Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa
File: ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa (raw, json)
Hash identifier: 4VUp3SMe9rs+Z7Hbxzz7UGL7lgkBSmttJcCWABv87SU=
Subject key identifier: 89:CE:13:E1:97:58:EC:00:8E:CF:9B:67:46:C6:CC:16:3E:1C:9F:F0
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194CDBC23D748DD611F245FE82AC01E2511
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa
Signing time: Mon 03 Feb 2025 21:34:06 +0000
ROA not before: Mon 03 Feb 2025 21:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 217.177.33.0/24 maxlen: 24
217.181.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cd:bc:23:d7:48:dd:61:1f:24:5f:e8:2a:c0:1e:25:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 3 21:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89ce13e19758ec008ecf9b6746c6cc163e1c9ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:83:69:b3:90:5c:b0:44:ad:d5:4f:79:7e:
8f:87:8c:78:3a:ca:94:b8:c8:96:92:23:12:59:0c:
27:23:03:43:03:d6:3c:d1:e9:46:80:eb:c2:64:59:
7d:fc:3a:a0:15:da:a6:6c:1f:07:36:eb:4e:ee:68:
b2:27:c3:56:43:a9:62:9f:1e:66:db:ca:9e:1f:a4:
cd:6b:25:7d:3f:01:72:d4:63:c0:09:a0:c9:db:7e:
58:27:82:5f:56:40:d9:4e:38:98:46:f6:3d:dd:5f:
7c:22:23:2b:30:81:0a:79:41:e7:24:96:b6:90:2d:
db:b8:41:78:12:53:c5:18:76:d5:26:23:84:dc:6c:
68:ad:da:0f:c9:f0:0c:b1:68:82:bd:38:b1:6c:f8:
b6:56:62:21:5a:28:f1:6c:15:9f:e1:74:62:9b:1f:
51:96:93:76:fe:35:c7:e9:24:48:73:ff:5b:d6:0f:
38:85:03:26:5b:6d:94:aa:d9:38:af:fa:20:fd:9e:
3c:6d:f8:16:6f:7b:fe:4a:42:98:6a:d9:d2:88:dc:
0e:c2:b5:c0:67:4c:38:bb:15:9b:0c:9a:a4:0d:dd:
61:df:42:ca:db:c8:0b:cd:c1:73:70:1d:a9:90:e3:
34:82:b4:d5:d5:a8:1d:55:9e:1a:65:b8:00:c8:42:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:13:E1:97:58:EC:00:8E:CF:9B:67:46:C6:CC:16:3E:1C:9F:F0
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.33.0/24
217.181.64.0/21
Signature Algorithm: sha256WithRSAEncryption
49:1f:7d:18:9f:7a:45:95:07:6c:b6:3e:2d:5c:d0:6b:dc:aa:
3c:a0:c0:77:ce:43:0d:08:ac:0c:13:1e:2e:03:f3:7d:ec:ec:
a4:c2:d7:d2:59:93:de:3e:26:5f:a8:08:88:81:a8:27:43:55:
62:68:5e:e2:f9:ab:c0:c4:71:e9:77:a3:ce:05:ee:40:81:88:
2b:ed:e8:9a:dc:d6:7b:81:b4:7a:1d:58:39:fc:80:e4:3a:8a:
b3:ef:61:84:a0:3d:18:33:a6:fc:b8:24:13:c3:e3:b7:0e:eb:
a2:58:84:28:8a:01:9a:ae:be:91:8e:95:a9:3d:ab:5f:d8:a1:
f0:3f:8a:c4:a3:87:69:49:b7:00:e3:49:1b:d6:3f:54:a1:67:
2d:32:b0:19:7f:88:b9:95:23:a1:66:73:1c:3b:17:d3:da:f5:
e6:b4:3a:99:fa:e1:cc:a0:9d:89:d6:8a:45:08:43:98:6f:cc:
fa:d7:d4:5a:30:2a:3a:61:99:40:f2:f9:02:95:09:8e:9b:7d:
aa:a8:e4:69:0a:83:de:1a:62:7b:43:f3:80:7b:6c:b0:a5:ad:
5b:02:78:be:7f:7a:4e:74:b0:98:70:8f:bf:95:a3:d4:5d:ff:
05:55:0d:5a:0f:2e:7c:88:12:da:93:80:a6:d0:4b:15:94:10:
8b:fe:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:14 2025 by rpki-client