Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa
File: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (raw, json)
Hash identifier: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=
Subject key identifier: 56:A1:F2:CA:22:1F:FC:C3:47:45:44:0D:E6:60:2F:B1:D4:3F:5B:A2
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 019425FC96AEC0EBD20BE69C5FC0BF441509
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa
Signing time: Thu 02 Jan 2025 07:48:18 +0000
ROA not before: Thu 02 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25389
IP address blocks: 217.12.80.0/24 maxlen: 24
217.12.81.0/24 maxlen: 24
217.12.82.0/24 maxlen: 24
217.12.83.0/24 maxlen: 24
217.12.84.0/24 maxlen: 24
217.12.85.0/24 maxlen: 24
217.12.86.0/24 maxlen: 24
217.12.87.0/24 maxlen: 24
217.12.88.0/24 maxlen: 24
217.12.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:96:ae:c0:eb:d2:0b:e6:9c:5f:c0:bf:44:15:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Jan 2 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56a1f2ca221ffcc34745440de6602fb1d43f5ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:57:2c:e3:59:f9:64:2d:e1:46:e4:4e:42:
e6:6d:80:30:a1:19:e6:84:ed:37:33:e5:63:12:a5:
c0:b7:e6:f5:4a:23:56:58:f9:d9:75:a6:90:1b:07:
46:b9:17:10:cb:78:71:6f:d2:27:51:fc:76:8f:2c:
c0:9a:1f:c0:61:e0:28:87:15:26:5b:b0:92:13:f8:
a8:a7:7f:00:36:db:0e:c2:e6:95:b3:3a:71:c4:be:
d5:66:9a:6e:08:de:ed:2a:e4:e4:d9:f6:78:0b:a0:
c3:e5:d3:e1:c5:0d:57:47:87:d7:dd:26:52:a3:de:
4b:46:05:fd:dc:16:3d:38:38:c9:fb:a8:a9:60:e0:
c9:1f:7b:4d:79:86:56:19:5f:56:f4:74:39:a5:42:
bb:56:ef:b4:5b:11:2c:d0:3f:cf:38:14:d3:de:b1:
b9:59:f8:04:0b:7c:d3:96:ca:dd:b6:ae:e7:8a:60:
db:07:07:41:a7:f8:45:b7:e4:5e:f6:f6:10:33:bf:
ef:50:3a:ce:1c:65:73:58:b9:f1:06:47:23:c9:cd:
bf:88:ea:60:7c:5b:d4:81:25:d8:73:3a:c9:48:14:
e2:44:2e:d5:38:7d:1a:39:fd:82:90:d2:c1:d4:93:
bb:78:2b:3f:8c:68:a1:71:03:e9:d7:dd:15:c1:4d:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A1:F2:CA:22:1F:FC:C3:47:45:44:0D:E6:60:2F:B1:D4:3F:5B:A2
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.80.0-217.12.89.255
Signature Algorithm: sha256WithRSAEncryption
29:01:bf:7f:1b:06:ec:94:53:0f:45:26:83:dd:b4:3e:ca:ef:
3b:1e:36:42:e7:4a:45:e7:d0:43:8f:8f:dc:b5:c4:3a:52:01:
ac:02:23:08:cd:a0:b0:ba:07:ac:fc:55:e9:f1:de:5d:56:0e:
a1:d5:6b:3c:d2:4d:cf:2d:aa:55:13:9c:af:3a:f5:48:3e:7e:
3a:6d:ee:bc:fc:d1:0c:d8:99:fb:b3:df:f1:98:c7:7c:e2:8e:
1c:c3:27:3c:37:80:15:f5:19:e5:f7:2a:f8:88:57:ee:5b:41:
80:67:39:f8:2f:65:36:e2:8d:b4:22:07:96:bf:09:7f:54:a6:
cc:c9:c9:af:21:5e:df:bd:0a:7b:c1:1c:80:62:70:b5:8f:76:
64:e5:85:31:c4:85:22:0e:4a:d3:e4:9c:79:9a:f8:7c:13:7a:
ab:f3:4b:c5:33:b7:01:3c:06:1f:06:1c:7e:eb:71:89:d3:6a:
e8:35:04:58:81:00:37:1b:75:0d:ec:fd:ae:1e:8e:1c:0f:f2:
65:a4:9f:d3:5f:be:e1:c6:a1:7a:b0:be:38:c2:7f:d3:d4:dd:
19:2a:44:48:73:6c:fb:18:73:0f:fd:01:80:fb:36:7c:d7:6d:
13:04:d1:af:f1:89:fe:4b:0c:80:f2:96:77:b1:01:11:15:da:
1d:47:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:53 2025 by rpki-client