cb:f4:f5:57:85:c6:95:79:10:04:
7e:09:48:8a:6c:22:93:be:e8:d0:1b:7f:d7:ff:bb:
92:15:e4:ac:33:4d:50:a9:5e:c3:71:cd:dc:dd:9a:
ef:30:75:89:ba:95:86:e1:66:64:8b:b7:1e:dc:1c:
4c:0d:da:62:60:35:ab:d8:5d:5e:9d:75:bb:45:da:
fd:14:fa:31:6a:2b:8e:7a:42:89:66:c2:96:58:f2:
6c:11:b5:90:5a:52:d8:1e:ff:1e:40:be:51:ae:7d:
84:81:95:21:95:23:51:d1:ba:ec:38:f2:24:82:2f:
59:f7:2c:e0:37:78:e3:41:57:81:cc:9b:fa:f3:7c:
00:bc:42:e2:8b:11:56:b5:fe:08:f9:77:4d:12:c2:
b3:28:56:42:f9:0c:8d:ba:70:03:75:b5:2e:f2:d1:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:63:C8:25:28:AD:84:17:95:10:B9:89:81:DF:C9:89:53:4C:99
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/fEFjyCUorYQXlRC5iYHfyYlTTJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5f:b7:7e:de:7e:25:ec:3c:59:16:d4:e4:01:70:7a:da:5f:
d6:05:3f:ab:20:bd:4e:24:01:3a:af:10:cc:04:19:a4:61:1d:
ce:36:ba:ff:c7:74:54:7b:ef:ab:3b:7c:37:e2:db:a1:a8:9a:
59:b1:f7:db:f3:8e:85:06:cd:45:da:e9:ec:81:92:02:29:1e:
fe:9c:e0:70:e1:ff:80:8f:e6:79:df:89:35:99:f8:cc:58:0a:
bf:da:9f:10:14:4a:33:54:e9:75:30:a6:e2:a6:e1:07:1e:4f:
4b:8e:0c:a5:09:fa:74:22:02:15:49:e1:5e:90:10:d6:74:1c:
95:f1:b7:2d:f7:3b:74:7e:23:96:13:02:41:a1:7e:85:35:86:
bd:02:8d:c0:10:6c:61:fc:86:ca:c4:9a:97:7d:13:b1:20:46:
72:05:d7:49:d2:ae:a2:86:d5:07:57:8b:ef:ee:8a:c3:76:ac:
af:7f:2c:d1:f3:0e:4a:27:94:df:c2:2d:01:5b:72:f9:c1:a0:
39:35:e8:bd:3a:79:02:d2:c8:69:35:8b:b0:f3:ce:38:83:98:
b1:f2:d5:f7:21:d1:8c:e4:6a:4a:ee:85:0e:19:b1:08:76:f2:
dc:a3:82:33:de:a3:c5:3c:90:40:20:b6:eb:de:e5:48:51:5b:
20:23:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:38:39 2025 by rpki-client