Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ChTwEJfY2RBJdsthLA8bTIXLsMA.roa
File: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (raw, json)
Hash identifier: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=
Subject key identifier: 0A:14:F0:10:97:D8:D9:10:49:76:CB:61:2C:0F:1B:4C:85:CB:B0:C0
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01956B2C9A0FFF2C12A5E0C9E7DD907ECE04
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ChTwEJfY2RBJdsthLA8bTIXLsMA.roa
Signing time: Thu 06 Mar 2025 11:17:19 +0000
ROA not before: Thu 06 Mar 2025 11:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12741
IP address blocks: 217.177.0.0/22 maxlen: 24
217.177.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:2c:9a:0f:ff:2c:12:a5:e0:c9:e7:dd:90:7e:ce:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Mar 6 11:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a14f01097d8d9104976cb612c0f1b4c85cbb0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:dc:6e:5b:5c:06:87:bf:f1:aa:38:e4:4d:
5b:b0:7c:d7:ab:ad:e3:5b:0e:85:5c:8d:78:4f:83:
7a:ed:47:f2:57:71:d6:6b:82:2e:b0:da:f2:22:f0:
6e:26:af:ac:97:b9:eb:f9:97:57:1d:7e:4e:38:aa:
7c:b4:d9:26:46:8a:db:87:eb:25:91:cf:8e:66:97:
cc:cf:7d:e8:6b:c3:3d:88:02:5d:0d:77:8d:8a:27:
96:58:79:d3:7b:51:1a:11:fd:e7:cf:61:1c:b8:75:
4b:7f:6f:e2:95:df:02:09:e2:0f:b9:76:74:aa:5d:
48:95:79:be:f6:7e:18:74:26:f6:ef:f1:0a:eb:03:
ee:82:4a:6e:8f:1a:8c:b5:7d:73:ac:fa:aa:e4:8f:
fd:a3:de:7b:06:14:65:91:ed:16:fb:4c:dc:42:89:
e8:e3:b2:55:c2:82:e7:02:ac:48:c4:b0:22:38:eb:
d8:ec:0f:ff:63:83:9b:87:65:ad:7a:4a:68:f2:b6:
9c:a1:1b:31:3d:00:aa:6e:17:1b:72:10:37:84:f2:
7f:df:84:e6:6e:21:e9:fa:ab:08:1c:ca:54:eb:96:
db:c2:19:2d:b1:c2:d8:94:96:34:91:f0:c8:01:e0:
a4:b3:40:0c:59:4c:70:46:98:6f:58:4d:17:b4:98:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:14:F0:10:97:D8:D9:10:49:76:CB:61:2C:0F:1B:4C:85:CB:B0:C0
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ChTwEJfY2RBJdsthLA8bTIXLsMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.0.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:af:14:de:a5:f0:1b:e8:74:9f:74:97:37:6d:92:02:e4:aa:
cc:8c:6d:3a:9c:da:f9:6c:61:3d:91:3d:05:b5:ef:cc:fd:6b:
4e:ed:bb:45:6a:19:21:e5:16:af:29:9a:c4:d2:a3:a4:d9:7c:
2e:87:8d:3e:9f:61:2f:01:5f:c1:f1:30:27:55:f5:07:48:c3:
47:10:88:83:1d:a9:2a:d4:59:08:f1:1e:5e:19:7c:9a:66:4e:
82:62:23:ad:9d:85:a4:6a:51:63:b8:fe:90:c6:2f:f9:08:eb:
5f:98:42:78:63:e2:2f:06:c8:80:e6:44:c2:3b:5a:3a:e9:e1:
76:82:46:8e:e5:ea:23:ef:15:bd:10:9b:63:d5:56:b0:85:30:
ff:57:2d:8b:a9:c4:f2:11:05:87:e7:01:d5:4e:8f:33:e7:e9:
2e:fb:74:db:ef:19:01:d2:5a:5d:04:1c:1b:4b:34:78:e3:0d:
a8:5f:2b:5d:0b:8f:d0:58:c3:12:6b:32:16:e8:27:6c:ab:ca:
ae:e9:5f:7a:3d:e1:1a:b1:09:df:24:17:f6:0b:b5:df:4d:d4:
bc:ff:49:e3:dc:4b:1e:3d:e2:16:5c:4c:59:5d:b3:80:95:29:
23:64:c7:48:73:53:7d:b3:7f:bd:89:4f:2f:2d:6f:d2:31:7b:
bb:0c:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:23 2025 by rpki-client