Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/FEmq_LSCw3qARbc_REHnTueFXv0.roa
File: FEmq_LSCw3qARbc_REHnTueFXv0.roa (raw, json)
Hash identifier: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=
Subject key identifier: 14:49:AA:FC:B4:82:C3:7A:80:45:B7:3F:44:41:E7:4E:E7:85:5E:FD
Certificate issuer: /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial: 019420D5EB010E4AD628263C065D06211004
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/FEmq_LSCw3qARbc_REHnTueFXv0.roa
Signing time: Wed 01 Jan 2025 07:47:57 +0000
ROA not before: Wed 01 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20879
IP address blocks: 217.28.143.0/24 maxlen: 24
2a12:26c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:eb:01:0e:4a:d6:28:26:3c:06:5d:06:21:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1449aafcb482c37a8045b73f4441e74ee7855efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:12:3d:9b:57:7d:c3:9e:69:12:b9:00:d9:
bb:ef:cd:fd:13:b1:8e:39:19:a1:99:b7:dd:a0:b5:
20:7d:0f:52:be:41:a0:e7:85:9b:ff:fa:12:f3:24:
29:19:e9:45:a6:0d:5e:22:5d:a5:fc:0a:dc:9c:1d:
78:02:a6:d5:eb:6d:0b:19:a1:29:29:e3:ae:f7:7e:
f5:5a:87:d9:6d:c3:57:39:2e:b2:d9:54:90:24:0a:
f0:39:07:c3:6b:93:33:bd:9d:f6:21:72:a6:02:98:
be:4b:96:78:23:40:5a:11:4a:bb:0d:d7:21:7b:1c:
fd:49:60:e7:fb:01:0c:3d:e8:e0:7c:f9:26:1b:1d:
e0:82:80:0d:83:99:0d:66:82:d8:65:a7:89:8d:7f:
0b:54:2b:49:1b:0f:59:6d:d1:35:0a:c4:12:5c:bf:
a1:ee:e6:6d:c1:b5:0a:c5:7b:9b:f6:b1:da:43:97:
7a:7f:bb:15:68:ff:57:95:c1:2d:92:be:c2:f8:36:
56:8e:5e:f6:7d:1a:4f:c6:55:f4:51:7e:0e:82:c5:
c9:56:99:15:f2:6f:5e:cd:15:62:86:a3:bc:30:9d:
2f:08:56:f8:e5:f0:99:df:b6:5c:54:90:10:39:85:
dc:ea:b8:0e:21:2e:35:2a:b8:e6:36:e7:c3:11:0b:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:49:AA:FC:B4:82:C3:7A:80:45:B7:3F:44:41:E7:4E:E7:85:5E:FD
X509v3 Authority Key Identifier:
keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/FEmq_LSCw3qARbc_REHnTueFXv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.143.0/24
IPv6:
2a12:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:b8:49:c9:ad:59:aa:dd:ae:5f:ba:63:4d:c4:7f:e5:b5:5d:
57:43:01:a8:74:c7:95:4b:b2:b8:22:ec:8b:1a:57:7c:ab:cc:
14:80:50:56:21:10:ea:cc:55:77:23:7c:2e:7e:b2:d2:9e:2f:
eb:a7:33:4c:cb:bd:36:1d:12:d6:48:79:89:96:16:fb:28:eb:
2e:56:ae:59:3b:cb:39:55:37:3f:f3:ec:06:62:c7:bf:35:b6:
99:14:3d:b1:c1:51:ad:dc:9d:95:3f:e5:5a:40:fe:b4:a0:2d:
38:79:72:2b:6e:0b:5d:5d:3e:f3:9d:36:c3:75:3b:35:84:8e:
eb:19:6e:20:c7:4f:f9:80:1f:97:ff:fa:54:71:10:60:b3:09:
34:6f:4d:eb:66:92:e0:be:6a:1d:e6:ce:14:ae:a0:99:3c:38:
b9:84:58:af:10:87:61:6a:c3:19:3e:13:88:08:2b:e2:94:64:
4c:6c:b0:94:59:15:a4:ed:5b:35:ef:d4:a8:9c:37:0c:9a:45:
31:b9:7c:5c:91:bd:1e:6f:22:69:86:00:89:89:43:b0:4b:77:
c5:c2:3a:84:30:a4:49:00:38:56:c2:22:ed:d2:9c:2e:ee:b3:
0a:37:37:c5:15:85:4d:49:a2:35:e6:ab:fb:84:0e:67:e3:bd:
6b:a4:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:35 2025 by rpki-client