Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/1zUeCNsyUySRrcIIfazZmjAut_s.roa
File: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (raw, json)
Hash identifier: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=
Subject key identifier: D7:35:1E:08:DB:32:53:24:91:AD:C2:08:7D:AC:D9:9A:30:2E:B7:FB
Certificate issuer: /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial: 01942067D2CFCD926FEEC8A1DFC948E5B7F9
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/1zUeCNsyUySRrcIIfazZmjAut_s.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212552
IP address blocks: 217.197.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d2:cf:cd:92:6f:ee:c8:a1:df:c9:48:e5:b7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7351e08db32532491adc2087dacd99a302eb7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:ad:18:b7:b0:ef:c9:95:0e:9b:fd:b7:3e:
fe:7d:33:ff:cf:42:7d:31:33:dd:b1:41:f5:96:bb:
54:b6:ce:1f:16:b6:27:f0:8e:c7:42:1b:0f:a9:70:
4d:ac:c6:df:2b:f9:d9:dc:eb:98:c3:c0:39:08:44:
77:d3:9d:1d:70:0a:aa:4f:f3:67:13:98:03:74:fd:
a9:91:50:58:05:da:e2:90:7e:bb:ab:e8:aa:7a:a4:
dc:bf:93:73:7a:8f:34:23:89:11:f5:d6:c1:38:15:
b9:b0:17:eb:88:57:d6:35:4a:dc:73:4a:a0:32:5f:
f4:d6:29:27:fa:a3:f4:b1:32:c4:e2:00:61:c8:e1:
2b:8d:3a:3a:28:23:64:f7:10:59:e0:c7:f7:46:5b:
8d:7f:cc:dd:5d:22:57:ac:c4:f0:34:77:dd:52:56:
4f:85:d1:ac:1a:1c:b9:f9:17:c1:9b:ef:80:01:30:
44:86:2a:5f:43:d5:40:d3:45:fd:24:0c:7b:2c:b4:
8f:02:0f:57:28:64:08:38:70:f9:3a:d8:6d:5f:a8:
fb:a5:a7:38:39:46:5f:d6:d6:15:cf:2e:25:92:da:
78:34:d4:63:3a:dd:97:9b:4e:3b:38:e4:0d:a7:19:
1c:8c:85:f0:19:68:e1:c0:05:0f:c5:d9:49:a5:8e:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:1E:08:DB:32:53:24:91:AD:C2:08:7D:AC:D9:9A:30:2E:B7:FB
X509v3 Authority Key Identifier:
keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/1zUeCNsyUySRrcIIfazZmjAut_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3b:a3:e3:a3:bd:58:8c:b1:26:7c:38:35:34:14:2b:e9:2b:
64:be:4e:fd:f5:ad:e3:10:11:2f:26:62:12:5b:0c:55:2a:79:
bd:72:0f:44:19:2f:21:b8:38:cc:ea:6a:cd:df:21:6b:5e:cc:
58:19:55:2a:ae:34:0e:a4:60:69:5c:59:2d:a2:54:34:a6:25:
b8:7a:e8:0b:1c:ef:58:78:93:88:19:ce:58:bd:86:40:8b:03:
90:c2:a4:25:de:13:50:24:8a:fd:48:99:0e:f5:3d:b3:31:ad:
27:7a:f8:92:3d:45:d7:28:bd:65:1f:fd:04:b7:d5:bb:b3:90:
d2:16:f3:b6:79:0d:e3:13:d2:48:4e:1f:d0:42:78:40:f6:e5:
a0:28:01:19:17:f5:f0:91:f0:06:45:b3:b4:ef:31:69:7c:50:
63:99:06:96:ac:03:86:e8:77:6f:f7:40:40:0f:1b:08:8b:e2:
3f:a2:93:13:5b:51:c5:b5:ce:a8:0b:60:87:84:a1:d8:b4:6d:
12:47:9a:5c:79:c0:ad:15:d1:8f:2c:03:5a:c6:a4:0d:bd:7a:
25:98:94:c8:96:1a:fb:64:46:48:24:62:18:13:81:5d:88:e8:
de:8c:f9:8c:19:01:3e:ee:78:a8:18:29:a0:09:8b:66:5f:74:
3e:18:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:36 2025 by rpki-client