Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa
File: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (raw, json)
Hash identifier: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=
Subject key identifier: 49:EF:ED:E8:D2:CA:BB:C2:00:DA:C4:E4:AD:53:81:88:A5:6C:43:06
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019423D6C51C720D126D9CDA643EBA6589E7
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 217.197.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c5:1c:72:0d:12:6d:9c:da:64:3e:ba:65:89:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49efede8d2cabbc200dac4e4ad538188a56c4306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:91:6f:81:93:57:88:8f:af:2b:47:26:3e:
c2:ff:b5:c1:20:01:30:78:8f:63:b3:d4:da:b9:f8:
4a:cd:bf:68:d5:d5:64:9c:6e:ca:67:c0:82:76:e8:
c1:c7:d9:3b:b4:60:f1:39:36:c7:44:56:2e:b9:0a:
fa:6c:96:07:46:95:83:59:ae:bc:31:dc:62:90:81:
b2:07:78:b3:0b:e4:da:02:f0:01:7b:50:4c:b3:76:
95:95:16:24:a4:71:4e:31:53:72:6d:8f:bd:11:09:
95:33:cf:50:df:e6:0d:bf:72:1f:8c:d1:5e:ce:1a:
b6:72:34:ac:ce:18:86:4c:d9:8f:17:f8:6b:0d:f9:
68:33:9a:69:8c:44:13:e6:44:10:80:04:98:b5:89:
be:40:02:dc:cf:a8:d0:e2:a4:aa:32:74:c9:c7:d0:
52:2c:69:26:66:e3:67:27:f4:60:fb:f2:52:dd:77:
a3:6f:da:07:4c:a1:84:8b:9c:1a:02:6b:8f:de:bd:
9e:62:83:47:67:27:dc:b4:18:28:a3:83:e6:63:ec:
aa:eb:28:7c:d5:d8:b3:d6:34:e1:0b:6b:19:a3:16:
65:07:ae:e8:3d:2e:a8:7a:9f:fb:c0:91:d8:af:9b:
0b:ef:87:fc:12:b2:b6:55:19:9f:e2:98:52:f0:11:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:ED:E8:D2:CA:BB:C2:00:DA:C4:E4:AD:53:81:88:A5:6C:43:06
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c3:13:8a:70:0f:13:64:9e:7a:c4:c7:f6:6d:e7:db:ff:b1:
7c:5c:34:35:ab:ad:bf:a4:d6:fe:8d:58:11:78:4b:95:18:ba:
be:d6:cc:d9:c0:52:0d:58:ab:d4:ce:02:98:4d:8d:6d:a9:09:
17:67:ea:13:43:fe:23:22:f8:06:20:0b:c5:3c:a3:5b:24:9e:
a9:1a:ac:59:bc:48:4d:54:4b:73:d4:49:6b:4a:52:54:d8:ec:
86:d6:63:14:40:3e:8a:64:78:81:53:8b:97:8d:32:be:ec:2d:
92:e5:e4:92:cd:cc:60:54:a0:e4:8e:75:b3:8f:7f:dd:ac:b2:
e9:88:d3:25:42:c5:92:9e:fc:90:77:91:28:65:e5:c7:58:da:
a5:72:79:ca:3c:92:68:5b:e3:72:41:2f:b3:c3:06:4e:7b:32:
70:25:fd:99:6a:e2:6b:ec:b3:1d:0a:2e:c8:cd:f0:15:46:fd:
7a:d5:0d:99:e2:97:be:96:1f:57:9f:25:9c:01:c8:87:c4:11:
52:4b:eb:bf:9f:2f:56:0e:45:a3:7d:3e:c9:ed:dc:8c:aa:7d:
67:a9:11:18:5e:bf:00:a9:0a:13:b4:c0:50:0b:4f:50:a1:ad:
36:61:fd:ad:77:dd:5d:43:00:b2:5e:7f:11:ab:30:fa:88:f2:
ea:50:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:12 2025 by rpki-client