Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/3vZog35fA7A8208htG6MPJHCfRQ.roa
File: 3vZog35fA7A8208htG6MPJHCfRQ.roa (raw, json)
Hash identifier: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=
Subject key identifier: DE:F6:68:83:7E:5F:03:B0:3C:DB:4F:21:B4:6E:8C:3C:91:C2:7D:14
Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial: 019426D936E41C7F427AE931B211BEB63166
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/3vZog35fA7A8208htG6MPJHCfRQ.roa
Signing time: Thu 02 Jan 2025 11:49:16 +0000
ROA not before: Thu 02 Jan 2025 11:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25584
IP address blocks: 217.173.205.0/24 maxlen: 24
2a04:9444::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:36:e4:1c:7f:42:7a:e9:31:b2:11:be:b6:31:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Validity
Not Before: Jan 2 11:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=def668837e5f03b03cdb4f21b46e8c3c91c27d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:28:ce:45:37:09:a2:56:33:d4:14:68:54:
40:1a:4a:9d:b3:dc:84:f2:79:52:04:0d:f8:85:1e:
96:e0:aa:54:c2:05:95:2c:d1:2a:e6:b5:07:e8:38:
f3:b0:0c:15:07:e8:47:d3:d9:9d:36:da:50:c9:6d:
9b:9c:00:6c:82:9d:e6:61:d6:5b:a6:53:31:15:7e:
14:d9:62:2a:76:27:b7:e5:80:a2:37:e7:2a:1f:84:
25:63:d2:a0:18:f1:5a:a2:7d:b4:0a:d7:fb:16:aa:
8f:9e:ce:83:7e:aa:c2:df:cd:d8:5c:c0:07:28:20:
0f:b5:d2:15:5f:ac:78:58:8c:ed:57:13:3d:d8:e0:
ad:03:e1:ee:5c:9e:c2:85:52:0a:6f:81:d6:4c:80:
82:7c:73:04:25:a2:d7:9e:22:b9:55:e2:39:fb:80:
9e:3a:f3:13:45:de:c8:ed:94:e1:50:37:7f:06:2b:
d7:3d:9c:ed:08:22:96:01:9c:e5:4a:1d:92:5c:04:
5d:17:52:4e:86:ec:ca:c2:f1:7b:97:90:5f:b6:4b:
41:77:fc:2b:41:26:84:ff:62:89:10:18:ce:51:2d:
48:f8:26:34:ba:f2:91:4e:80:7f:d6:ea:ff:a6:41:
89:81:ca:97:e2:bd:93:62:30:0d:9d:d7:db:c0:39:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:68:83:7E:5F:03:B0:3C:DB:4F:21:B4:6E:8C:3C:91:C2:7D:14
X509v3 Authority Key Identifier:
keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/3vZog35fA7A8208htG6MPJHCfRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.205.0/24
IPv6:
2a04:9444::/30
Signature Algorithm: sha256WithRSAEncryption
18:97:f8:dc:ee:38:b8:46:0f:99:bc:b0:1d:b3:e4:86:8e:64:
42:25:e0:1a:96:ec:2f:6f:ea:22:bf:7d:46:e4:f5:76:7a:b4:
4f:85:9b:90:fb:1d:12:6f:2e:d1:c3:a9:9c:b0:19:c5:8d:21:
84:70:22:86:cc:a9:e5:33:aa:22:72:84:8d:81:07:c0:58:a6:
69:40:99:c9:5d:e6:11:75:e1:f3:4c:a4:56:f1:dc:e1:6c:db:
77:ae:aa:0a:94:56:f8:18:4d:11:f9:ef:39:5e:6d:ad:80:f1:
3a:3f:db:ac:20:24:a0:c6:19:10:f5:b0:a9:4d:57:32:a3:93:
fb:be:d0:56:7d:82:1d:3d:47:68:85:2b:51:a4:06:3c:50:c4:
e0:53:58:da:e2:ff:1e:40:d2:2e:79:4d:d6:56:b2:44:95:13:
4b:62:30:d3:ba:c7:35:60:d2:00:5b:47:a1:44:ef:eb:31:19:
91:b7:e3:ac:f5:1b:6a:7a:61:73:94:43:ef:8b:85:5a:22:cf:
dd:01:fb:ef:f9:36:56:ee:56:69:10:dc:3f:22:87:52:43:cc:
1e:de:c6:e3:db:30:d0:ec:08:d4:36:69:2c:83:ae:41:e5:00:
cd:ec:ec:b2:88:b8:12:ac:98:35:b8:a8:3c:5d:11:cb:23:cb:
d1:cd:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:16 2025 by rpki-client