Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa
File: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (raw, json)
Hash identifier: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=
Subject key identifier: C1:0C:A0:F1:E0:3A:95:14:44:CC:9F:6D:68:82:BB:F8:00:4D:F9:59
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019425218256FECA3F701CAE29AAE7422571
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 217.144.184.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:82:56:fe:ca:3f:70:1c:ae:29:aa:e7:42:25:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c10ca0f1e03a951444cc9f6d6882bbf8004df959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:24:8e:00:22:da:1f:50:c6:3c:d2:bc:7c:
d0:09:84:60:37:aa:ec:7d:44:65:70:38:18:26:20:
83:d1:7a:9b:8d:0b:86:45:89:ec:5a:8e:7b:7e:d2:
34:1f:14:5f:5e:e7:45:3f:68:ca:b8:bb:81:fb:f0:
01:85:a1:03:51:d0:7b:4f:c8:c4:15:8e:f6:f9:95:
bf:43:9e:16:e8:39:ce:eb:ea:c6:b2:61:f2:13:b9:
6a:41:66:c1:ef:04:44:07:64:c7:ca:d5:4d:75:6e:
15:42:3f:61:dd:50:2d:14:d9:d7:6e:eb:a5:6f:29:
be:77:0b:47:3d:ca:7f:8e:d4:88:3e:15:88:8e:58:
40:ca:fd:3a:6a:6b:21:9f:b5:10:4d:64:d2:a4:4f:
85:2e:43:e8:31:8b:c6:22:77:09:1d:f4:17:54:55:
f8:0c:6f:b5:a0:eb:87:0f:10:83:2c:6f:6a:54:9f:
b5:0b:0e:f0:e7:19:60:d0:1b:26:bd:ec:b9:2f:59:
ec:e9:8e:8e:b2:7f:33:dd:1b:11:66:ce:b5:a7:2c:
fd:ee:31:39:0a:c3:69:34:27:ff:9f:61:86:c5:01:
c0:f3:4f:ef:2a:e3:4f:0c:75:0d:bf:b8:e5:5f:b5:
db:8b:fe:c7:51:b0:42:bb:bd:30:6e:83:a5:d4:15:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:A0:F1:E0:3A:95:14:44:CC:9F:6D:68:82:BB:F8:00:4D:F9:59
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4b:4f:af:7f:f9:46:e0:10:53:eb:d5:74:fa:c5:ab:f5:a4:
f6:38:0b:cb:18:f2:c9:e3:e7:b7:3e:6d:03:39:1d:63:85:d7:
ca:4e:8d:a5:20:07:77:94:26:e0:0f:b5:c8:ed:e7:bf:22:a7:
98:73:b4:00:62:63:b4:aa:da:d4:09:2f:9c:af:9b:30:60:1e:
21:aa:61:95:6e:e8:9a:60:d2:17:06:07:f3:07:5e:2c:6b:41:
87:4e:50:96:4e:2b:be:08:24:c7:5f:07:33:9c:e7:b5:f5:b1:
00:06:dd:b9:a9:1d:52:0f:b2:bd:e9:36:a7:56:db:e3:9f:f6:
af:52:dc:26:57:27:13:58:9d:2d:2a:3e:5d:aa:b2:95:f8:f5:
99:45:01:71:b4:95:94:ea:bb:68:f1:f2:fc:2d:bb:01:b4:39:
f7:8c:d3:9f:99:77:bb:3e:5b:39:2d:5b:0c:b7:10:d4:bc:00:
9f:42:c9:6c:a8:53:00:43:c0:37:8a:cd:df:fc:42:2e:c0:5f:
be:a7:2f:d1:e4:54:76:2b:a9:60:1c:0d:8c:3f:38:26:9c:82:
2a:e6:cd:44:34:9d:c4:ba:a6:a4:e5:84:ab:b4:3a:d6:6a:05:
e3:46:54:a7:7a:3c:b0:95:ae:92:aa:42:b1:35:44:40:93:23:
6d:4b:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:15 2025 by rpki-client