Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa
File: 3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa (raw, json)
Hash identifier: b5E7fEkFFhTI5Qk+1okXO6TI7l2fiiznCI57htXMWcg=
Subject key identifier: DE:1C:F8:5A:77:C2:2A:A4:D3:A3:98:31:D8:E8:00:1F:7C:73:DB:03
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 019423D7DDC178EF90EFDD49FBE3AD0EDD65
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa
Signing time: Wed 01 Jan 2025 21:48:56 +0000
ROA not before: Wed 01 Jan 2025 21:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212024
IP address blocks: 209.112.97.0/24 maxlen: 24
2001:67c:17fc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:dd:c1:78:ef:90:ef:dd:49:fb:e3:ad:0e:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Jan 1 21:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de1cf85a77c22aa4d3a39831d8e8001f7c73db03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1e:1c:e7:46:5c:6e:ce:67:36:7e:f5:23:d7:
13:2f:ff:0f:46:fb:db:bc:1f:27:6c:13:f0:8e:35:
b5:0a:34:81:68:24:3c:7e:ad:8c:ef:9a:cf:59:04:
6c:da:89:3c:2b:bd:86:51:51:59:46:a7:8c:9b:1e:
76:53:42:70:84:2c:95:ec:39:4c:bd:e8:2d:52:8e:
4f:0c:29:ed:b1:b0:ba:fd:e0:5d:ba:b1:3d:e5:65:
59:ce:ba:09:4b:66:9e:c5:82:fc:b7:f9:bd:12:91:
b6:26:b3:4d:e5:b4:a4:12:6b:64:5a:31:b9:31:51:
96:db:94:28:b2:79:63:51:59:c8:30:80:61:51:2e:
81:cd:04:fe:15:2e:14:46:12:8b:c9:6f:e9:6f:9a:
b9:d5:74:71:ed:44:b0:32:91:0d:d0:8b:18:2f:9e:
3a:93:c2:37:80:92:0a:c7:f9:82:09:37:ec:eb:54:
20:16:10:1c:67:d3:2a:bb:fc:37:dd:df:db:e1:ac:
bb:00:f3:fd:74:ab:5f:45:66:df:72:00:c0:f5:6d:
2e:91:f2:31:81:04:98:87:8d:e7:9d:26:f0:c4:27:
1b:a7:03:1a:c8:72:b0:b2:a2:4d:15:4c:0e:0f:3e:
2a:66:e2:f5:c7:18:1e:2e:c3:d1:81:f9:9b:78:f6:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1C:F8:5A:77:C2:2A:A4:D3:A3:98:31:D8:E8:00:1F:7C:73:DB:03
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.112.97.0/24
IPv6:
2001:67c:17fc::/48
Signature Algorithm: sha256WithRSAEncryption
c4:2d:9d:40:ae:74:3a:05:22:c6:4a:b1:d9:63:8e:8a:8e:79:
5a:29:83:38:be:40:5e:6f:d6:a4:4f:4d:95:25:cc:5e:13:a4:
78:e5:0d:ad:87:d9:f6:60:23:80:fd:b8:9a:43:de:6e:d8:a1:
cb:96:89:0f:24:18:47:75:0c:f5:46:75:f7:1e:12:32:12:8c:
d3:2c:3e:b3:c3:01:1e:08:b9:a0:43:1b:f7:83:89:de:d4:e7:
41:fa:a2:1d:a1:db:21:da:77:74:1b:9e:34:28:4f:c6:df:7a:
37:e3:43:a3:68:8c:c4:cf:88:dc:85:52:39:18:e1:13:2f:50:
d3:f1:3a:15:48:31:e9:72:58:04:9b:de:a2:39:1a:69:81:b7:
87:c6:0c:1a:ab:e2:f5:67:ed:ba:90:61:a0:e9:21:ec:d1:14:
a2:8b:7c:56:a7:cd:58:fa:a4:59:93:f1:ae:eb:1b:43:5a:ae:
99:59:37:87:18:75:ca:22:7b:51:b0:71:0a:1b:27:b4:b3:36:
8f:79:cc:a2:53:25:d2:98:d7:1e:fd:12:5a:8b:32:fe:bc:8e:
31:a0:66:d0:a5:f0:02:81:05:8f:2e:33:f4:23:44:a2:43:bd:
86:9e:cb:e3:91:d3:35:05:d5:b2:16:78:e0:d2:3b:4a:a3:d3:
46:f3:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:46:34 2025 by rpki-client