Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2dflmhbWGttuYqopXk4_u9kj038.roa
File: 2dflmhbWGttuYqopXk4_u9kj038.roa (raw, json)
Hash identifier: 1k1URpCfCE6iaF6jzX4QcUSPWaDHi+6hAcnDNr0Vr7k=
Subject key identifier: D9:D7:E5:9A:16:D6:1A:DB:6E:62:AA:29:5E:4E:3F:BB:D9:23:D3:7F
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452666CE4B98DBD80DEBEFC71F9123
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2dflmhbWGttuYqopXk4_u9kj038.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58172
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:26:66:ce:4b:98:db:d8:0d:eb:ef:c7:1f:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9d7e59a16d61adb6e62aa295e4e3fbbd923d37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:d2:f9:6e:36:de:ef:c7:fd:83:00:8a:f4:
d2:23:e7:20:e9:e4:ef:af:d6:e3:5f:e6:6c:08:7a:
43:13:bc:ef:ad:05:df:8f:11:ea:b5:cd:c2:db:1b:
4b:f4:55:19:77:e3:10:ec:58:18:95:8d:53:b3:8f:
75:d5:55:72:53:2a:ca:3c:28:d9:7d:ab:a9:9f:ee:
4b:ca:ba:da:bf:ae:fe:50:fd:2d:fb:0a:fd:56:1d:
ac:1f:7b:bf:a9:f3:2c:20:d5:76:34:32:9f:a2:12:
de:af:87:36:44:13:98:6c:eb:36:2e:75:de:55:b2:
49:3d:e2:df:b5:94:05:e2:94:1c:e4:0d:c3:af:f8:
26:a7:52:78:8a:99:f8:f9:e5:9f:96:9c:32:bb:8c:
b7:83:2f:26:86:62:51:72:77:67:a8:ad:20:1c:fc:
9e:c8:13:26:40:51:7b:38:79:21:e7:68:bc:8b:7d:
a7:b2:95:19:e2:10:56:86:82:0a:c9:75:ed:1d:d2:
a5:b7:fb:97:6d:23:c5:02:17:40:30:a1:27:07:38:
12:8e:24:00:f1:fb:f9:8a:e4:00:a7:63:33:4a:71:
bc:bc:d7:75:ab:97:e5:81:75:74:c2:5c:54:05:31:
e9:48:72:ec:64:b0:44:c2:1e:d1:c3:05:c2:68:9f:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:E5:9A:16:D6:1A:DB:6E:62:AA:29:5E:4E:3F:BB:D9:23:D3:7F
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2dflmhbWGttuYqopXk4_u9kj038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
26:13:0b:4c:82:be:97:aa:13:99:94:00:83:ec:be:e6:bc:57:
fe:58:31:04:67:82:34:3e:81:52:c9:ac:5b:40:28:12:7c:87:
ad:0f:ef:e2:0b:91:13:1d:20:b1:60:a8:09:44:a0:da:b7:18:
b5:87:97:07:ad:d6:55:5d:e9:5e:fd:7e:c1:4a:7b:7d:c1:58:
b8:56:74:1e:5c:ff:4c:a1:36:79:ad:d8:78:0f:7d:0c:c0:76:
68:b3:d3:d7:ed:7c:e4:79:a1:ef:91:77:76:0d:5d:b8:3e:cf:
d5:3d:04:9d:27:9b:cd:c6:57:ca:ae:46:10:e3:d1:87:8c:20:
ba:53:47:4e:1f:36:cd:a0:83:73:c6:90:84:3d:4b:3e:da:48:
85:50:fc:f7:54:c0:28:c6:a0:53:3b:17:3a:bc:f4:96:d3:be:
ed:36:cd:66:61:8b:44:94:d3:78:bf:b0:e3:d9:ed:21:2b:0d:
69:5b:ee:27:40:96:fc:6e:28:5d:b0:fd:2f:c4:63:99:a1:c2:
b3:ef:a6:18:26:1a:66:57:97:94:ad:6f:8f:b9:28:c8:69:40:
fa:8a:dd:77:27:74:0e:47:6f:cd:2e:11:0a:46:e5:55:b7:f9:
b4:d0:7e:6e:41:ee:21:98:cf:55:2f:3b:35:c1:98:fc:1f:38:
aa:20:60:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRSZmzkuY29gN6+/HH5EjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWQ3ZTU5YTE2ZDYxYWRiNmU2MmFhMjk1ZTRlM2ZiYmQ5MjNkMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshHS+W423u/H/YMAivTSI+cg6eTv
r9bjX+ZsCHpDE7zvrQXfjxHqtc3C2xtL9FUZd+MQ7FgYlY1Ts4911VVyUyrKPCjZ
faupn+5Lyrrav67+UP0t+wr9Vh2sH3u/qfMsINV2NDKfohLer4c2RBOYbOs2LnXe
VbJJPeLftZQF4pQc5A3Dr/gmp1J4ipn4+eWflpwyu4y3gy8mhmJRcndnqK0gHPye
yBMmQFF7OHkh52i8i32nspUZ4hBWhoIKyXXtHdKlt/uXbSPFAhdAMKEnBzgSjiQA
8fv5iuQAp2MzSnG8vNd1q5flgXV0wlxUBTHpSHLsZLBEwh7RwwXCaJ/6VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNnX5ZoW1hrbbmKqKV5OP7vZI9N/MB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMmRmbG1oYldHdHR1WXFvcFhrNF91OWtqMDM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeLMA0G
CSqGSIb3DQEBCwUAA4IBAQAmEwtMgr6XqhOZlACD7L7mvFf+WDEEZ4I0PoFSyaxb
QCgSfIetD+/iC5ETHSCxYKgJRKDatxi1h5cHrdZVXele/X7BSnt9wVi4VnQeXP9M
oTZ5rdh4D30MwHZos9PX7XzkeaHvkXd2DV24Ps/VPQSdJ5vNxlfKrkYQ49GHjCC6
U0dOHzbNoINzxpCEPUs+2kiFUPz3VMAoxqBTOxc6vPSW077tNs1mYYtElNN4v7Dj
2e0hKw1pW+4nQJb8bihdsP0vxGOZocKz76YYJhpmV5eUrW+PuSjIaUD6it13J3QO
R2/NLhEKRuVVt/m00H5uQe4hmM9VLzs1wZj8HziqIGBq
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:15:01 2025 by rpki-client