Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/bVTa17baMARG71NZ_lURgWWh_4Y.roa
File: bVTa17baMARG71NZ_lURgWWh_4Y.roa (raw, json)
Hash identifier: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=
Subject key identifier: 6D:54:DA:D7:B6:DA:30:04:46:EF:53:59:FE:55:11:81:65:A1:FF:86
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 019427B61B141DDC00F82C942AABB3839CED
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/bVTa17baMARG71NZ_lURgWWh_4Y.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202636
IP address blocks: 217.67.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1b:14:1d:dc:00:f8:2c:94:2a:ab:b3:83:9c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d54dad7b6da300446ef5359fe55118165a1ff86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:d2:22:d5:e3:d0:28:81:d3:d1:8d:2f:20:
3c:94:4f:ae:8b:d6:43:22:d5:77:2f:b8:f0:c3:96:
f1:51:78:c5:e9:3e:ac:6d:99:1e:5f:99:e0:4f:ca:
3f:e0:22:3a:aa:95:43:e4:82:06:37:d8:8e:e8:0e:
7c:28:a7:b7:e5:a2:88:2d:b8:54:ca:51:73:4d:49:
8c:e5:33:d8:5c:64:a7:4d:08:6b:38:4e:a3:f0:65:
07:e6:1b:4a:12:a3:f6:b8:08:3a:c6:21:15:ed:33:
7d:cc:12:29:c3:81:82:e3:78:06:74:95:43:52:fe:
4d:3b:1c:6d:40:f2:7f:4b:7b:82:62:87:e1:0f:53:
43:fe:98:07:47:4e:6a:6a:13:85:82:00:bf:b0:8d:
79:3e:5e:6d:b7:9f:99:46:45:fd:a7:ee:2e:1b:1b:
8c:d8:d5:b1:f8:ee:de:f1:97:45:d6:17:9b:5d:38:
fa:74:75:43:55:fc:cb:9c:46:f1:a2:71:ef:15:01:
de:71:40:79:57:7e:74:47:22:d3:1c:9f:b2:e3:dd:
83:43:a3:1d:c6:39:c3:b7:85:da:0d:6a:a0:bd:50:
9d:9f:ef:a6:dd:6a:38:49:90:6c:77:51:75:01:76:
85:2f:a5:6d:3b:14:67:32:ee:1f:0a:99:25:60:5f:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:DA:D7:B6:DA:30:04:46:EF:53:59:FE:55:11:81:65:A1:FF:86
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/bVTa17baMARG71NZ_lURgWWh_4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.160.0/24
Signature Algorithm: sha256WithRSAEncryption
48:57:7c:85:95:7b:01:27:38:ef:41:16:34:9a:4c:76:bf:3b:
99:4e:7f:4d:06:e0:e0:81:84:70:c9:a2:da:df:81:c6:31:6e:
2e:e5:5a:f9:c1:50:9e:42:84:6d:c6:60:4d:4d:34:58:f9:d0:
0e:48:74:d8:e2:8f:4a:96:38:c0:90:a1:8d:e5:ce:40:f6:0d:
ea:7a:82:cc:05:f7:01:2a:ef:2e:ec:b7:6d:76:be:8a:49:a9:
64:73:19:40:23:48:7a:8c:97:67:4a:ea:6b:f9:a2:e5:96:29:
7a:0f:30:59:24:a3:7c:33:5b:69:80:88:c5:46:65:e3:16:ff:
ea:3c:b7:3d:ef:cc:0a:eb:62:b2:47:e1:45:b8:76:9e:83:91:
b2:27:e7:9d:19:9d:70:13:25:0e:f1:bf:5c:29:4f:b0:96:73:
9c:1f:c9:b2:8b:88:85:fc:5d:a0:29:31:23:40:24:29:f8:d6:
ef:48:f4:af:26:a0:c9:47:1c:b1:2a:6c:f5:ed:11:a9:77:2d:
30:b4:6a:14:d8:b8:98:b7:7a:42:b8:d4:63:ee:f6:88:7e:f8:
67:05:21:c7:9a:a7:9c:7c:a6:fd:7b:f9:2e:1e:e2:0d:e5:1e:
d6:4d:cf:43:0c:c2:28:c3:2c:49:1b:07:6c:be:37:e9:4c:84:
6c:e0:62:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnthsUHdwA+CyUKquzg5ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj
MDc0ODkwHhcNMjUwMTAyMTU1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDU0ZGFkN2I2ZGEzMDA0NDZlZjUzNTlmZTU1MTE4MTY1YTFmZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVzSItXj0CiB09GNLyA8lE+ui9ZD
ItV3L7jww5bxUXjF6T6sbZkeX5ngT8o/4CI6qpVD5IIGN9iO6A58KKe35aKILbhU
ylFzTUmM5TPYXGSnTQhrOE6j8GUH5htKEqP2uAg6xiEV7TN9zBIpw4GC43gGdJVD
Uv5NOxxtQPJ/S3uCYofhD1ND/pgHR05qahOFggC/sI15Pl5tt5+ZRkX9p+4uGxuM
2NWx+O7e8ZdF1hebXTj6dHVDVfzLnEbxonHvFQHecUB5V350RyLTHJ+y492DQ6Md
xjnDt4XaDWqgvVCdn++m3Wo4SZBsd1F1AXaFL6VtOxRnMu4fCpklYF+GAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1U2te22jAERu9TWf5VEYFlof+GMB8GA1UdIwQY
MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt
YTA0NWZmOGUyYWMwLzEvYlZUYTE3YmFNQVJHNzFOWl9sVVJnV1doXzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw
LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UOgMA0G
CSqGSIb3DQEBCwUAA4IBAQBIV3yFlXsBJzjvQRY0mkx2vzuZTn9NBuDggYRwyaLa
34HGMW4u5Vr5wVCeQoRtxmBNTTRY+dAOSHTY4o9KljjAkKGN5c5A9g3qeoLMBfcB
Ku8u7Ldtdr6KSalkcxlAI0h6jJdnSupr+aLllil6DzBZJKN8M1tpgIjFRmXjFv/q
PLc978wK62KyR+FFuHaeg5GyJ+edGZ1wEyUO8b9cKU+wlnOcH8myi4iF/F2gKTEj
QCQp+NbvSPSvJqDJRxyxKmz17RGpdy0wtGoU2LiYt3pCuNRj7vaIfvhnBSHHmqec
fKb9e/kuHuIN5R7WTc9DDMIowyxJGwdsvjfpTIRs4GKM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:00 2025 by rpki-client