Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/kYlX8uk50adCvLD80f5Fzepy0uA.roa
File: kYlX8uk50adCvLD80f5Fzepy0uA.roa (raw, json)
Hash identifier: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=
Subject key identifier: 91:89:57:F2:E9:39:D1:A7:42:BC:B0:FC:D1:FE:45:CD:EA:72:D2:E0
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 019422201F170FA17496468CAFDA16E75A2B
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/kYlX8uk50adCvLD80f5Fzepy0uA.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200723
IP address blocks: 217.26.219.0/24 maxlen: 24
2a13:4a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1f:17:0f:a1:74:96:46:8c:af:da:16:e7:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=918957f2e939d1a742bcb0fcd1fe45cdea72d2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:4e:1f:d9:32:17:60:06:aa:77:ee:66:cf:
78:c0:98:8b:5f:76:f4:33:7f:1a:ce:f4:be:bd:73:
9b:0f:20:f5:a6:d0:c2:d4:18:00:1a:b7:e1:49:b4:
d3:46:ef:ea:9d:87:61:5b:c3:12:3f:0f:d5:fb:9a:
00:6f:a2:70:56:d7:be:fb:1b:e8:09:30:cd:97:95:
aa:a4:81:15:fb:32:40:85:9b:ad:bf:05:74:3f:f1:
4b:21:ea:df:97:cf:ef:91:b5:9f:81:fd:21:65:f4:
5c:82:5c:1c:fa:3b:bf:5c:3a:4a:37:b5:d3:aa:bf:
e4:c4:db:86:2f:57:73:d3:ad:b5:86:27:df:7c:ac:
5f:3d:f0:f0:90:4b:8d:e7:5f:5c:8b:2e:12:e9:3f:
17:03:db:7f:ee:97:e4:77:78:fa:37:72:08:ee:6b:
3b:27:b6:d2:26:b0:79:b6:bc:ff:a7:72:ed:37:ca:
5e:d9:6f:b6:5b:db:5f:55:11:30:ed:16:dd:e7:76:
46:bb:60:1b:ce:b3:13:dd:2c:06:bd:ec:09:70:b5:
e0:68:d8:0b:95:a7:ed:cb:1a:18:8c:77:87:24:2c:
72:e8:55:66:b7:14:65:59:fb:5a:a6:7f:77:f5:13:
39:50:56:46:da:f6:92:1c:2a:ce:0f:37:0f:cc:4e:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:89:57:F2:E9:39:D1:A7:42:BC:B0:FC:D1:FE:45:CD:EA:72:D2:E0
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/kYlX8uk50adCvLD80f5Fzepy0uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.219.0/24
IPv6:
2a13:4a40::/48
Signature Algorithm: sha256WithRSAEncryption
0b:21:49:65:96:12:8a:d5:66:1d:a8:68:fe:89:47:f3:7c:d3:
68:f1:59:55:df:a3:15:c0:96:52:f3:88:5f:84:dc:3c:f1:ce:
28:6a:76:2b:b3:ce:2a:de:08:8f:72:0e:78:95:72:33:37:48:
26:c6:8a:fe:4d:4d:f8:01:07:68:88:52:a6:51:5f:88:d7:64:
a3:06:6e:0b:b1:ef:69:2d:9e:ca:5c:7b:da:32:db:24:d6:16:
5f:3d:a6:e1:da:77:53:13:64:12:c4:54:31:af:10:75:17:57:
3a:a1:2e:5a:f6:8a:02:c6:24:1b:8e:3a:1a:ad:ce:34:da:bc:
52:02:df:b6:23:ad:34:dc:4c:b4:74:ed:6e:47:91:6d:dc:aa:
71:36:5b:63:21:fd:b3:1b:bb:b8:cc:0e:c1:1e:f4:d6:d9:86:
73:0f:ee:fc:fd:a4:ff:b6:6f:c5:7b:ca:30:20:eb:a5:87:20:
ec:ae:33:26:34:4a:ff:84:eb:b0:63:67:53:fe:82:67:7b:50:
a1:29:c5:da:90:1e:b2:74:94:f4:ec:6d:91:0b:77:1c:ef:da:
d0:03:95:7a:e9:55:1f:26:92:ff:f1:06:00:13:bc:e6:0f:7d:
56:27:7c:a5:2c:9c:df:d9:fd:78:9f:c8:9d:40:3d:28:8c:0f:
4a:41:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:49 2025 by rpki-client