Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/P2xLD0kn7OL7p2q913Y9a8RAM_8.roa
File: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (raw, json)
Hash identifier: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=
Subject key identifier: 3F:6C:4B:0F:49:27:EC:E2:FB:A7:6A:BD:D7:76:3D:6B:C4:40:33:FF
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019427489072F66AB245B5D71225988073F4
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/P2xLD0kn7OL7p2q913Y9a8RAM_8.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200924
IP address blocks: 217.147.48.0/20 maxlen: 24
217.147.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:90:72:f6:6a:b2:45:b5:d7:12:25:98:80:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f6c4b0f4927ece2fba76abdd7763d6bc44033ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:64:66:d5:69:47:bf:25:99:51:a5:51:dd:
dc:42:9a:77:f7:f2:b1:5b:98:92:99:c8:63:07:fc:
e8:7c:4d:48:a9:a6:72:09:23:5f:5e:54:19:19:e0:
9d:90:b3:89:51:9f:c7:9a:f5:10:c8:66:d4:ea:f7:
73:1c:33:05:0f:9e:af:61:b9:71:f8:0b:17:5a:09:
62:91:8a:c8:49:05:62:ef:49:c2:29:09:8f:46:6a:
ca:8f:d4:1c:d7:7a:08:ce:95:af:70:2f:2d:8d:24:
6a:c2:68:af:ed:8e:ea:c6:2c:dd:ad:8f:d4:a4:b2:
96:88:1f:2a:3b:01:3f:04:e2:06:54:49:83:f2:b1:
b2:06:60:60:1b:36:08:be:d4:d4:a9:49:6e:b1:4f:
4e:cd:ba:cb:7a:91:c8:53:9a:ed:a4:50:84:d9:c3:
51:14:8e:ce:f4:4e:04:c2:f3:41:b7:db:f7:5d:85:
28:d6:2e:ad:1d:21:a3:c1:ff:8d:75:9b:4c:96:ca:
9e:fe:6c:cc:12:7e:fa:b6:9f:36:7a:40:22:3e:f5:
17:86:3d:4b:8c:6e:34:cc:a1:db:3c:9b:da:ea:dc:
22:ea:b2:e1:fe:eb:b8:29:bd:7c:eb:af:1f:04:eb:
62:50:65:b5:94:65:29:0e:b5:a1:6b:30:60:cf:1f:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:4B:0F:49:27:EC:E2:FB:A7:6A:BD:D7:76:3D:6B:C4:40:33:FF
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/P2xLD0kn7OL7p2q913Y9a8RAM_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.48.0/20
Signature Algorithm: sha256WithRSAEncryption
59:0f:f4:5d:28:39:7c:fa:65:8c:f5:6f:e7:b2:4a:db:4f:15:
2b:6e:9b:c0:0e:98:eb:46:80:1a:cc:b5:84:7f:65:23:bf:c1:
c6:3c:f1:e4:d1:51:37:07:7e:7d:51:56:36:a8:4b:f0:51:7d:
24:66:8b:c4:3c:e9:5a:84:de:a1:89:96:61:4e:cd:c6:4a:0a:
23:74:26:a0:af:fc:7f:fd:90:78:4a:7a:24:d2:67:76:52:25:
7b:c3:9c:9e:5c:98:64:0f:e0:aa:43:03:55:da:ca:a7:b8:07:
3a:b7:da:ae:d9:fd:5b:dc:83:2f:c1:fe:40:91:3b:1f:fc:a8:
39:b2:36:3c:68:bb:e9:20:21:7d:f7:af:f1:cb:a3:04:d5:32:
ce:91:5b:a7:c0:2a:aa:d4:c2:5e:3b:c9:6d:88:64:f7:43:b0:
84:b2:7e:2a:b5:b3:cd:f1:f6:1b:0d:a9:f3:af:c7:ac:53:ea:
96:c0:da:d3:db:ba:ad:d1:c3:35:f1:ce:c1:f6:f1:3d:66:46:
1d:f6:d2:75:60:00:ac:e2:3f:6e:f2:aa:65:d8:f6:fd:8e:84:
6e:ea:39:8f:c4:ae:42:2e:7a:89:93:e4:6b:fb:ab:09:67:eb:
51:55:54:96:4e:f2:0b:78:cc:63:c1:2c:38:28:3b:ac:61:38:
42:d4:09:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSJBy9mqyRbXXEiWYgHP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjUwMTAyMTM1MDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjZjNGIwZjQ5MjdlY2UyZmJhNzZhYmRkNzc2M2Q2YmM0NDAzM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ixkZtVpR78lmVGlUd3cQpp39/Kx
W5iSmchjB/zofE1IqaZyCSNfXlQZGeCdkLOJUZ/HmvUQyGbU6vdzHDMFD56vYblx
+AsXWglikYrISQVi70nCKQmPRmrKj9Qc13oIzpWvcC8tjSRqwmiv7Y7qxizdrY/U
pLKWiB8qOwE/BOIGVEmD8rGyBmBgGzYIvtTUqUlusU9OzbrLepHIU5rtpFCE2cNR
FI7O9E4EwvNBt9v3XYUo1i6tHSGjwf+NdZtMlsqe/mzMEn76tp82ekAiPvUXhj1L
jG40zKHbPJva6twi6rLh/uu4Kb18668fBOtiUGW1lGUpDrWhazBgzx+xYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9sSw9JJ+zi+6dqvdd2PWvEQDP/MB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvUDJ4TEQwa243T0w3cDJxOTEzWTlhOFJBTV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZMwMA0G
CSqGSIb3DQEBCwUAA4IBAQBZD/RdKDl8+mWM9W/nskrbTxUrbpvADpjrRoAazLWE
f2Ujv8HGPPHk0VE3B359UVY2qEvwUX0kZovEPOlahN6hiZZhTs3GSgojdCagr/x/
/ZB4Snok0md2UiV7w5yeXJhkD+CqQwNV2sqnuAc6t9qu2f1b3IMvwf5AkTsf/Kg5
sjY8aLvpICF996/xy6ME1TLOkVunwCqq1MJeO8ltiGT3Q7CEsn4qtbPN8fYbDanz
r8esU+qWwNrT27qt0cM18c7B9vE9ZkYd9tJ1YACs4j9u8qpl2Pb9joRu6jmPxK5C
LnqJk+Rr+6sJZ+tRVVSWTvILeMxjwSw4KDusYThC1Am4
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:47 2025 by rpki-client