Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/7VVNhLp5QCNncV_xyEunrrUsXds.roa
File: 7VVNhLp5QCNncV_xyEunrrUsXds.roa (raw, json)
Hash identifier: tNHeBRCtkifcOM/iXs+Telgyb/9i0JDzE8UVpHBWUiY=
Subject key identifier: ED:55:4D:84:BA:79:40:23:67:71:5F:F1:C8:4B:A7:AE:B5:2C:5D:DB
Certificate issuer: /CN=10160aa3782177b138e6b00544398a701fb4c514
Certificate serial: DEBA
Authority key identifier: 10:16:0A:A3:78:21:77:B1:38:E6:B0:05:44:39:8A:70:1F:B4:C5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBYKo3ghd7E45rAFRDmKcB-0xRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/7VVNhLp5QCNncV_xyEunrrUsXds.roa
Signing time: Fri 15 Apr 2022 15:10:49 +0000
ROA not before: Fri 15 Apr 2022 15:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196695
IP address blocks: 217.28.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57018 (0xdeba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10160aa3782177b138e6b00544398a701fb4c514
Validity
Not Before: Apr 15 15:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed554d84ba79402367715ff1c84ba7aeb52c5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:92:d9:2a:aa:f6:0c:0e:82:2e:98:67:a1:
1d:f5:c7:5b:17:8e:a3:99:b3:9b:5a:fd:37:15:81:
bc:6b:e9:36:0e:99:d8:4d:06:83:2f:46:7a:91:02:
52:86:ec:60:d7:01:4a:0d:ad:8f:80:a4:1f:fe:97:
e1:5d:8b:8e:53:2a:7a:3c:4d:d0:06:30:68:8a:5c:
3e:dd:03:13:ed:08:ca:9e:69:99:a3:3f:0b:04:81:
52:25:a2:d7:36:fa:59:55:cc:4b:56:20:16:9d:40:
d7:30:ce:77:1f:90:a0:5a:3d:f7:73:9b:c6:2e:a3:
5a:cc:32:ee:3f:3f:35:c1:fe:24:f1:df:ba:69:3f:
1b:0c:fc:79:b9:8b:f8:6e:34:7a:6b:06:5c:63:79:
58:31:19:c2:e3:df:d5:6b:10:78:f2:10:2d:5f:6a:
99:b1:fb:ad:ce:ba:d7:3a:a1:c3:a2:2c:5e:1f:f3:
c3:92:2e:ae:c3:c6:13:5d:e1:2f:cf:a3:5b:e9:91:
05:2b:1c:47:62:56:74:76:20:57:fa:df:6c:03:04:
1c:a7:56:0a:f4:8f:30:fe:34:a0:ab:5c:2e:98:23:
37:d7:5a:7a:86:b6:f9:0b:a9:26:e3:60:eb:b7:d5:
b9:93:b4:37:99:e8:b7:3d:7b:48:50:67:d1:d2:3e:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:4D:84:BA:79:40:23:67:71:5F:F1:C8:4B:A7:AE:B5:2C:5D:DB
X509v3 Authority Key Identifier:
keyid:10:16:0A:A3:78:21:77:B1:38:E6:B0:05:44:39:8A:70:1F:B4:C5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBYKo3ghd7E45rAFRDmKcB-0xRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/7VVNhLp5QCNncV_xyEunrrUsXds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/EBYKo3ghd7E45rAFRDmKcB-0xRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:95:8a:8b:49:8b:18:11:1d:b1:82:6f:99:06:39:47:f6:61:
68:85:83:da:db:95:5f:dd:de:02:1d:e0:57:f3:9f:11:15:a9:
96:a4:4b:e4:cb:6b:68:28:b0:44:3a:80:79:69:21:24:78:0a:
0a:a1:04:10:3d:8c:21:8f:d2:e4:0e:6f:83:1f:9c:10:6c:bb:
98:99:5e:19:b9:39:ba:26:80:4b:3f:a2:be:42:b6:40:ca:5a:
16:d4:cd:69:91:a1:b6:93:00:d5:35:1d:37:38:95:fa:67:bb:
fc:e3:c7:44:55:ee:c2:56:64:ef:e4:f1:74:cb:b8:4e:68:3d:
23:f6:c7:17:82:40:c3:4f:41:4f:56:42:36:52:49:99:eb:e6:
6d:12:9d:e0:08:f4:49:ff:c4:78:7b:56:cb:6c:e4:9e:9a:d2:
7c:73:77:54:e8:2b:70:ac:79:96:61:29:b0:03:1b:ad:3a:c0:
c5:d2:84:05:9a:26:8f:13:c6:1a:68:e0:c9:52:7c:69:7a:53:
ee:9b:06:63:a3:90:86:a0:e7:be:37:55:b8:1a:32:80:0b:ed:
79:d4:bf:a4:6f:8d:8a:66:78:58:d3:19:e0:29:80:1b:52:b8:
bc:69:1b:58:cf:aa:cc:fe:60:dd:b8:33:80:a8:a2:49:f0:0d:
20:69:88:ea
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAN66MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
MTYwYWEzNzgyMTc3YjEzOGU2YjAwNTQ0Mzk4YTcwMWZiNGM1MTQwHhcNMjIwNDE1
MTUxMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlZDU1NGQ4NGJhNzk0
MDIzNjc3MTVmZjFjODRiYTdhZWI1MmM1ZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArVGS2Sqq9gwOgi6YZ6Ed9cdbF46jmbObWv03FYG8a+k2DpnY
TQaDL0Z6kQJShuxg1wFKDa2PgKQf/pfhXYuOUyp6PE3QBjBoilw+3QMT7QjKnmmZ
oz8LBIFSJaLXNvpZVcxLViAWnUDXMM53H5CgWj33c5vGLqNazDLuPz81wf4k8d+6
aT8bDPx5uYv4bjR6awZcY3lYMRnC49/VaxB48hAtX2qZsfutzrrXOqHDoixeH/PD
ki6uw8YTXeEvz6Nb6ZEFKxxHYlZ0diBX+t9sAwQcp1YK9I8w/jSgq1wumCM311p6
hrb5C6km42Drt9W5k7Q3mei3PXtIUGfR0j5H6QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFO1VTYS6eUAjZ3Ff8chLp661LF3bMB8GA1UdIwQYMBaAFBAWCqN4IXexOOaw
BUQ5inAftMUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RUJZS28zZ2hkN0U0NXJBRlJEbUtjQi0weFJRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jYy82MWU1ODMtNGMwNy00M2RiLWIyM2MtMmIxMmEwMDVkNWZlLzEv
N1ZWTmhMcDVRQ05uY1ZfeHlFdW5yclVzWGRzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82
MWU1ODMtNGMwNy00M2RiLWIyM2MtMmIxMmEwMDVkNWZlLzEvRUJZS28zZ2hkN0U0
NXJBRlJEbUtjQi0weFJRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RyNMA0GCSqGSIb3DQEBCwUAA4IB
AQCzlYqLSYsYER2xgm+ZBjlH9mFohYPa25Vf3d4CHeBX858RFamWpEvky2toKLBE
OoB5aSEkeAoKoQQQPYwhj9LkDm+DH5wQbLuYmV4ZuTm6JoBLP6K+QrZAyloW1M1p
kaG2kwDVNR03OJX6Z7v848dEVe7CVmTv5PF0y7hOaD0j9scXgkDDT0FPVkI2UkmZ
6+ZtEp3gCPRJ/8R4e1bLbOSemtJ8c3dU6CtwrHmWYSmwAxutOsDF0oQFmiaPE8Ya
aODJUnxpelPumwZjo5CGoOe+N1W4GjKAC+151L+kb42KZnhY0xngKYAbUri8aRtY
z6rM/mDduDOAqKJJ8A0gaYjq
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:37 2025 by rpki-client