Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/bjYs7ZD3deIQQQM9tOaIB-RB7mk.roa
File: bjYs7ZD3deIQQQM9tOaIB-RB7mk.roa (raw, json)
Hash identifier: Ky2vhTtjj62W/ialUzlmOflfLlmCCCg32X1GC7x9Ss4=
Subject key identifier: 6E:36:2C:ED:90:F7:75:E2:10:41:03:3D:B4:E6:88:07:E4:41:EE:69
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0193AC116A622C7ED893DCCF4FA879C71B40
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/bjYs7ZD3deIQQQM9tOaIB-RB7mk.roa
Signing time: Mon 09 Dec 2024 15:37:22 +0000
ROA not before: Mon 09 Dec 2024 15:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 171.33.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:11:6a:62:2c:7e:d8:93:dc:cf:4f:a8:79:c7:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Dec 9 15:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e362ced90f775e21041033db4e68807e441ee69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:8f:ed:59:d3:fc:61:89:73:98:22:0c:9b:
71:2f:ef:83:15:11:d3:13:38:ef:ae:e5:9f:83:02:
31:dd:39:a5:0e:be:3f:5b:ff:71:38:ce:19:ab:00:
95:a4:37:f9:86:71:16:c8:6c:b9:fc:a9:66:40:31:
8f:84:b4:97:14:e7:25:90:66:53:df:4b:c2:19:d5:
90:8f:47:9a:e0:c3:1b:4a:71:00:37:bd:3d:6a:67:
45:d3:7f:4b:57:a7:72:4a:22:92:32:62:25:45:35:
fa:d7:56:60:b7:ad:03:ee:3c:f7:3c:6d:2b:12:21:
79:52:e7:00:3c:43:3e:18:b1:d3:d0:1c:76:d2:42:
a9:85:59:dd:29:21:db:f9:bb:41:a2:6d:dc:16:a7:
7e:df:ca:2e:5c:c1:9e:50:77:ae:0c:ef:d7:08:58:
37:5c:79:d6:5a:37:80:37:b0:ef:bb:43:68:9b:af:
f3:ae:2b:fe:d6:68:63:43:6a:13:c7:6f:a8:64:16:
37:e7:f1:48:52:d5:88:ae:cd:5b:a9:cc:14:8b:fb:
58:dd:30:7d:2f:a1:84:1f:e3:81:26:17:2e:e8:fe:
1c:3a:e6:9b:73:74:26:2c:3f:68:22:9a:75:bd:f2:
11:0e:0a:fa:22:a1:5b:68:77:ee:fd:dd:df:bc:e6:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:36:2C:ED:90:F7:75:E2:10:41:03:3D:B4:E6:88:07:E4:41:EE:69
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/bjYs7ZD3deIQQQM9tOaIB-RB7mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f4:a6:55:bc:37:ce:d9:0d:81:d9:c1:56:0a:dd:a8:0f:80:
5c:d8:2d:6e:58:b3:a1:c4:62:3c:bb:1b:f8:a7:75:1c:7e:03:
68:30:ba:85:7b:89:eb:d7:ac:a1:23:ba:a5:e4:65:af:22:12:
8f:79:84:8b:18:c6:8b:a5:9e:e7:5f:13:fd:ec:6d:40:72:d8:
e0:13:eb:32:0a:b2:7b:0a:77:d6:00:ce:e3:28:55:41:23:1e:
cc:aa:ca:8a:65:7d:a4:aa:f2:71:f6:a6:3e:f8:ec:6c:c7:fa:
0f:20:9f:9d:c4:87:30:8b:fa:08:4a:a0:12:79:53:71:5e:99:
14:3e:ec:fc:d9:f8:9b:f5:de:00:15:9d:6f:36:00:51:f2:d6:
6b:23:c5:ab:f4:d3:9f:f8:10:44:69:01:dc:52:1e:ea:09:eb:
3c:7b:59:ea:5c:54:b0:35:51:cc:dd:e0:b9:eb:b2:dc:8b:26:
ae:4e:8a:5e:9d:6a:07:0c:a9:75:2d:fa:7e:1f:98:75:f9:bc:
6a:42:d0:5f:3b:f5:55:e4:59:c9:6a:89:09:d7:62:38:06:54:
eb:5b:ca:2e:a8:63:68:ee:3c:49:b3:c6:06:86:6a:7f:73:e4:
d9:91:06:92:6b:aa:ca:c9:db:8d:8e:02:d3:80:87:c7:0e:4a:
d5:87:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:05:45 2025 by rpki-client