Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/X7JDGZUE1vxhp5GamK-k06pc8Uk.roa
File: X7JDGZUE1vxhp5GamK-k06pc8Uk.roa (raw, json)
Hash identifier: qFKYyS/olY3+Dik5FA9EASfCM9uRagbR4MK905cDP5g=
Subject key identifier: 5F:B2:43:19:95:04:D6:FC:61:A7:91:9A:98:AF:A4:D3:AA:5C:F1:49
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067BD55EB4F6BBAF47C467D33F83EAF
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/X7JDGZUE1vxhp5GamK-k06pc8Uk.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9096
IP address blocks: 212.243.80.0/24 maxlen: 24
217.192.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bd:55:eb:4f:6b:ba:f4:7c:46:7d:33:f8:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fb243199504d6fc61a7919a98afa4d3aa5cf149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:3d:38:4e:0d:13:f6:22:c6:3c:a3:b7:26:
a4:45:e4:87:3e:4f:9e:36:7f:63:0f:2b:1f:3e:33:
56:79:5c:41:2d:56:83:a8:d0:06:26:4e:5f:0a:99:
3f:71:f5:aa:5d:92:99:8c:1d:bf:96:ac:2a:1f:64:
3b:10:f0:c6:bb:a8:92:e9:6b:c0:44:bd:ce:d4:16:
a0:e2:db:50:4d:db:bc:aa:06:e5:e6:f6:fa:1e:60:
c0:ef:f6:f3:48:9f:fb:b7:d5:f6:c0:30:33:87:7e:
ef:6b:ba:96:28:0f:79:3a:b5:79:0a:7d:46:98:22:
17:d2:c7:da:67:03:99:3a:bd:00:11:64:d7:71:a0:
81:db:16:1b:1e:c1:58:8e:42:37:82:6e:91:b0:f3:
19:1a:f8:b1:2a:e8:61:5f:84:5d:b1:18:00:18:12:
a8:40:c8:ef:f8:cb:c0:4f:88:e2:73:07:78:e3:00:
ab:9a:25:51:0b:25:8e:cb:3b:56:75:2c:25:0b:43:
57:f2:e9:3d:88:54:d8:e8:a5:43:0f:49:ba:64:ab:
5f:32:78:4c:6d:74:46:d3:15:b6:d9:df:82:f0:38:
47:1b:7f:b7:d9:e4:72:19:45:2b:f4:e3:ee:33:ee:
ab:96:bd:f0:30:5e:3f:9e:04:fa:15:7f:05:07:42:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B2:43:19:95:04:D6:FC:61:A7:91:9A:98:AF:A4:D3:AA:5C:F1:49
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/X7JDGZUE1vxhp5GamK-k06pc8Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.80.0/24
217.192.86.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a3:d3:d5:e0:ed:ac:18:f8:4b:24:c7:89:b8:79:f6:06:9e:
47:b8:88:76:bb:9a:5e:7a:7c:ce:56:0e:1d:5a:10:fb:6f:55:
8a:d8:45:90:54:5b:ca:86:0c:96:d3:aa:0b:7f:77:66:71:0b:
f3:9f:93:06:8f:b7:21:56:29:a3:ff:1c:75:02:ae:86:4f:bb:
06:9a:86:23:8e:0c:a1:5e:c8:ae:ef:62:a7:c0:a0:01:d6:0d:
ba:7e:85:6f:ef:82:b2:59:20:a7:f5:59:d9:c4:e5:e3:f4:1f:
b9:94:ab:16:82:ab:5b:ce:ec:e2:5b:fe:28:4f:72:71:54:42:
6f:27:27:a1:14:10:af:67:96:30:14:aa:1c:7b:b5:2d:7c:5b:
ae:51:f1:98:15:f8:8f:fe:e5:d3:83:ab:ef:af:e5:80:06:8a:
5f:f2:f9:1c:9f:da:54:5d:e5:50:c3:d5:ad:b0:40:5b:fc:4e:
1d:9a:4c:ef:e8:ce:01:cb:e5:ec:15:fe:4a:b8:ee:2a:09:99:
c1:6c:ed:63:d6:55:6b:7a:9e:53:03:fa:63:73:f1:08:3d:da:
5f:09:86:13:fc:f7:ee:87:db:64:b6:e8:ba:c8:fb:f5:38:a2:
3a:c2:62:35:e3:c8:b9:cb:90:0a:d6:1a:9d:f7:d2:5f:71:bb:
a0:7d:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:26:48 2025 by rpki-client