Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sIxScY3HMpWMeGG-vXolTkDA7sI.roa
File: sIxScY3HMpWMeGG-vXolTkDA7sI.roa (raw, json)
Hash identifier: bx7I8xjyAW76sBIzb/qyz6iVZp3dQEHVRdpPHX2bx1M=
Subject key identifier: B0:8C:52:71:8D:C7:32:95:8C:78:61:BE:BD:7A:25:4E:40:C0:EE:C2
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194DB5C4BB90DC5FF2C32C13794EB389157
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sIxScY3HMpWMeGG-vXolTkDA7sI.roa
Signing time: Thu 06 Feb 2025 13:04:06 +0000
ROA not before: Thu 06 Feb 2025 13:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 217.179.7.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.180.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:5c:4b:b9:0d:c5:ff:2c:32:c1:37:94:eb:38:91:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 6 13:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b08c52718dc732958c7861bebd7a254e40c0eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:8a:41:3c:c9:1a:e7:20:52:eb:35:45:2c:
88:6b:82:b3:93:c2:66:d4:4f:73:db:c7:49:fb:cd:
ca:9f:73:e3:ba:b1:55:24:cd:17:64:6f:b8:c6:e9:
f5:11:fc:82:57:1c:8b:6b:88:b9:9b:54:e9:22:97:
f9:3c:4c:2e:89:b4:9e:b8:10:23:ed:41:07:e4:cb:
7d:b4:10:0e:d0:4e:bc:d7:ca:d2:37:32:91:09:ce:
6e:41:7e:0c:56:bf:fc:63:82:d0:16:8c:b8:be:92:
b0:2f:24:6d:0e:89:ef:35:ab:7d:22:9b:83:9e:4f:
f1:5a:4b:fb:d4:1c:c5:21:48:a4:38:20:2a:1c:ab:
17:54:8b:2a:ec:b2:00:a8:ce:0d:9f:1a:61:93:17:
7a:d6:4d:47:b9:20:91:cf:ad:29:78:fc:6c:8c:17:
43:00:75:aa:ef:95:6d:49:c6:22:fb:70:fb:4b:8d:
68:1d:01:35:f1:cd:6c:15:56:24:be:a0:e7:8d:42:
e1:1d:53:40:92:9c:dd:3e:d9:0b:b0:99:31:20:53:
b7:ad:de:22:07:0c:a8:5a:e1:09:f1:4f:bc:01:e2:
47:25:5f:4f:bd:bb:14:5a:9c:d0:f8:33:3c:e7:16:
f8:70:0d:79:8e:9a:b0:52:60:44:fa:08:cb:18:c1:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:52:71:8D:C7:32:95:8C:78:61:BE:BD:7A:25:4E:40:C0:EE:C2
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/sIxScY3HMpWMeGG-vXolTkDA7sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.7.0/24
217.180.13.0-217.180.14.255
217.180.20.0/24
217.180.38.0/24
217.180.45.0/24
217.180.59.0/24
217.180.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:47:d9:a8:6b:1c:41:92:8f:ae:fa:95:b7:d8:ff:f1:e0:b5:
06:f2:0a:54:04:f7:af:c4:48:b4:25:80:af:8b:a4:f5:71:d6:
8a:9d:6f:b8:74:d9:3e:3d:75:05:56:6d:65:38:73:02:13:30:
d4:a2:06:d8:d4:dc:41:97:23:42:30:7c:6d:06:03:b2:d2:d7:
dd:bc:2e:18:0c:10:48:cf:82:d7:9f:27:cd:e8:41:89:1e:9b:
1b:9d:8a:52:f4:e1:d6:c7:22:8f:b8:6d:5d:d7:51:27:70:40:
33:4e:6a:43:31:0b:f2:99:e4:dc:c5:57:eb:e2:cb:3f:f7:44:
dc:29:82:04:d9:4b:14:6c:af:a6:bc:fe:7a:f0:9a:cd:6c:ff:
c8:3f:bd:05:08:92:55:e1:96:da:9c:5e:d2:cb:ca:ce:a7:05:
4f:81:86:64:91:59:90:b8:11:f5:35:d9:a1:d4:34:0a:ef:00:
bd:80:c4:ca:75:7f:ac:6f:d8:03:f6:41:ba:f4:40:0c:7d:32:
37:91:5e:2c:16:08:48:8b:1a:57:58:5a:57:7c:c9:fd:61:34:
86:01:34:38:ff:01:02:65:3a:71:b2:ef:b3:f9:7d:97:3e:e5:
f3:94:fe:42:f3:9d:de:82:b5:3d:1d:96:da:8e:c7:94:15:71:
b7:93:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:16 2025 by rpki-client