Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/HWj4rrIG5yLx-R7YJHriQZkaHlU.roa
File: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (raw, json)
Hash identifier: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=
Subject key identifier: 1D:68:F8:AE:B2:06:E7:22:F1:F9:1E:D8:24:7A:E2:41:99:1A:1E:55
Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial: 019425FC53BB383C7F0332ED04436B2507ED
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/HWj4rrIG5yLx-R7YJHriQZkaHlU.roa
Signing time: Thu 02 Jan 2025 07:48:01 +0000
ROA not before: Thu 02 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 217.31.9.0/24 maxlen: 24
217.31.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:53:bb:38:3c:7f:03:32:ed:04:43:6b:25:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d68f8aeb206e722f1f91ed8247ae241991a1e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:27:b2:a1:9a:9e:f8:87:f1:91:1d:6c:cc:
e5:c6:89:ab:db:85:b1:f1:7a:4e:45:52:6a:f7:da:
31:a9:0c:4c:cb:86:eb:ed:8c:bc:fb:73:29:0b:7b:
42:aa:e7:c7:3c:1a:1d:64:21:3d:b9:1d:c9:2f:43:
89:fb:f5:b4:ae:e4:69:15:71:a9:2b:34:c8:58:85:
d2:f6:4d:ad:af:ef:82:09:de:26:ff:50:45:3b:65:
f0:d2:60:d7:c2:c8:9d:49:fc:84:53:ef:af:e2:36:
a8:32:24:64:ee:4e:16:0a:61:70:aa:04:6f:32:4e:
57:5e:c7:90:90:84:78:79:61:a6:c2:ae:fa:9a:37:
3e:2e:2e:69:4f:b2:ea:6b:a8:c8:e4:6a:fb:fd:1f:
52:b3:46:a4:e3:ec:aa:ae:3f:de:98:1e:2c:4c:8c:
a2:c3:38:dc:13:40:96:55:87:b9:3c:5d:8e:5d:21:
5f:c8:99:35:b7:a6:48:16:f0:69:d2:9e:55:10:7c:
a8:31:dd:75:59:fb:a9:21:98:16:d0:de:32:48:9d:
bf:35:fd:2e:e3:3f:6b:cc:25:9e:cf:4d:e6:ce:35:
80:2a:4a:2e:d6:3f:0a:69:84:60:38:13:28:72:be:
ea:c2:5d:ad:67:38:dc:81:86:8c:72:be:7f:9f:5f:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:F8:AE:B2:06:E7:22:F1:F9:1E:D8:24:7A:E2:41:99:1A:1E:55
X509v3 Authority Key Identifier:
keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/HWj4rrIG5yLx-R7YJHriQZkaHlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.31.9.0-217.31.11.255
Signature Algorithm: sha256WithRSAEncryption
5c:6e:75:27:d0:b0:69:00:ad:5a:61:09:eb:d3:c7:92:af:59:
d3:8a:6b:bd:f2:53:bd:f5:f8:d5:fb:49:5f:a4:64:60:95:c9:
ff:72:77:9b:98:9a:ea:b6:81:7e:67:2e:6b:85:18:ff:36:e0:
28:e4:bd:ef:78:ac:dc:23:b9:9c:da:4b:21:52:16:7a:65:ee:
a4:57:e8:56:13:76:8a:b8:1d:62:7f:f1:f6:e8:10:8d:35:a9:
6e:c3:33:68:4c:8e:fe:82:af:39:21:90:f9:40:61:76:52:43:
77:e4:01:9a:4c:92:df:fc:f1:6a:f9:42:c2:2b:13:65:9f:4f:
08:47:b7:3d:91:38:a0:e5:f3:ee:db:26:b4:58:55:28:da:09:
53:7e:d9:06:33:9f:72:f9:e3:67:b0:f2:b9:ff:f3:fb:cf:a1:
0d:77:f9:d4:d5:a6:1a:ba:78:16:55:06:27:09:86:22:be:b5:
91:6b:bb:14:1a:30:92:26:7b:76:08:1f:23:c7:5e:8a:32:f7:
d6:66:05:42:8f:00:10:f1:01:53:12:b4:ad:9e:74:ee:09:88:
7d:29:d6:c2:45:0e:f5:d2:d9:67:b0:9b:21:3e:e2:58:c7:17:
ca:a1:71:91:e3:c1:ef:00:08:3f:c8:e2:dc:19:0a:59:0f:88:
93:0f:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:40 2025 by rpki-client