Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/TrgvhdTHQM75gjmPCWy-go1xZ7g.roa
File: TrgvhdTHQM75gjmPCWy-go1xZ7g.roa (raw, json)
Hash identifier: J0ss3iNRgQuDXDO+ZUHpxFg7+eVayUQpwRLYiauVRcM=
Subject key identifier: 4E:B8:2F:85:D4:C7:40:CE:F9:82:39:8F:09:6C:BE:82:8D:71:67:B8
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 019426D9E0C0D09DC5658ADAFF24118CEF57
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/TrgvhdTHQM75gjmPCWy-go1xZ7g.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 217.194.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e0:c0:d0:9d:c5:65:8a:da:ff:24:11:8c:ef:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eb82f85d4c740cef982398f096cbe828d7167b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:51:e1:10:14:74:fa:e8:80:55:cb:76:ca:
dc:8c:b6:7c:49:37:4d:98:86:4f:75:2d:3c:88:8c:
eb:a6:7b:4e:78:ca:d8:e7:4d:79:e5:cf:51:3d:6f:
bc:05:07:cc:93:ca:48:4c:2c:fc:05:d7:f2:54:4f:
03:7a:1f:8b:9c:71:cf:7e:9e:ad:29:14:ad:13:6f:
fe:a0:7e:62:60:55:db:34:4f:07:23:48:4b:84:e7:
ea:47:11:7f:c8:5c:34:ef:b4:f4:28:74:ec:6e:47:
d2:ba:15:95:29:ca:b0:37:52:c3:c6:24:1e:0c:35:
8d:a1:bc:0a:60:af:fd:bb:6e:f9:80:6a:79:fb:ae:
1e:43:c4:cc:49:ce:0a:c1:4b:ee:df:e3:24:c3:e1:
94:f1:c6:fb:7d:ba:b4:ae:e1:9b:2f:3e:76:11:04:
8a:e5:40:01:14:04:56:24:0c:53:e2:81:06:88:00:
e7:17:e2:a3:ea:bf:bd:b1:d7:fd:b3:51:83:a7:da:
4a:26:bc:b5:7e:da:dc:1b:36:04:6e:ca:dd:ef:ea:
c0:d7:df:a0:31:c8:0f:6e:94:e7:70:da:ae:ff:c7:
09:c5:f3:4b:ee:1f:31:c5:95:37:2b:c1:86:48:09:
98:6d:c5:b1:82:e4:88:9c:fc:21:6a:3e:1b:8f:3a:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:2F:85:D4:C7:40:CE:F9:82:39:8F:09:6C:BE:82:8D:71:67:B8
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/TrgvhdTHQM75gjmPCWy-go1xZ7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6e:5c:20:2d:f6:8e:bc:6e:30:98:f3:c0:a3:0e:11:48:b1:
82:1a:97:c4:47:8e:8e:d1:f3:36:0b:de:35:03:87:11:64:4c:
d0:dd:79:43:e0:ae:38:71:16:b5:c7:79:28:7d:c2:ce:a2:da:
31:5f:d6:f5:da:14:26:0b:aa:64:fa:16:de:3d:4a:0e:cc:f3:
01:08:f1:77:34:dc:85:fb:2f:12:70:79:26:bd:f8:8e:97:cb:
78:3f:7c:7c:31:74:2e:cb:0f:f9:2d:41:4a:c0:fa:02:97:a4:
9d:80:df:0a:a8:2b:89:79:2e:98:75:15:63:f9:f5:58:d9:71:
ff:da:43:e5:db:54:c4:c4:36:c6:96:f1:b0:9d:51:b7:75:c3:
4c:5a:f7:20:45:25:16:a5:bd:c5:40:7a:02:cf:6b:9f:60:34:
58:2b:ce:a2:d0:69:86:56:61:69:6c:a5:21:c6:57:86:08:ea:
0a:d6:d8:31:28:a6:7c:17:49:a6:75:9e:8e:a7:fc:8e:76:0d:
00:22:a0:3a:bb:36:0c:2a:70:25:b6:29:3b:6f:ce:3f:26:f7:
9e:fc:20:9f:85:88:c7:4d:ee:bb:9f:b6:dc:46:a4:42:7f:c1:
d7:29:b1:de:8f:2a:72:2f:45:95:23:48:55:65:12:b0:c7:96:
98:85:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:08 2025 by rpki-client