Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/OE4yasLP3PiA2MPxTMzk1QTx89Y.roa
File: OE4yasLP3PiA2MPxTMzk1QTx89Y.roa (raw, json)
Hash identifier: OB42oUgdw/9nxK9oufFqCsUj9imiowlQ7sLrFVwa+mI=
Subject key identifier: 38:4E:32:6A:C2:CF:DC:F8:80:D8:C3:F1:4C:CC:E4:D5:04:F1:F3:D6
Certificate issuer: /CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Certificate serial: 0177941E
Authority key identifier: 6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/OE4yasLP3PiA2MPxTMzk1QTx89Y.roa
Signing time: Tue 05 Apr 2022 05:52:27 +0000
ROA not before: Tue 05 Apr 2022 05:52:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24613918 (0x177941e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Validity
Not Before: Apr 5 05:52:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=384e326ac2cfdcf880d8c3f14ccce4d504f1f3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:59:13:5c:84:5c:68:7a:de:05:f5:e3:a8:
38:01:19:a1:61:0b:05:1b:c4:f5:63:f6:4a:11:2c:
a2:d8:d3:e0:bd:e4:5b:b3:19:07:c6:dc:8c:06:14:
0c:57:84:5a:08:07:d8:69:56:d5:b1:c8:95:45:95:
ba:61:45:68:8b:f2:cb:02:62:2a:eb:b9:16:0c:5e:
d5:2c:c9:12:c1:22:19:e2:14:a3:48:39:eb:c3:ea:
eb:d2:51:b2:b1:3d:68:fd:52:da:1a:a8:82:7a:81:
1a:e0:0e:05:c8:27:b9:aa:0c:ea:91:94:2d:12:1b:
42:4e:db:7d:6d:62:17:fc:cc:cc:69:98:87:f3:a3:
53:78:30:2f:95:b6:d1:f3:98:b6:8b:59:4b:7b:15:
29:74:87:3c:51:b0:76:13:c4:bd:47:a6:86:bb:65:
3a:bf:e1:67:11:d9:49:92:46:97:d6:0a:b5:5d:f8:
95:0d:b2:a5:4d:2e:74:75:77:4f:56:d5:ee:7e:fb:
42:82:33:04:00:14:a9:91:69:39:17:5d:61:30:aa:
95:f0:89:bf:dc:ea:e9:71:73:d7:2e:e2:6e:14:ab:
1f:c1:ca:d7:74:f2:b8:ab:6b:8e:13:5d:3e:7b:f9:
df:77:06:2b:19:50:6a:48:06:bd:3f:ce:44:fc:57:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:32:6A:C2:CF:DC:F8:80:D8:C3:F1:4C:CC:E4:D5:04:F1:F3:D6
X509v3 Authority Key Identifier:
keyid:6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/OE4yasLP3PiA2MPxTMzk1QTx89Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
57:21:14:3b:65:cb:df:f0:47:ee:3f:b2:48:d7:47:1f:c8:71:
39:a9:30:d9:4a:16:03:1e:85:3c:9b:1d:30:4b:ef:68:fb:d0:
07:48:34:58:db:99:0a:d2:4d:2f:ef:3e:ab:db:ff:5f:d0:9b:
41:c6:d6:59:6a:39:d2:1a:c6:87:18:7d:ee:68:78:0c:35:d4:
dc:78:c5:04:32:06:e2:e8:45:30:e0:6e:0c:38:3b:a9:1b:e0:
96:3b:6d:f9:5a:34:f8:eb:9f:81:8c:66:9a:8d:64:99:6d:72:
fd:ea:50:9a:83:7a:f5:a3:64:e9:99:8e:55:c9:4f:5e:7a:3a:
64:e0:5a:20:18:a4:f7:95:87:c8:36:fb:97:ae:c1:87:14:cb:
49:1f:3e:f7:7b:47:be:98:ed:04:79:66:2f:20:88:77:fb:2d:
4a:9f:24:39:bf:a1:9f:03:f7:7f:f0:7b:2c:08:0c:8f:ac:c7:
41:df:8a:9e:3e:6f:fd:d1:77:b3:96:27:69:d2:77:2c:21:ff:
a4:01:a6:5d:9b:1b:f4:bf:94:1a:a7:37:b7:34:d6:57:4c:9a:
f1:af:53:f8:bb:65:e2:9d:bc:64:ce:23:23:d8:7f:da:af:3d:
4a:41:d0:5b:a5:fb:01:ee:c1:5b:38:1d:c4:c3:5c:45:a9:aa:
1f:42:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:00 2025 by rpki-client