Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sr0UPSjUdzkol4ETssYBWKfK3H8.roa
File: sr0UPSjUdzkol4ETssYBWKfK3H8.roa (raw, json)
Hash identifier: Po3iO/040CJX49uKGSivdYsu5vekHP/RjCUdlbLsslQ=
Subject key identifier: B2:BD:14:3D:28:D4:77:39:28:97:81:13:B2:C6:01:58:A7:CA:DC:7F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D8BF30D6C649FE20EBD8564E3725D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sr0UPSjUdzkol4ETssYBWKfK3H8.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4589
IP address blocks: 217.114.113.0/24 maxlen: 24
217.114.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8b:f3:0d:6c:64:9f:e2:0e:bd:85:64:e3:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2bd143d28d4773928978113b2c60158a7cadc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:9d:33:56:bb:44:3c:94:14:45:a6:46:6c:
67:38:7a:31:6d:b0:37:59:fb:fe:eb:0f:ab:de:16:
77:f9:77:21:08:ca:e0:6b:03:95:8d:82:54:c8:24:
82:ac:7d:0a:67:cb:13:3d:41:cb:44:83:90:37:11:
75:ee:33:1b:c7:08:26:da:7b:0d:f9:ef:36:20:2d:
a4:d1:45:12:7e:17:1f:86:37:ee:6c:99:13:95:43:
9b:92:a4:44:c1:22:f0:13:db:b4:eb:70:ca:db:f1:
ec:d5:85:cc:4c:59:01:4a:6b:e6:3c:8f:75:e1:22:
f9:bf:a4:f3:23:66:53:d6:40:99:b7:a2:d9:8f:c0:
2d:9d:b2:d3:96:60:94:42:cc:c8:e7:c2:b3:31:0c:
61:7f:b2:78:b4:56:b0:eb:1d:fb:f5:56:77:ce:61:
46:c4:6e:e9:a6:a1:b0:96:05:c2:1d:12:50:cf:ed:
7e:42:31:2c:df:49:b8:af:46:32:10:eb:bd:9e:8b:
87:1d:b1:7e:fb:31:05:a7:93:b7:6c:d7:7f:38:98:
e8:f8:a5:96:a7:63:ad:46:16:44:24:a4:97:5c:6d:
f6:08:1b:e0:64:e1:41:aa:f3:19:90:97:6b:f5:ab:
6f:4c:d6:5e:c1:03:c5:38:ac:47:a7:9c:11:8f:e2:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BD:14:3D:28:D4:77:39:28:97:81:13:B2:C6:01:58:A7:CA:DC:7F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/sr0UPSjUdzkol4ETssYBWKfK3H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.113.0/24
217.114.127.0/24
Signature Algorithm: sha256WithRSAEncryption
61:db:82:ce:38:9a:c7:be:7c:ba:f9:65:39:bc:39:6a:fe:92:
9f:f8:6f:48:7d:37:42:b9:83:30:fa:7c:af:b4:98:a8:38:a4:
26:d2:e1:a9:7f:19:b5:52:39:ef:e9:3d:11:a4:54:45:5c:e6:
71:04:d9:87:0e:5b:c4:08:bd:1d:80:c6:d7:ae:9d:c1:da:00:
7e:e9:e2:2d:db:5d:be:c3:54:38:bd:6a:bd:86:6c:95:7d:20:
40:97:54:4c:36:22:56:95:4f:a5:76:b7:29:c4:24:88:dd:9c:
92:46:77:08:cb:f1:3d:14:25:e1:ee:ab:b5:4e:4f:d6:3b:c9:
62:ea:4e:05:41:b9:60:a5:2c:7e:99:7b:11:c2:57:7a:d9:55:
67:eb:db:b9:07:31:77:55:67:51:a8:10:56:7f:c7:b8:cc:75:
71:8b:c7:21:96:1f:15:95:b8:33:0d:a6:08:98:87:00:ce:ea:
67:ab:63:07:6a:73:b0:8b:f2:74:a3:4b:11:96:9c:22:5d:96:
5b:99:99:00:af:8e:b2:33:53:19:4e:2e:a9:0c:47:34:c7:36:
6f:9b:71:71:da:8b:81:9e:ec:b9:f5:9a:a7:f7:26:fd:21:25:
d0:04:32:00:6e:e8:23:7a:11:44:18:a6:fb:27:88:c1:1c:c0:
a0:aa:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:26 2025 by rpki-client