Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Md1_5pLHzxFBPbt80h5l9mWOXO4.roa
File: Md1_5pLHzxFBPbt80h5l9mWOXO4.roa (raw, json)
Hash identifier: eQPAA9eg6SkkK5O5IP04mO8arXP6gcUDjvLLStHWmlA=
Subject key identifier: 31:DD:7F:E6:92:C7:CF:11:41:3D:BB:7C:D2:1E:65:F6:65:8E:5C:EE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484E5D7344A33FAB64512040402742
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Md1_5pLHzxFBPbt80h5l9mWOXO4.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216135
IP address blocks: 217.76.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4e:5d:73:44:a3:3f:ab:64:51:20:40:40:27:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31dd7fe692c7cf11413dbb7cd21e65f6658e5cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:07:17:04:11:69:4a:eb:a0:ad:64:0a:1c:7c:
0c:65:8a:ff:a0:9f:32:56:ce:80:8e:fe:c4:16:bc:
0a:2a:fa:3d:1f:1d:bc:28:fc:f9:d8:b7:e4:92:c3:
d9:a1:b5:ed:e3:73:3d:d4:2a:c9:2e:37:73:90:03:
a7:bc:35:f3:a0:ee:88:68:36:d6:03:97:4b:f0:2a:
e7:cf:6e:d9:e1:9f:92:50:bb:3c:ba:cd:15:81:64:
24:64:8a:27:14:41:04:28:a6:29:fe:c7:3b:3d:eb:
3a:da:c8:f3:56:7c:e1:9a:ca:4b:f5:9f:b5:cf:5f:
65:45:0c:96:1b:05:5b:2d:e3:4a:4f:d9:ad:1c:01:
64:dd:88:7e:90:d7:4c:84:68:51:c5:5c:80:ab:64:
57:5a:05:ad:78:ec:93:fd:2f:f4:c6:74:49:c8:6c:
13:bc:50:48:e8:a8:e2:50:ba:01:2d:e8:15:5a:f5:
a4:b7:a6:7e:f9:2b:fe:29:f6:a8:37:71:88:7c:96:
2e:54:f0:02:9c:61:dc:ff:af:e7:01:f1:c4:30:7f:
72:a3:4d:75:c0:42:07:96:eb:a6:6b:83:12:6f:03:
c6:70:43:7f:66:a2:24:35:22:9c:8c:22:a7:11:e9:
2c:90:32:c5:ea:7c:a3:08:6f:2b:94:9a:a4:8c:b4:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:7F:E6:92:C7:CF:11:41:3D:BB:7C:D2:1E:65:F6:65:8E:5C:EE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Md1_5pLHzxFBPbt80h5l9mWOXO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0b:8c:3d:35:44:73:dc:f9:b5:20:d0:7d:f2:38:6f:1b:ac:
73:16:be:8e:76:38:4b:53:d1:4c:a6:cf:fb:12:f5:02:cd:c4:
8b:a9:cd:7b:a9:9b:b0:e6:51:70:e9:bd:a9:a8:a5:e0:05:93:
1b:9a:7c:0d:90:5e:d3:e2:92:d0:ca:24:3a:99:aa:a1:1d:77:
72:b9:2c:3f:79:c0:d2:76:22:27:3d:48:43:e9:11:d1:cb:27:
23:20:45:b7:c5:68:04:b9:50:fa:e7:95:46:13:78:04:4e:66:
cb:81:ae:f0:58:50:57:f9:d5:07:1f:a0:62:f5:b7:6b:da:39:
ad:2c:1b:a5:ca:b2:38:99:c9:72:44:e5:93:35:fd:25:27:6d:
0f:2e:22:62:67:33:2c:f2:0a:eb:0a:16:cd:7f:a5:32:e9:6d:
62:9e:9f:64:26:e6:5c:43:0a:71:53:cc:b6:db:30:18:64:ff:
0c:f4:54:20:bc:1d:c6:24:25:16:35:35:11:ab:7a:75:2b:69:
de:57:ef:a4:cb:65:fa:70:32:29:c6:ff:42:48:79:1e:9d:41:
87:c9:0b:65:86:5f:b4:36:bf:c5:13:45:61:2d:23:2a:00:01:
e3:90:8c:c4:7f:48:63:8d:3d:e2:51:2f:c6:8f:9a:a7:1e:01:
c4:a8:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:36 2025 by rpki-client