Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5V1O0y89M042G9vXk3Zg9VxQbcg.roa
File: 5V1O0y89M042G9vXk3Zg9VxQbcg.roa (raw, json)
Hash identifier: EMOD4CrcJtpaUp3cUbKiMb0ajS/y8wW+AmJZNKmdHY4=
Subject key identifier: E5:5D:4E:D3:2F:3D:33:4E:36:1B:DB:D7:93:76:60:F5:5C:50:6D:C8
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B39E0AFC992AC6BE7637DC5E4A012A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5V1O0y89M042G9vXk3Zg9VxQbcg.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60542
IP address blocks: 193.107.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9e:0a:fc:99:2a:c6:be:76:37:dc:5e:4a:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e55d4ed32f3d334e361bdbd7937660f55c506dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:c1:88:35:0f:30:7d:5e:9e:0d:9d:cb:41:
d3:21:96:c5:a5:0e:44:1b:71:75:46:20:3c:f0:09:
e4:2b:fe:75:88:b9:81:52:00:92:32:81:f3:f8:0d:
be:ef:90:d4:c7:f1:20:8c:5e:a1:b7:25:94:b5:d3:
bc:a1:cf:d4:ac:6d:b0:e5:73:7c:d3:1b:92:d3:f4:
44:49:bb:17:ba:99:f9:f1:f9:49:60:ab:11:cf:3d:
cd:46:21:69:fe:ad:e0:84:0a:f8:42:f2:93:5b:c2:
37:e6:8c:52:82:32:fb:21:9c:0a:75:20:81:eb:41:
37:21:91:db:2c:f0:a7:1a:87:b9:b8:90:3e:7f:ef:
53:70:bd:f5:dd:9e:64:8e:e8:ad:42:bb:d3:1c:f8:
86:f7:6c:cc:c7:7d:db:cb:c6:d0:17:a7:3b:f5:c7:
8b:ea:1d:d4:34:f2:72:53:62:cd:f8:25:4f:5c:3a:
93:4b:bb:cd:d1:44:9d:97:00:cf:0f:31:3d:f5:99:
2d:45:d4:0c:80:c5:ad:3a:2e:95:cb:10:e6:51:e7:
90:df:e9:fb:7f:86:56:0f:c4:e0:02:37:a7:23:e9:
cb:ed:e4:d6:f5:b5:29:9d:95:11:00:16:5a:88:f8:
19:6f:bb:01:47:52:7f:8b:b7:f2:df:2c:0f:de:99:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5D:4E:D3:2F:3D:33:4E:36:1B:DB:D7:93:76:60:F5:5C:50:6D:C8
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5V1O0y89M042G9vXk3Zg9VxQbcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.217.0/24
Signature Algorithm: sha256WithRSAEncryption
08:17:1b:66:46:d7:38:2c:36:fa:c7:09:36:27:0e:1b:f1:b6:
b6:ea:c9:b7:73:c7:70:99:94:99:64:00:5d:b5:c2:5c:b5:bb:
5b:df:d1:b8:9e:26:9b:ae:8e:e7:e3:6e:33:bf:d2:eb:ce:57:
48:fa:6e:da:c0:17:53:49:3c:c0:28:be:83:83:db:e7:c3:21:
2c:65:81:48:93:71:cc:77:9f:e3:89:5b:b9:d1:8e:58:b2:12:
45:7e:e5:fb:8a:5d:20:cb:7c:ed:38:58:f4:12:4f:47:10:bd:
b5:4e:ac:09:f4:a4:bb:91:72:43:04:2a:c3:35:26:9a:54:9a:
69:13:a9:d0:5c:2a:b2:22:be:ed:e2:4e:0f:73:43:d9:6b:cb:
18:48:f1:17:01:f7:6b:e2:b8:49:a8:e8:da:f8:10:27:0c:a2:
c0:72:e5:a1:72:7e:00:99:b8:e9:ce:5d:3d:50:3a:45:4a:cd:
26:2f:86:1f:06:da:c4:a2:60:fb:c6:eb:fd:05:38:04:1f:b2:
1b:6d:a5:91:3b:22:a2:d7:8a:da:84:35:67:f4:87:14:a3:74:
71:6a:99:58:1d:e3:18:41:51:5c:a2:5b:11:0b:57:69:8f:58:
58:f0:04:bc:ab:de:85:ab:0d:de:61:5e:1a:5d:d8:4b:af:f9:
e2:69:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:02 2025 by rpki-client