Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/VT7ASlpQ8f3usrOlv1Q2AM9a2dQ.roa
File: VT7ASlpQ8f3usrOlv1Q2AM9a2dQ.roa (raw, json)
Hash identifier: OP3a0hDVw1S67aSe1GVjhRPSJ6vZ2/pGN1mOHCDl5N4=
Subject key identifier: 55:3E:C0:4A:5A:50:F1:FD:EE:B2:B3:A5:BF:54:36:00:CF:5A:D9:D4
Certificate issuer: /CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Certificate serial: B84761
Authority key identifier: 6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/VT7ASlpQ8f3usrOlv1Q2AM9a2dQ.roa
Signing time: Sat 01 Jan 2022 11:02:24 +0000
ROA not before: Sat 01 Jan 2022 11:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201702
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12076897 (0xb84761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Validity
Not Before: Jan 1 11:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=553ec04a5a50f1fdeeb2b3a5bf543600cf5ad9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:db:4c:ad:74:d9:dc:73:50:5b:35:81:34:
c2:6a:48:22:95:a1:88:a1:07:13:ab:7d:46:03:9d:
d3:1a:91:fe:1f:25:c5:a0:97:c2:16:cf:09:7e:d7:
34:6b:48:ef:ec:51:a2:cb:56:cf:f9:88:5e:9e:8c:
dc:ae:17:9a:ce:19:11:27:33:09:70:56:2d:9f:c7:
1a:90:82:d9:7b:5b:b8:d1:89:c0:cc:2e:99:ba:4f:
4a:5f:60:13:8c:f3:9a:1a:01:7f:fd:fa:f5:c9:33:
09:ef:be:da:ca:0d:a8:d8:4e:61:56:bb:09:6f:3e:
d7:79:5e:1e:3b:a8:a9:bc:4c:4f:06:95:7e:67:f4:
17:50:4b:71:ee:14:b3:e8:b4:29:f2:00:5d:fd:13:
5e:c3:06:6a:d4:49:11:36:ed:a1:0b:d4:67:8d:d7:
09:31:16:f9:b8:74:2a:b7:d1:05:d2:e6:fd:a7:2e:
05:fa:05:96:41:04:74:dd:79:ee:8e:75:0b:e6:fc:
cc:f9:20:90:a4:7e:75:c6:69:c9:62:db:26:d6:f1:
a5:bd:d9:d7:ad:34:71:39:50:cc:94:01:ee:e0:7c:
1a:85:ab:77:c7:37:f0:78:23:c5:ff:31:d4:50:82:
a2:5f:47:9e:ae:33:7a:bc:34:0f:43:ff:ef:5a:3a:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:C0:4A:5A:50:F1:FD:EE:B2:B3:A5:BF:54:36:00:CF:5A:D9:D4
X509v3 Authority Key Identifier:
keyid:6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/VT7ASlpQ8f3usrOlv1Q2AM9a2dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:96:51:e7:00:7f:70:56:a7:05:9c:36:47:9f:d4:50:ff:a2:
18:3d:9d:7c:34:c7:1f:f3:7b:de:fd:13:b3:a2:87:1c:51:f7:
1a:f9:d0:be:a4:b5:30:51:2e:89:b1:65:96:81:06:92:e6:5d:
7a:27:9d:38:af:01:a4:3c:21:f7:11:ef:e9:90:25:b4:75:84:
81:b9:27:ac:e8:d5:1c:d3:a2:45:f0:ca:e8:d8:e3:19:62:94:
67:31:4e:59:59:06:f5:ab:e8:ef:05:1e:d6:66:a9:82:60:1a:
7f:be:08:f2:35:7f:41:95:ed:22:99:54:26:fc:0d:f8:da:d4:
b9:b0:ce:fe:df:8f:bd:f9:32:f0:16:cc:ee:89:cc:48:05:71:
b7:95:75:b8:4f:b3:04:74:78:6c:33:ab:e3:58:3b:b0:d9:4c:
93:20:fb:b1:21:74:26:66:26:09:e1:65:e8:0c:5b:ac:ee:34:
2b:e5:80:1a:23:31:ca:32:3b:5f:6d:41:34:68:2e:24:99:96:
f1:5f:d9:a6:3b:e2:3a:35:58:e2:7b:93:64:a3:4b:87:d8:99:
2a:1c:40:7b:21:6a:c3:81:61:f1:9e:9e:fb:e8:5d:ce:fe:84:
3c:92:2f:6a:f8:d2:78:f3:87:e4:98:81:f5:bf:ef:61:bd:4c:
6d:57:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:28 2025 by rpki-client