Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa
File: DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa (raw, json)
Hash identifier: 7LR5rGZdheek5FSN9VgvzhBSKbDgdVslo+r8yKVN2G0=
Subject key identifier: 0C:5C:83:67:42:9C:C1:78:A8:43:C6:3E:EF:F3:BB:06:B7:92:27:47
Certificate issuer: /CN=702c39f18682077f072b62116fd4f1690874af96
Certificate serial: 0194228DDB266CB23EAB1F65A2C1B5021141
Authority key identifier: 70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35133
IP address blocks: 217.18.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:db:26:6c:b2:3e:ab:1f:65:a2:c1:b5:02:11:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702c39f18682077f072b62116fd4f1690874af96
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c5c8367429cc178a843c63eeff3bb06b7922747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:b8:88:ec:a0:7e:64:5c:ea:cb:b8:a1:88:
ac:da:9f:66:f7:1d:0e:57:fd:0b:97:18:bc:fa:a0:
5b:45:01:1d:cc:17:d5:a7:02:ba:8f:44:37:4a:40:
12:90:e7:4a:1d:31:5c:f6:07:d0:a5:e8:4b:ce:5e:
44:2f:d5:a7:37:f7:ae:c0:5a:4b:70:f1:3a:ed:07:
33:a8:66:85:91:b6:d4:68:ec:16:d2:a0:60:07:48:
41:96:08:88:57:a4:f2:25:bd:01:a7:1e:a7:37:43:
b3:38:bb:62:f3:6d:bc:01:64:57:bc:52:8a:6f:17:
54:68:ed:85:5d:f3:55:c4:9c:7b:df:6c:48:7f:0d:
ee:e5:56:54:43:ab:89:52:ea:dd:8e:87:3f:eb:d4:
d1:e1:90:b5:11:3a:1d:76:f8:40:82:10:b6:07:5a:
a0:77:e9:c9:48:3c:c1:75:e6:2b:09:25:2e:d0:bc:
4e:c7:aa:b9:22:e7:36:18:c0:77:f0:6e:36:44:c8:
30:54:6a:d8:3c:d4:20:21:75:97:75:0b:ab:35:9f:
fd:cb:a5:73:8f:8e:ff:13:a2:a2:a3:5e:57:b4:77:
f2:ab:cb:ca:fc:cd:a9:b2:26:c0:92:d1:f1:42:0b:
03:f9:ac:45:b2:fa:68:be:dc:91:a8:04:ae:6c:29:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:83:67:42:9C:C1:78:A8:43:C6:3E:EF:F3:BB:06:B7:92:27:47
X509v3 Authority Key Identifier:
keyid:70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.95.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e4:13:5a:48:65:63:f6:ae:81:90:66:a7:90:f7:96:7d:bc:
53:0d:03:8e:4a:4c:94:45:4f:1a:b8:c7:56:29:68:47:92:97:
50:d6:85:db:e4:c6:84:6c:c7:65:d4:d8:e1:74:6f:5c:1e:43:
fa:f9:78:19:10:28:86:70:86:28:20:33:4e:ff:c6:f1:2c:87:
6d:bd:e4:ad:bc:d1:d3:7b:28:b6:57:df:56:c2:b7:62:cc:01:
bc:b0:2f:72:9f:26:01:86:f2:1c:8f:b3:32:c3:39:63:e9:f7:
d4:b4:73:73:56:a7:6a:61:6f:5d:f6:b5:2d:24:57:50:64:bd:
04:f2:97:11:b9:c2:bc:f9:74:19:d9:fb:32:7f:e7:0c:b8:99:
ec:d5:9d:6b:bc:d9:bd:00:e4:f6:62:6b:cb:2f:48:30:a8:a0:
84:7e:b8:04:8b:96:26:46:0d:85:75:64:7d:25:a6:e2:c5:d1:
f8:ea:20:c6:1b:2a:e3:8b:37:c0:a2:37:a6:8b:fc:92:f5:1f:
a4:a8:37:cb:ca:42:56:b0:78:7c:a6:0a:fe:54:45:f3:7c:7f:
16:5b:cc:e2:c8:65:0b:36:67:b7:e4:d5:25:ab:58:10:e4:6a:
72:3e:c2:fd:5e:f0:ac:8f:aa:6e:4a:53:86:77:c1:ae:b0:fa:
63:89:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:59 2025 by rpki-client