Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/ejP-cqngAl2WeEUv13m8XETr7WY.roa
File: ejP-cqngAl2WeEUv13m8XETr7WY.roa (raw, json)
Hash identifier: LoPRyo03v+sBUkzNnzQYBljjeo3cKGIRbIW1IcB6h4c=
Subject key identifier: 7A:33:FE:72:A9:E0:02:5D:96:78:45:2F:D7:79:BC:5C:44:EB:ED:66
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 019426D9E473B83405EE00CF085E7EA3AAEA
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/ejP-cqngAl2WeEUv13m8XETr7WY.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 217.145.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e4:73:b8:34:05:ee:00:cf:08:5e:7e:a3:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a33fe72a9e0025d9678452fd779bc5c44ebed66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:f6:2d:aa:59:49:3c:7c:03:9e:cd:22:93:
11:8b:e7:50:b5:b9:15:44:81:c3:85:cb:04:f4:fe:
47:8f:08:59:70:96:7c:2d:9b:0e:ce:8e:90:1c:56:
cc:10:e1:bb:13:e7:23:f7:31:02:25:7b:95:96:2e:
fe:c6:7c:ab:18:30:b0:d2:e8:20:50:cf:4c:75:c2:
d9:fa:f6:4b:4e:b5:72:9d:46:e9:4e:63:a8:86:20:
e7:df:50:3e:11:f1:b2:e6:58:a8:ab:c7:21:a2:80:
58:cc:20:2c:ca:cc:21:f3:b8:ba:e3:f4:be:a5:b1:
d4:a7:f2:da:e0:b5:ed:28:bc:f7:fa:ce:aa:d8:77:
ca:86:07:cf:3b:66:54:ef:85:82:7c:42:3e:cc:d5:
06:33:02:ae:d5:5a:ac:12:c7:05:16:b9:0a:bc:68:
7d:5c:24:5a:68:b0:f1:f6:59:df:ab:02:a3:d9:38:
98:3d:68:88:ae:e3:79:62:9e:7b:e2:9d:ce:bc:72:
85:9a:a3:19:cc:d2:f9:0b:d1:c9:9a:d6:ae:4a:ad:
e1:42:7a:e1:8e:26:f7:f1:2e:18:9e:02:28:82:10:
90:33:d2:d7:68:35:4f:21:93:bb:3e:2a:12:14:3f:
74:a2:b7:5e:0d:4d:f7:9c:f4:bb:15:46:78:74:af:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:33:FE:72:A9:E0:02:5D:96:78:45:2F:D7:79:BC:5C:44:EB:ED:66
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/ejP-cqngAl2WeEUv13m8XETr7WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:94:66:4a:08:98:e5:8a:d8:51:2d:4a:36:55:f8:e6:25:3e:
43:cd:4e:95:0f:88:cc:b8:bb:61:f8:3d:1b:18:9d:2b:40:f2:
b3:63:c4:1f:99:5f:f2:a7:20:3a:d5:7d:33:fb:39:e3:15:3d:
e9:fd:af:ec:c8:12:17:7e:0b:1e:b2:45:c8:9d:17:fe:45:44:
a0:2f:0a:85:c6:25:a6:ad:c9:96:52:7e:40:cf:15:03:fc:de:
cc:7d:eb:0e:bb:03:68:1d:bd:93:23:39:e1:df:7a:cc:37:1d:
b5:35:82:f3:f8:d9:94:24:a7:9c:36:63:cd:52:ff:b0:d2:9c:
4d:7d:3c:b3:85:4a:8b:43:53:d2:72:4b:7c:6c:8e:5f:74:81:
fe:09:e6:dd:01:24:8a:9d:d1:0c:7e:e9:12:d9:a9:6d:b1:42:
f2:6a:ef:90:fe:35:88:0a:81:11:cd:57:4f:d3:72:03:fa:33:
34:33:17:c6:76:56:7c:7a:ce:13:52:47:cd:1e:be:43:47:26:
16:6b:ab:2a:14:ed:11:b0:14:41:08:90:fa:59:24:f2:80:90:
02:a0:10:af:63:1d:e8:e5:e4:a7:2b:cb:99:d4:0a:45:16:51:
14:52:cf:72:a9:bd:89:71:97:1c:69:a1:69:99:e3:cd:68:b9:
0c:7c:19:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2eRzuDQF7gDPCF5+o6rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjI4OWNiYjgxNzlmZGYzOGU5ZjUzMmM5Y2Q3MjkxYjRm
NWM0MmQwHhcNMjUwMTAyMTE1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTMzZmU3MmE5ZTAwMjVkOTY3ODQ1MmZkNzc5YmM1YzQ0ZWJlZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6X2LapZSTx8A57NIpMRi+dQtbkV
RIHDhcsE9P5HjwhZcJZ8LZsOzo6QHFbMEOG7E+cj9zECJXuVli7+xnyrGDCw0ugg
UM9MdcLZ+vZLTrVynUbpTmOohiDn31A+EfGy5lioq8chooBYzCAsyswh87i64/S+
pbHUp/La4LXtKLz3+s6q2HfKhgfPO2ZU74WCfEI+zNUGMwKu1VqsEscFFrkKvGh9
XCRaaLDx9lnfqwKj2TiYPWiIruN5Yp574p3OvHKFmqMZzNL5C9HJmtauSq3hQnrh
jib38S4YngIoghCQM9LXaDVPIZO7PioSFD90ordeDU33nPS7FUZ4dK/iUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHoz/nKp4AJdlnhFL9d5vFxE6+1mMB8GA1UdIwQY
MBaAFBciicu4F5/fOOn1MsnNcpG09cQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGIt
Zjc0YmFhMTJmZGM5LzEvZWpQLWNxbmdBbDJXZUVVdjEzbThYRVRyN1dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yODllMzgtYWM5My00ZThiLWEwOGItZjc0YmFhMTJmZGM5
LzEvRnlLSnk3Z1huOTg0NmZVeXljMXlrYlQxeEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZG4MA0G
CSqGSIb3DQEBCwUAA4IBAQCLlGZKCJjlithRLUo2VfjmJT5DzU6VD4jMuLth+D0b
GJ0rQPKzY8QfmV/ypyA61X0z+znjFT3p/a/syBIXfgseskXInRf+RUSgLwqFxiWm
rcmWUn5AzxUD/N7MfesOuwNoHb2TIznh33rMNx21NYLz+NmUJKecNmPNUv+w0pxN
fTyzhUqLQ1PSckt8bI5fdIH+CebdASSKndEMfukS2altsULyau+Q/jWICoERzVdP
03ID+jM0MxfGdlZ8es4TUkfNHr5DRyYWa6sqFO0RsBRBCJD6WSTygJACoBCvYx3o
5eSnK8uZ1ApFFlEUUs9yqb2JcZccaaFpmePNaLkMfBmh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:04 2025 by rpki-client