Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/lPDpfx3Te7zjZCAdY5UFziIAeNM.roa
File: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (raw, json)
Hash identifier: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=
Subject key identifier: 94:F0:E9:7F:1D:D3:7B:BC:E3:64:20:1D:63:95:05:CE:22:00:78:D3
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0194282528CA0B91E91D4C37A77E378817B4
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/lPDpfx3Te7zjZCAdY5UFziIAeNM.roa
Signing time: Thu 02 Jan 2025 17:51:51 +0000
ROA not before: Thu 02 Jan 2025 17:51:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48932
IP address blocks: 217.12.224.0/24 maxlen: 24
217.12.225.0/24 maxlen: 24
217.12.226.0/24 maxlen: 24
217.12.227.0/24 maxlen: 24
217.12.232.0/23 maxlen: 23
217.12.232.0/24 maxlen: 24
217.12.233.0/24 maxlen: 24
217.12.234.0/23 maxlen: 23
217.12.234.0/24 maxlen: 24
217.12.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:28:ca:0b:91:e9:1d:4c:37:a7:7e:37:88:17:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Jan 2 17:51:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f0e97f1dd37bbce364201d639505ce220078d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:7d:53:73:6d:0a:9e:cb:40:b2:c8:ef:3f:
60:87:80:f8:a6:42:ca:20:b8:d5:32:6e:ed:f4:9f:
0a:a7:dc:c7:59:ff:1c:ff:79:88:a2:d8:19:4a:6b:
ce:cb:d3:da:39:66:41:80:b7:cf:fc:5f:d2:4d:53:
e7:76:98:c5:20:bd:ee:fe:2a:23:a6:54:de:a1:37:
e4:09:4d:79:51:91:29:83:c5:e4:33:f5:eb:39:a2:
47:b1:d7:ee:5e:89:b3:92:c9:bc:58:2a:b4:66:b8:
b0:4b:e9:ac:7e:0f:d2:8e:44:57:d8:63:e7:ec:6c:
6b:9e:d4:a6:74:18:8a:5c:4b:b9:fc:64:21:72:a4:
0d:80:17:21:b2:61:e4:88:a9:57:18:84:79:ff:7d:
d2:26:86:4a:d9:5a:e4:3d:02:c0:47:61:15:fe:53:
16:e0:51:22:65:d5:39:f9:8f:9f:80:b6:1e:a9:d0:
cc:2f:98:83:d5:f4:77:87:06:de:6f:fa:50:84:65:
6c:a0:93:23:ad:f8:f9:55:62:c9:84:bf:70:12:9c:
4e:b2:9d:1c:f5:a3:86:a5:47:7b:0e:5f:2e:89:03:
2f:a3:fa:41:85:43:ba:d9:f6:59:64:5b:00:32:4b:
40:6a:6b:27:d3:7f:4c:d1:30:fb:ca:55:1b:80:e7:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F0:E9:7F:1D:D3:7B:BC:E3:64:20:1D:63:95:05:CE:22:00:78:D3
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/lPDpfx3Te7zjZCAdY5UFziIAeNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.224.0/22
217.12.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:19:ad:bf:ed:84:f3:aa:e2:e3:05:78:99:7e:af:16:c1:75:
84:c3:00:25:c7:e3:8a:aa:16:f2:bc:37:02:0c:8a:49:4b:0c:
d2:f7:84:cd:8d:a4:fa:f7:60:80:2c:62:04:da:7b:ad:f0:c5:
25:aa:ce:dc:5f:41:02:90:c7:3e:be:49:1b:a0:00:ad:a2:30:
2e:f7:00:a6:dc:e3:3a:70:77:60:9d:3f:7c:be:11:8b:cb:d1:
b2:bb:cd:7f:21:52:d9:50:b6:80:75:7e:fb:b1:b0:2d:a2:9c:
0c:8f:84:ea:51:ff:c6:53:70:7f:35:c5:5b:d4:60:68:c3:d4:
ac:c8:21:1c:af:fe:63:1e:fe:0b:2e:76:91:c3:59:38:52:ff:
45:01:9f:ea:01:45:28:1c:28:4f:67:ba:f0:7d:34:30:a0:0d:
10:7a:19:19:11:e7:af:1b:78:c8:de:76:8c:17:dc:8e:ea:d2:
aa:b6:ff:bd:f9:60:aa:8b:03:32:de:d7:71:79:d0:e5:c1:49:
c4:15:e0:77:85:58:04:09:c7:2e:ed:66:07:9c:78:18:c6:44:
89:b2:1e:ba:7f:da:4a:98:0c:d5:dd:8b:e9:b0:8e:6d:aa:df:
66:2f:84:b4:f0:2d:94:62:5c:c9:ad:c0:e5:7f:95:21:7f:92:
c5:a9:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:20 2025 by rpki-client