Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/VKnNvbVsRqF6coqOLVNx3je3CD4.roa
File: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (raw, json)
Hash identifier: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=
Subject key identifier: 54:A9:CD:BD:B5:6C:46:A1:7A:72:8A:8E:2D:53:71:DE:37:B7:08:3E
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 019427482E9256157A0D9C361665E100E7FC
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/VKnNvbVsRqF6coqOLVNx3je3CD4.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200972
IP address blocks: 217.26.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2e:92:56:15:7a:0d:9c:36:16:65:e1:00:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54a9cdbdb56c46a17a728a8e2d5371de37b7083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:af:16:bb:7a:a2:af:b2:dd:e4:ba:f9:ff:
3a:85:27:d3:02:10:97:fa:dd:5b:64:43:e6:70:cf:
c8:5c:7f:d4:ae:0a:dd:33:97:80:e9:d2:cd:6a:ef:
13:43:55:74:9b:28:8c:99:d7:2a:7d:6b:a7:66:d3:
97:98:6c:b7:6d:2d:f4:5f:f0:f8:2e:a9:32:69:41:
d5:6e:79:13:a9:55:7f:ac:42:fb:53:12:a9:bd:c2:
08:ba:7c:06:2f:8c:a8:13:ca:64:d6:68:30:0b:e2:
5e:93:6c:21:7c:80:d5:65:ae:f9:d2:f8:00:e5:1b:
b6:d8:55:92:3e:d8:e7:ec:20:88:0e:39:94:4e:9b:
55:ec:71:c5:ae:3e:8e:4f:63:48:56:bf:47:94:2f:
24:93:85:93:1a:aa:a0:83:3f:27:fa:29:7d:4b:b2:
06:ec:55:a1:01:95:23:47:12:10:c5:b4:0e:5d:f6:
4e:0f:71:27:08:88:59:a0:05:1d:26:40:b7:a6:d2:
79:fa:d2:0e:1b:b6:5f:81:f1:11:38:6e:65:11:04:
f6:9c:ff:c7:60:02:0a:21:df:bf:99:97:75:5e:bc:
f9:1b:fd:54:83:f5:58:d7:16:9a:53:04:06:5b:ef:
cb:62:6d:47:52:89:c0:a1:4d:40:86:78:14:40:e0:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:CD:BD:B5:6C:46:A1:7A:72:8A:8E:2D:53:71:DE:37:B7:08:3E
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/VKnNvbVsRqF6coqOLVNx3je3CD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:24:63:a6:9d:6d:5b:5f:86:e8:a6:f6:7b:f4:0a:ef:a6:49:
a9:7b:1d:0b:85:2d:ae:47:72:ee:e8:f1:ba:b3:3a:ab:18:0c:
96:7b:03:98:e2:03:be:1a:a9:13:09:f0:b7:62:01:ff:03:7b:
0b:36:aa:60:e9:65:88:e4:08:17:5f:61:34:07:0b:dd:4e:d2:
89:09:7a:13:70:8b:16:93:65:1f:85:85:ad:12:e1:7a:ae:b2:
18:e8:2c:94:5f:3b:b2:ec:9f:d3:d6:65:90:c1:b5:21:51:4c:
3e:2b:c1:5e:9b:e3:c9:bd:e3:2e:1d:b7:b6:1b:46:9a:28:74:
7d:83:48:96:dc:3e:03:fd:9c:61:fa:75:c6:e8:c3:f7:33:fe:
48:20:24:78:07:b7:85:14:5c:c1:d3:8b:e8:b1:e6:32:f5:1d:
da:33:60:20:3c:b4:c5:8a:73:2a:13:90:72:b3:01:c4:b2:fb:
53:f4:9f:fe:78:5c:ad:21:fd:5e:6c:b8:86:81:6b:d6:6a:be:
1a:6a:18:22:50:1a:28:02:19:37:bb:b1:d4:dc:d1:76:c2:b0:
2d:99:10:1c:6a:cd:29:73:92:c2:e5:ba:71:67:ea:8a:1e:13:
98:d4:52:ac:b6:87:48:1f:c6:c3:da:58:2c:e1:f0:ea:93:55:
cd:1f:e5:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSC6SVhV6DZw2FmXhAOf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNDEwZjVlZDM4NmY4NzkyMDNjYjQ0MjhhNWY5NWZkYzg5
OWI1OTEwHhcNMjUwMTAyMTM1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGE5Y2RiZGI1NmM0NmExN2E3MjhhOGUyZDUzNzFkZTM3YjcwODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ivFrt6oq+y3eS6+f86hSfTAhCX
+t1bZEPmcM/IXH/UrgrdM5eA6dLNau8TQ1V0myiMmdcqfWunZtOXmGy3bS30X/D4
LqkyaUHVbnkTqVV/rEL7UxKpvcIIunwGL4yoE8pk1mgwC+Jek2whfIDVZa750vgA
5Ru22FWSPtjn7CCIDjmUTptV7HHFrj6OT2NIVr9HlC8kk4WTGqqggz8n+il9S7IG
7FWhAZUjRxIQxbQOXfZOD3EnCIhZoAUdJkC3ptJ5+tIOG7ZfgfEROG5lEQT2nP/H
YAIKId+/mZd1Xrz5G/1Ug/VY1xaaUwQGW+/LYm1HUonAoU1AhngUQODUEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFSpzb21bEahenKKji1Tcd43twg+MB8GA1UdIwQY
MBaAFDBBD17Thvh5IDy0Qopflf3ImbWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMWNlYjAtMDllMi00NzdmLTg3OWQt
ODI2NzM2MGZmOWVkLzEvVktuTnZiVnNScUY2Y29xT0xWTngzamUzQ0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMWNlYjAtMDllMi00NzdmLTg3OWQtODI2NzM2MGZmOWVk
LzEvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RrYMA0G
CSqGSIb3DQEBCwUAA4IBAQCoJGOmnW1bX4bopvZ79Arvpkmpex0LhS2uR3Lu6PG6
szqrGAyWewOY4gO+GqkTCfC3YgH/A3sLNqpg6WWI5AgXX2E0BwvdTtKJCXoTcIsW
k2UfhYWtEuF6rrIY6CyUXzuy7J/T1mWQwbUhUUw+K8Fem+PJveMuHbe2G0aaKHR9
g0iW3D4D/Zxh+nXG6MP3M/5IICR4B7eFFFzB04voseYy9R3aM2AgPLTFinMqE5By
swHEsvtT9J/+eFytIf1ebLiGgWvWar4aahgiUBooAhk3u7HU3NF2wrAtmRAcas0p
c5LC5bpxZ+qKHhOY1FKstodIH8bD2lgs4fDqk1XNH+WA
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:08 2025 by rpki-client