Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/n2smnIg8lz32xSWjzMSi7HtpmMA.roa
File: n2smnIg8lz32xSWjzMSi7HtpmMA.roa (raw, json)
Hash identifier: 1Lw/5v88j7y8/knixxbPWlHmR2e7HOM+hAg9eO9unpk=
Subject key identifier: 9F:6B:26:9C:88:3C:97:3D:F6:C5:25:A3:CC:C4:A2:EC:7B:69:98:C0
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 018F104ACDCC55DD3621B29D6AFD9B369D2A
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/n2smnIg8lz32xSWjzMSi7HtpmMA.roa
Signing time: Wed 24 Apr 2024 13:28:08 +0000
ROA not before: Wed 24 Apr 2024 13:28:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 217.147.180.0/23 maxlen: 24
217.147.180.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
2a0b:2900:1100::/40 maxlen: 48
2a0b:2900:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:4a:cd:cc:55:dd:36:21:b2:9d:6a:fd:9b:36:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Apr 24 13:28:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f6b269c883c973df6c525a3ccc4a2ec7b6998c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:1d:5b:25:04:1f:3c:9a:1f:fa:8c:77:2d:
08:bd:53:0b:f8:5e:9e:97:53:be:6f:33:b4:56:4c:
70:54:74:b4:c6:1e:07:52:1a:0c:d0:cb:97:54:4d:
85:dc:86:aa:d6:04:e8:1e:e1:0e:f2:9c:22:1e:fe:
e0:76:43:64:2b:d5:87:d9:41:a7:86:ed:c6:5f:02:
cd:ab:af:12:ef:08:46:ce:7c:da:9a:91:9b:58:c6:
4c:72:9b:8f:be:54:c0:15:a4:7d:97:d2:14:cf:41:
88:c9:21:f8:3b:77:d6:2f:9a:08:9e:10:df:20:cc:
f6:d7:87:7e:0c:0c:61:d8:9a:47:99:b1:ba:72:a8:
71:8c:a4:de:db:0a:9c:fe:8c:82:ba:98:92:e8:99:
8e:77:b8:99:8f:5b:6e:ac:43:8b:46:ee:af:3d:ca:
78:a7:c7:11:7d:9c:3e:ab:4e:4d:6f:e9:93:39:5d:
59:4e:72:8c:ae:0f:14:16:dc:9b:67:80:79:79:05:
f8:68:3e:0c:b8:01:28:1c:28:a8:d2:43:62:f8:00:
87:7f:16:66:c7:3b:47:e2:d9:10:3b:16:3a:f3:6f:
c0:0a:20:52:99:96:dc:5c:37:23:51:91:8a:f9:3f:
7a:d1:4e:3b:ca:54:41:b7:c6:aa:45:43:0c:1f:5f:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:26:9C:88:3C:97:3D:F6:C5:25:A3:CC:C4:A2:EC:7B:69:98:C0
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/n2smnIg8lz32xSWjzMSi7HtpmMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.180.0/23
IPv6:
2a0b:2900:1100::/40
2a0b:2900:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
4f:fd:af:6f:27:97:a3:d2:4b:4c:a2:c5:66:b3:b2:ce:ae:39:
d5:83:c4:0e:71:5a:43:82:7a:15:f0:57:e0:78:dd:ca:41:56:
17:c0:64:88:7a:17:ca:e4:a3:48:37:fd:74:70:dd:c9:b3:37:
bb:66:58:f8:23:2a:f7:61:c1:11:69:59:f3:e7:f6:51:57:ef:
a3:2e:d8:f1:f3:5e:db:4c:4e:a4:ba:fe:b1:6e:31:de:a2:4b:
3c:b4:80:29:ba:e0:bb:de:89:fa:83:82:38:29:93:9c:5a:58:
72:97:7f:ce:2f:7f:fa:55:26:2d:6c:00:a2:db:0b:e3:79:45:
6a:06:b8:7f:59:31:62:ac:43:0f:7d:61:40:f0:9a:13:5c:97:
92:61:50:2b:dc:66:cc:46:b1:64:4b:d3:d2:7e:0e:81:da:fa:
fd:72:76:22:45:f4:43:fd:6f:f3:5e:76:25:84:85:ab:c8:f2:
54:d8:83:7b:53:69:75:6f:4e:60:a5:16:39:13:e6:94:7c:c3:
de:ea:e8:a9:06:36:19:99:af:46:16:13:08:9c:b2:6d:74:f1:
ec:18:35:c3:1a:dc:7a:7d:57:06:47:37:3d:ad:64:75:15:22:
a5:6e:d2:41:81:5b:df:02:ce:e9:c7:aa:1a:45:bf:84:e9:a5:
5f:9c:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:53 2025 by rpki-client