Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/t6uSEWGMLVkfT8Xrm1dwRGiLdzo.roa
File: t6uSEWGMLVkfT8Xrm1dwRGiLdzo.roa (raw, json)
Hash identifier: 3Yixt06gUpAcvrBcFcpqf2gG2uHOYX6BO6vcH9ZL43o=
Subject key identifier: B7:AB:92:11:61:8C:2D:59:1F:4F:C5:EB:9B:57:70:44:68:8B:77:3A
Certificate issuer: /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial: 0185DD7C6D84E59352949C0F03D292A34C80
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/t6uSEWGMLVkfT8Xrm1dwRGiLdzo.roa
Signing time: Mon 23 Jan 2023 07:16:37 +0000
ROA not before: Mon 23 Jan 2023 07:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:7c:6d:84:e5:93:52:94:9c:0f:03:d2:92:a3:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Validity
Not Before: Jan 23 07:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ab9211618c2d591f4fc5eb9b577044688b773a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:69:67:90:6f:c9:54:bf:9f:b0:61:b5:8f:
df:b1:67:68:49:87:44:2c:f5:43:7d:81:3c:d3:30:
16:d8:cd:e1:8e:a9:10:1f:ba:45:84:6c:fa:aa:e8:
28:96:a5:03:44:10:14:04:8d:5f:fd:ed:65:48:4f:
e6:b7:40:50:9a:ab:cd:ab:bc:aa:ca:f4:39:8d:a3:
fe:96:ba:f2:cb:e5:0b:07:ed:5a:83:0b:88:53:37:
ea:1a:f9:08:27:ad:cc:a2:3b:ce:bc:6d:5c:5f:3b:
60:a1:4d:87:78:6c:48:e5:af:6f:38:d9:9b:d0:bd:
41:69:27:fe:55:e3:8b:eb:eb:8e:cc:b3:c9:b0:08:
40:4f:06:c3:27:4f:9d:50:ad:48:14:77:31:8d:fd:
8c:ce:43:4b:8d:75:0c:77:d6:a7:51:56:76:aa:1a:
1a:3f:15:6e:3e:6e:f9:d3:a3:07:4c:95:8f:3f:77:
1e:8f:52:72:00:91:d3:ce:2a:8e:9b:a1:3f:d5:25:
13:a0:bc:a4:1f:19:3b:be:1c:2f:19:96:d9:b9:8f:
4a:3d:17:86:23:f5:94:54:e4:cc:f2:16:21:4e:f7:
09:3a:db:54:d0:8f:04:75:cd:54:13:1a:3b:5a:b1:
bd:8f:53:8e:3c:b6:34:43:0f:c9:38:38:d2:06:89:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:92:11:61:8C:2D:59:1F:4F:C5:EB:9B:57:70:44:68:8B:77:3A
X509v3 Authority Key Identifier:
keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/t6uSEWGMLVkfT8Xrm1dwRGiLdzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9d:8f:15:85:b0:63:68:74:bf:b9:cc:56:7e:83:8c:93:50:
ff:1f:c8:53:67:ba:d9:dc:84:f7:eb:15:ef:ae:95:de:70:7b:
cf:a3:e3:0d:1f:cb:7a:46:66:e4:e5:ee:f5:75:b3:89:f2:df:
5b:79:83:f7:f3:7d:cd:0d:7d:b2:58:98:1f:ce:40:40:e4:37:
1e:8b:e6:05:e0:bb:2e:fd:aa:97:c2:1b:b2:fe:21:94:72:a9:
9c:ad:68:32:a7:5c:c0:df:92:0c:c3:d9:21:af:8f:78:bc:f4:
cf:e9:36:a9:92:6f:32:24:e6:ad:90:4e:bd:e0:aa:65:a3:e2:
35:16:9e:c0:05:b9:84:77:4b:dc:b7:d6:df:9e:9a:f5:e6:bd:
31:36:c7:f1:6e:74:b4:e2:b4:75:82:e3:ba:26:40:9c:03:b9:
59:20:83:e5:d3:2c:27:2a:e7:72:95:da:b1:c5:86:39:78:16:
81:86:69:e1:b1:11:fa:c2:e9:c4:f5:c2:65:b8:80:bd:1a:a0:
00:45:82:e0:1e:33:81:c3:4d:95:95:61:f2:c9:b1:30:40:b5:
65:4f:0c:10:c8:04:3c:95:df:fd:53:dc:65:22:15:2d:4b:bd:
e7:63:db:77:ef:72:bc:e7:55:76:b4:88:cf:97:41:58:de:00:
ed:b9:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:03:30 2025 by rpki-client