Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/6iQ3fqNJd0lpYR-dh6ijl18Gin4.roa
File: 6iQ3fqNJd0lpYR-dh6ijl18Gin4.roa (raw, json)
Hash identifier: uePYL/BKLNhIJMngirAlbRItN9PptgCFClbdH1QPmNk=
Subject key identifier: EA:24:37:7E:A3:49:77:49:69:61:1F:9D:87:A8:A3:97:5F:06:8A:7E
Certificate issuer: /CN=65a854a9bbff13914d051648c11d667c6438b133
Certificate serial: 0182C1EF354AEBA4FA212F15525875F10B3F
Authority key identifier: 65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/6iQ3fqNJd0lpYR-dh6ijl18Gin4.roa
Signing time: Sun 21 Aug 2022 19:44:15 +0000
ROA not before: Sun 21 Aug 2022 19:44:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 217.119.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c1:ef:35:4a:eb:a4:fa:21:2f:15:52:58:75:f1:0b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a854a9bbff13914d051648c11d667c6438b133
Validity
Not Before: Aug 21 19:44:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea24377ea349774969611f9d87a8a3975f068a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:51:c6:78:07:8a:1e:fe:d5:95:f4:8c:66:
7a:ba:de:10:bc:af:55:c0:0b:50:5d:0d:2d:1b:7d:
27:17:6a:31:aa:58:39:d8:03:31:7f:43:b6:96:d6:
37:8a:8b:90:9f:da:4b:08:21:7f:30:59:16:3d:2f:
49:7e:19:41:8d:c3:c2:00:f0:84:50:da:a6:39:7b:
00:02:5d:ee:96:46:41:31:84:da:34:5f:89:85:a8:
51:ca:17:88:fc:ee:c2:02:e6:4d:d2:cb:6c:1a:29:
6f:05:49:e2:00:0a:79:cf:b2:94:f6:12:45:0d:ec:
f4:20:ea:ca:1f:06:ef:73:a3:25:5b:91:e0:d6:df:
86:7d:89:ea:1f:52:ee:28:5d:05:9e:35:4a:fd:e9:
0f:1c:41:98:c1:d8:2e:33:62:89:8a:a3:c1:34:6a:
ca:0d:7f:e3:09:9b:42:00:f7:55:b4:d1:cf:d3:69:
fd:9b:f3:dd:5d:84:4a:f1:23:55:3a:a0:f9:e1:48:
9f:8b:ce:ac:cb:12:ab:15:72:17:cd:ed:ca:71:dd:
25:56:da:d5:d7:5f:84:a3:af:c4:ca:41:19:3d:a1:
18:2b:53:d3:32:a8:fe:c7:7d:d7:9b:53:19:34:0e:
12:67:52:e9:0f:ca:11:08:38:3d:15:db:d3:d7:2e:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:24:37:7E:A3:49:77:49:69:61:1F:9D:87:A8:A3:97:5F:06:8A:7E
X509v3 Authority Key Identifier:
keyid:65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/6iQ3fqNJd0lpYR-dh6ijl18Gin4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b0:6e:ae:1e:d2:7c:ea:be:2a:28:5c:bd:74:49:92:e8:28:
6d:64:47:29:43:67:87:91:09:d2:f8:b4:32:9d:af:ea:95:72:
b9:c2:37:6a:6a:8a:a4:ad:ac:23:a0:c6:b7:1d:ca:ea:c9:df:
70:97:fb:65:cd:c4:50:cb:86:cc:ad:98:b6:c3:60:66:76:97:
9d:95:71:b6:f6:cc:73:53:97:94:dd:9c:e2:24:22:2b:e1:0a:
f8:9d:19:7d:eb:fd:10:88:15:eb:9e:17:9e:aa:80:a7:86:a8:
d6:54:67:7f:9e:83:41:17:b0:bf:4f:16:03:1d:01:cb:c9:5e:
9a:22:87:27:73:33:d4:23:04:ad:29:2b:f7:46:5b:f9:e3:f7:
b5:05:ac:f7:70:8d:de:2a:b2:7c:90:20:5a:43:6b:2c:42:19:
84:e1:b2:f0:a4:12:2d:68:f1:7e:bf:c8:4d:dc:75:f1:aa:4d:
ff:0d:91:40:6d:bd:89:33:23:40:d1:c4:7d:6c:d2:91:43:25:
d1:c5:46:58:d2:d6:d4:a1:aa:82:4c:85:84:7a:02:28:a5:f4:
cc:23:f6:f1:d9:5b:9b:f5:65:3c:0a:0a:3c:01:b2:f3:5e:e6:
64:24:86:01:d8:2b:60:37:17:f7:d1:88:21:fa:cf:af:43:5e:
5d:e7:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:53 2025 by rpki-client