Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa
File: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (raw, json)
Hash identifier: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=
Subject key identifier: 05:4D:0F:CE:7E:21:65:2E:2C:42:EE:6F:F1:0D:50:6D:B8:69:F6:F3
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01941FFA932F4A41678D897BE6A230DB16F5
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34761
IP address blocks: 217.194.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:93:2f:4a:41:67:8d:89:7b:e6:a2:30:db:16:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=054d0fce7e21652e2c42ee6ff10d506db869f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:c9:2d:f8:3c:51:04:30:27:64:3a:c7:b8:
bb:ad:12:b2:e5:95:24:4d:0b:d7:df:bf:c5:d0:02:
ce:4c:f0:f6:6d:b7:6b:84:00:8c:94:7e:6e:f6:be:
07:4b:83:04:36:39:aa:f3:27:af:88:b3:20:13:2d:
db:11:44:cb:12:f6:aa:6b:e2:61:84:d0:db:50:cc:
1a:71:47:1a:a7:d5:c6:13:de:73:b6:34:ec:77:62:
26:b3:d5:73:b4:10:05:e8:98:48:9c:c5:05:09:7a:
f9:57:b5:a4:d9:eb:93:85:f6:48:de:17:57:d4:02:
b7:ae:21:15:27:76:16:b0:a2:2d:cc:8f:a5:bf:89:
57:37:5e:44:e0:ab:11:0a:26:fc:6b:33:46:4b:b3:
b3:72:0c:5f:8a:83:d1:1d:b1:6a:83:86:fd:6d:d0:
62:4d:67:56:bb:9c:28:eb:ec:95:b1:2c:c8:1e:23:
b6:05:1b:38:05:61:29:41:e2:70:07:e1:6b:3e:42:
14:e4:c0:1e:6c:d0:f7:24:05:f1:64:82:6a:b7:ed:
74:cd:dc:a5:82:af:09:6f:25:47:9a:63:95:3f:e0:
4c:cd:70:98:29:ad:29:c3:af:5d:86:5c:a1:d7:52:
4b:01:74:c4:88:33:b1:22:0b:a4:60:28:5e:04:80:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:0F:CE:7E:21:65:2E:2C:42:EE:6F:F1:0D:50:6D:B8:69:F6:F3
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:15:02:61:0d:b3:98:9f:2d:d0:90:65:3b:5b:73:3a:2b:8a:
f2:16:6c:ed:af:15:e6:07:f9:d8:60:f0:2f:ef:48:0b:28:44:
4c:2a:11:e0:9c:14:95:9d:08:45:d6:16:62:e5:c0:12:04:03:
7d:5a:75:b7:3f:53:a7:e7:7b:d5:a2:ff:d2:fd:ce:bd:d0:9b:
96:75:bc:73:3d:c0:ec:5a:d2:a3:90:2e:d1:75:91:6e:64:62:
17:d3:64:73:cb:f2:a6:ab:42:89:a1:a4:73:f7:bf:9c:23:84:
13:ba:d4:a5:2f:e8:32:d0:73:42:ad:d2:3e:1f:b0:9a:3e:65:
7c:61:ab:17:b0:c8:5b:d6:3f:a3:cd:d1:fe:0c:93:52:3b:48:
f1:3a:26:c5:2f:e3:b8:f4:07:05:45:15:9e:9d:a4:e0:f5:5a:
6d:04:27:89:70:49:0c:0d:45:45:2d:30:08:d6:f7:31:96:21:
30:b8:5b:9c:3e:33:98:2f:f6:a7:15:09:60:18:ee:68:15:be:
80:f9:eb:17:23:82:90:8f:30:60:47:8d:ba:74:e7:b1:2b:f2:
87:d9:de:94:9c:96:ff:64:b0:24:85:8b:cf:20:c8:37:69:c4:
01:43:df:00:a5:d1:3f:f5:0f:d7:38:51:9c:47:16:e1:f7:fc:
52:1f:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:55 2025 by rpki-client