Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/C-GjJnoxYIcUCp06r2CgR-CjMx8.roa
File: C-GjJnoxYIcUCp06r2CgR-CjMx8.roa (raw, json)
Hash identifier: yOPBP2q7/5koBWj5G710Y7JoUlDMk0DimezGghRW90o=
Subject key identifier: 0B:E1:A3:26:7A:31:60:87:14:0A:9D:3A:AF:60:A0:47:E0:A3:33:1F
Certificate issuer: /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial: 018CC3B6EA5268772016BCBC329CCA24D0B0
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/C-GjJnoxYIcUCp06r2CgR-CjMx8.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ea:52:68:77:20:16:bc:bc:32:9c:ca:24:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0be1a3267a316087140a9d3aaf60a047e0a3331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:a8:2e:6a:a6:17:a8:39:99:b6:90:aa:58:
2a:54:d7:60:8f:3b:89:2f:fd:0f:e0:93:b3:bf:f6:
80:89:f3:8f:f8:5d:29:b3:28:c1:0e:03:0f:43:2a:
2e:2d:bc:ee:65:7a:13:2c:1b:11:b6:39:6e:d5:4f:
6e:f1:ab:bd:91:f8:67:93:f0:8e:f3:14:df:39:31:
7c:fb:c0:bc:31:22:86:ca:34:22:d0:d6:13:58:43:
c0:6d:0d:74:a5:4f:66:f0:21:41:e3:93:90:56:25:
0a:16:fa:9e:f8:c5:7f:de:aa:49:50:9f:47:3e:40:
ce:4a:57:5d:e9:aa:a5:ea:f7:02:b5:e0:0b:06:29:
49:b4:53:9c:b3:bc:97:b3:8d:49:51:92:6b:be:92:
e7:d4:93:3b:51:91:da:fc:07:43:c1:99:90:75:26:
36:b8:ae:e5:95:94:a8:bf:9d:7f:ba:e6:fe:99:b1:
16:e1:77:01:8b:cc:91:01:d4:48:c8:ae:a4:d0:88:
1a:9b:bc:53:52:36:d0:68:b9:b2:cf:7f:a5:7e:b7:
64:e0:12:e1:05:d6:64:3d:e5:88:7c:88:b0:e5:31:
8d:8c:d9:1c:81:77:21:f6:37:96:ba:92:95:e9:14:
0c:38:fa:28:dd:03:bf:dd:55:fd:e9:63:d8:72:33:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:A3:26:7A:31:60:87:14:0A:9D:3A:AF:60:A0:47:E0:A3:33:1F
X509v3 Authority Key Identifier:
keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/C-GjJnoxYIcUCp06r2CgR-CjMx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.181.0/24
Signature Algorithm: sha256WithRSAEncryption
85:74:e5:d3:0d:0f:ff:5d:1d:13:d9:c0:3a:c5:dc:9d:9a:b9:
cf:cf:de:00:e5:eb:33:0e:97:8e:b6:17:07:94:ba:8e:47:8c:
85:9d:40:a8:8d:c9:91:bc:a5:48:37:a7:02:b2:e3:7d:35:03:
60:a2:df:20:49:f8:4e:7e:fb:fd:71:4f:48:44:32:9d:bc:b0:
15:cb:99:0b:27:f4:22:ff:42:1d:c2:27:4f:ee:5d:13:1e:44:
b3:a9:c9:5e:98:76:8a:04:5b:9e:f3:2d:1f:91:6a:5a:fb:1c:
50:99:1c:3d:48:86:f4:f9:99:e6:90:64:89:c5:59:9e:f9:ea:
d6:1d:4f:18:6c:b3:89:d0:bb:2e:92:0e:b1:bd:17:8f:30:f7:
93:db:f9:29:80:0c:53:e5:96:5c:d1:67:fe:a6:51:bf:28:01:
60:ee:ad:c4:7c:5b:3e:c5:e1:8f:c2:ab:a3:01:f1:4c:f0:d4:
d2:04:d8:b8:fb:92:13:18:4c:ff:81:f6:b7:67:05:66:82:42:
21:b2:fd:87:02:40:0f:ab:5f:b7:28:88:28:0a:c3:0f:43:a5:
37:fb:b2:d0:df:a1:1a:35:07:2d:a0:a1:54:f5:c6:88:e6:32:
00:d8:dd:3c:e0:e1:fa:0c:22:65:73:8f:99:a3:42:dc:6b:30:
82:62:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:49 2025 by rpki-client