Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/rrAXmi_7YClczS3vWNHBPzO-idw.roa
File: rrAXmi_7YClczS3vWNHBPzO-idw.roa (raw, json)
Hash identifier: BjG7avFoCpljFI+uWKEJ+YDwFsEhd7tiOoigrtUqxtw=
Subject key identifier: AE:B0:17:9A:2F:FB:60:29:5C:CD:2D:EF:58:D1:C1:3F:33:BE:89:DC
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0194C675F45207EE1BF10F7A542306B93E5C
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/rrAXmi_7YClczS3vWNHBPzO-idw.roa
Signing time: Sun 02 Feb 2025 11:40:06 +0000
ROA not before: Sun 02 Feb 2025 11:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48474
IP address blocks: 178.17.80.0/20 maxlen: 20
217.170.96.0/20 maxlen: 20
217.196.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:75:f4:52:07:ee:1b:f1:0f:7a:54:23:06:b9:3e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 2 11:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb0179a2ffb60295ccd2def58d1c13f33be89dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:70:19:1a:b4:ff:a3:ab:ac:36:9f:6d:92:
ba:01:23:3e:f4:9c:dd:6a:c1:dd:db:55:ab:1f:59:
16:be:61:d6:a9:b0:e1:c5:d8:5d:f5:86:1a:47:0b:
0b:1a:f4:11:b3:df:f3:c9:0b:81:24:60:7c:1b:90:
54:57:06:39:c4:99:39:bf:a3:d3:02:81:73:ac:9a:
41:3b:6f:e4:59:0b:4d:5a:53:f3:7a:b4:9d:6b:4b:
24:60:24:ae:c3:df:7f:21:a3:24:27:d9:03:95:75:
ce:26:ee:26:4e:41:41:78:c6:aa:ed:65:5e:a7:b9:
94:b6:13:55:f6:d9:f9:5b:29:d4:71:d3:54:e7:3e:
a3:8c:c6:41:88:b5:71:a9:b8:79:61:38:93:89:be:
d2:c1:99:d9:01:a9:ae:bc:a4:b2:2c:ba:c4:20:57:
07:a7:71:5d:8a:5a:fe:35:fd:fd:aa:25:4c:d1:bf:
64:22:1c:e8:c5:ff:b9:39:72:da:83:c9:34:15:06:
3b:fd:f9:49:e1:f2:2e:76:fa:b3:fd:a9:ba:b4:4a:
17:22:ea:af:a3:b4:1b:db:af:0b:9a:bb:fc:dd:43:
cd:f1:1c:30:f7:ae:38:31:d4:ae:ee:71:ef:93:90:
24:54:74:d8:14:11:c6:98:ac:33:e7:80:1a:83:1e:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:17:9A:2F:FB:60:29:5C:CD:2D:EF:58:D1:C1:3F:33:BE:89:DC
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/rrAXmi_7YClczS3vWNHBPzO-idw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.80.0/20
217.170.96.0/20
217.196.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:7e:2e:f1:46:5c:49:ab:c9:4b:ea:9d:ae:5d:d0:71:c1:43:
58:45:6e:77:c5:21:7f:c9:a1:ea:cb:a4:f1:40:ed:7a:9e:96:
d0:97:75:cc:d8:0a:bd:a6:47:d9:51:51:ab:0e:25:41:ac:a1:
f4:72:b1:60:35:bb:c8:6d:45:c5:05:f8:c1:b3:88:54:42:58:
bb:bd:b5:5b:2f:04:35:e4:f2:82:ec:9b:70:fc:b5:98:fd:81:
46:14:cf:09:66:2c:87:56:4e:9b:d9:90:59:1a:52:2e:67:2b:
5f:41:10:a6:fb:ce:06:4e:5e:fb:4d:4d:86:54:20:81:7f:89:
c8:d8:02:e4:11:9a:3a:b2:e8:13:ad:15:ad:44:ea:3d:1e:0b:
1a:41:d0:5e:93:a4:43:91:88:47:9b:c1:a8:41:94:30:ea:43:
d2:e6:c3:c3:27:54:61:23:38:e5:4d:a2:4e:d9:e4:0c:87:dd:
ac:58:91:59:20:19:27:2f:0e:f9:86:fa:da:2c:dc:04:5c:cd:
f3:bf:be:01:a8:53:5e:16:82:7a:cd:25:23:b5:dd:6b:2f:d6:
0b:78:19:bd:1e:ae:32:bc:31:91:a0:78:8f:df:96:f5:bd:14:
1a:a9:dc:67:d5:1d:0e:b2:43:33:6e:77:08:e0:5e:f5:9a:80:
e9:ff:f3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:54 2025 by rpki-client