Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-I6iaHoKkQRui-maOvyaf903-pY.roa
File: 1-I6iaHoKkQRui-maOvyaf903-pY.roa (raw, json)
Hash identifier: DGjM+DdDY1m1wnJ52Hf6vozqF6JWG92yg1rZUVU5NCo=
Subject key identifier: F8:8E:A2:68:7A:0A:91:04:6E:8B:E9:9A:3A:FC:9A:7F:DD:37:FA:96
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3CAF777CA086ADD32C2D587FA8225
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-I6iaHoKkQRui-maOvyaf903-pY.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201235
IP address blocks: 217.113.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ca:f7:77:ca:08:6a:dd:32:c2:d5:87:fa:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f88ea2687a0a91046e8be99a3afc9a7fdd37fa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:51:bc:d2:7a:f6:84:02:3b:4b:b7:c9:24:
bd:2d:c5:78:8b:73:80:06:57:20:46:fc:45:1e:95:
20:73:4e:0c:1a:98:62:b8:c5:49:e5:9d:ec:a6:27:
16:b0:28:4e:0a:41:7b:2c:86:77:7a:ad:82:fe:7f:
e6:a9:f8:4f:55:90:05:a0:3a:c1:9b:03:7f:07:99:
75:89:9b:99:3f:44:74:af:4a:fe:b9:97:18:a3:36:
b1:16:30:9f:5b:5c:1b:55:53:4c:ed:30:b4:95:af:
7f:0c:a5:7b:2f:c4:d4:27:70:2d:6e:da:49:eb:e2:
50:4e:aa:e9:40:94:5f:00:d5:dc:22:65:7f:22:1d:
fa:51:c0:8c:e9:66:5e:e0:1d:22:9f:6a:c1:01:51:
49:6b:61:16:93:06:db:e8:d7:f8:0e:e9:4b:96:93:
8e:99:0b:0c:32:dc:6c:c5:34:33:49:cf:34:ac:5a:
ba:ac:d7:d0:e5:04:a0:74:d7:be:fc:06:90:ca:76:
1a:7b:39:fd:60:f1:73:a5:b4:69:24:9e:48:b4:4a:
35:00:be:0b:bc:e5:af:6f:e6:64:d0:80:17:cd:8f:
94:d5:96:65:a8:45:a6:bc:2c:0e:e8:70:78:2e:b3:
4d:4c:c1:f3:10:9c:c3:f3:66:37:a5:5b:55:c0:aa:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:A2:68:7A:0A:91:04:6E:8B:E9:9A:3A:FC:9A:7F:DD:37:FA:96
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-I6iaHoKkQRui-maOvyaf903-pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5b:d0:06:8f:dd:30:14:fc:1c:b9:8d:4c:d2:5b:d0:d8:19:
a2:b2:66:02:cf:80:90:12:e3:69:46:9e:72:71:6b:3c:3e:c2:
06:d1:42:bb:30:35:5c:3c:bc:21:ab:19:8e:90:94:4e:ef:c3:
5d:77:28:10:5e:cd:0d:f3:a1:95:b6:ef:63:59:ba:a5:3e:3a:
29:be:37:29:e8:13:6c:08:69:82:03:3f:2c:56:49:db:3a:4c:
11:86:52:1b:ef:03:ed:63:e8:7d:e7:2a:21:82:ba:df:24:67:
cd:42:71:e5:c2:03:7f:10:2d:98:c7:bd:15:ec:b1:a9:12:4c:
42:95:61:a6:80:5f:8b:4f:75:73:6a:29:72:33:e2:63:af:7b:
d6:0a:9c:0b:91:c2:7a:12:b5:62:a2:c3:72:43:2b:b0:9f:26:
d3:86:d4:9a:dd:7c:8e:50:d4:27:e8:c3:bc:7b:06:61:99:38:
89:12:98:97:14:3e:ae:59:1d:2c:07:d2:0d:cf:4c:41:13:74:
64:78:68:d5:6d:c8:5b:59:7a:33:2a:af:5a:69:47:7f:12:84:
0f:3b:a0:28:af:6d:2e:01:5a:eb:6b:e4:3d:be:52:65:d5:1e:
e2:4f:a9:05:f4:a8:a7:69:e3:40:f4:ed:c1:19:e6:e4:62:0c:
d1:9b:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:37 2025 by rpki-client