Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/aKrZDNwyMD17i20XEqZ8STxTcFE.roa
File: aKrZDNwyMD17i20XEqZ8STxTcFE.roa (raw, json)
Hash identifier: U1DBT1FOjeUg6VThhoXckINH89RRjsQjBd+5/E4VqdE=
Subject key identifier: 68:AA:D9:0C:DC:32:30:3D:7B:8B:6D:17:12:A6:7C:49:3C:53:70:51
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274833563E17428B9F780C49D46729C7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/aKrZDNwyMD17i20XEqZ8STxTcFE.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27717
IP address blocks: 217.26.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:33:56:3e:17:42:8b:9f:78:0c:49:d4:67:29:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68aad90cdc32303d7b8b6d1712a67c493c537051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:6b:e5:9e:57:6f:28:23:d1:17:5b:1b:65:
04:1b:71:d9:b0:a8:e2:bb:ca:1e:55:75:c0:17:4a:
e5:5d:db:15:81:df:56:5a:5d:8e:df:33:c7:70:55:
1e:4f:86:ad:08:80:49:36:d4:5f:a1:4c:10:e8:26:
95:77:ba:7b:c8:59:d6:2a:aa:26:ea:ab:54:0d:3d:
9d:5e:aa:d9:c0:f8:78:f3:5e:98:c4:bb:c0:c9:36:
dc:a0:df:50:9a:f7:1b:41:c8:ad:0e:14:7d:d8:37:
e3:26:26:4f:58:04:9e:f0:2b:c1:ff:12:2c:bc:bc:
6c:7b:9c:3d:37:a0:9a:b8:2b:2a:8f:e4:43:62:a9:
db:bc:74:59:81:eb:f4:25:9d:86:b9:44:17:d2:0b:
80:96:2d:61:e4:85:a1:6c:e3:26:7b:e3:4f:59:c4:
c1:ef:42:d9:ff:a5:46:ec:3b:4a:e2:d0:e6:38:a9:
54:ef:f4:ab:75:7d:ca:14:45:e7:bc:4e:fd:09:59:
43:4c:db:3a:35:54:dd:0a:5a:f5:5c:21:ae:47:aa:
6c:5c:13:15:69:d0:f0:53:a7:91:2c:e6:20:6b:88:
31:ee:0a:7d:1e:31:38:40:7c:a5:5b:b2:5e:c7:dd:
1a:4a:93:31:07:51:fb:fe:7d:9c:0d:98:bb:a0:42:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AA:D9:0C:DC:32:30:3D:7B:8B:6D:17:12:A6:7C:49:3C:53:70:51
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/aKrZDNwyMD17i20XEqZ8STxTcFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:96:f6:d0:54:0f:8f:85:19:aa:d5:fc:d1:25:14:3d:17:45:
fa:18:90:84:0a:4e:d9:56:1b:96:85:e7:e6:b8:df:b3:42:38:
cc:40:f1:60:cb:45:8f:6d:f5:85:db:40:83:3a:53:b4:b5:a3:
66:9c:68:74:8f:97:21:7d:d4:df:7f:4e:2e:56:d8:9d:07:93:
d6:b0:cb:3a:15:38:33:d9:59:d6:af:16:1e:1a:d1:4c:f2:0f:
d0:44:64:82:39:fa:d4:fc:99:9f:f6:71:b7:f6:0e:76:d1:da:
fc:bc:be:d9:00:27:0a:76:71:a4:21:dd:58:ff:27:0f:20:ac:
83:62:31:c2:4f:ab:04:9c:d7:3c:83:66:e0:68:71:49:da:07:
e4:1e:0e:a9:af:58:91:91:52:63:37:40:d0:05:13:4c:10:a0:
20:94:63:12:5d:1f:71:be:ed:1d:07:53:0f:24:fd:6f:0a:b2:
fc:36:d8:b3:80:8e:55:df:4f:32:99:cb:40:42:7c:1b:3f:4f:
5a:dc:fe:cb:63:c9:4e:68:20:5b:5b:95:b3:5b:26:50:ed:cf:
78:35:57:a0:94:e3:10:c3:3b:81:49:1e:0f:74:39:4d:ee:9a:
8a:e4:49:b4:84:55:02:af:d0:95:61:f1:8a:89:10:77:7b:1b:
6a:1d:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:44:26 2025 by rpki-client