Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/t16GyUN0G0ERD6SmYA9i0r30zic.roa
File: t16GyUN0G0ERD6SmYA9i0r30zic.roa (raw, json)
Hash identifier: oKvu0HJILKuRj6gBGrcQg1IlSuH1C1Ay4XKjgYCj9is=
Subject key identifier: B7:5E:86:C9:43:74:1B:41:11:0F:A4:A6:60:0F:62:D2:BD:F4:CE:27
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019425FCBF66315A68184DF3959513D8F261
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/t16GyUN0G0ERD6SmYA9i0r30zic.roa
Signing time: Thu 02 Jan 2025 07:48:28 +0000
ROA not before: Thu 02 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209824
IP address blocks: 217.113.54.0/23 maxlen: 23
217.113.54.0/24 maxlen: 24
217.113.55.0/24 maxlen: 24
2a13:e700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:bf:66:31:5a:68:18:4d:f3:95:95:13:d8:f2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Jan 2 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b75e86c943741b41110fa4a6600f62d2bdf4ce27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:d2:5b:99:bd:a8:71:ab:b9:3d:0e:b5:4d:
6e:d8:ac:18:b2:47:f8:29:53:6c:1a:ae:d1:45:2e:
4b:eb:92:8f:ac:3a:18:06:0c:70:89:25:a9:e0:e0:
8e:cf:97:3d:88:2f:a1:84:35:91:9d:84:43:c0:d0:
de:dd:84:67:e5:1b:4b:2a:82:d6:68:53:f0:06:c5:
d0:06:fc:0a:42:28:e7:24:ad:b9:d6:53:3e:22:88:
bf:7c:59:b5:08:f3:eb:98:82:78:09:02:13:d9:f4:
9a:4e:df:77:49:d6:f3:07:aa:06:ee:8d:e5:10:d8:
e4:3a:d8:c8:d1:b4:1f:51:b4:79:cc:1d:95:89:fe:
d1:15:bf:29:e3:4f:e5:1c:01:27:44:dc:91:b0:c4:
61:f5:52:9d:00:f1:a1:a9:6f:16:ca:d6:7e:7a:af:
b6:9a:74:ec:4b:10:46:d3:ac:02:15:ed:94:06:66:
19:1a:9e:5b:ac:cd:68:6b:4d:c4:aa:8f:98:33:61:
89:44:59:9e:45:df:ef:31:9c:53:7e:b7:d5:05:bc:
1c:79:e1:2e:c8:5a:db:87:52:e6:e7:e2:10:a0:3c:
9b:fd:3e:d8:68:33:08:c5:0b:51:ae:6c:46:f4:5c:
58:f9:e3:66:bc:f1:a1:f0:5c:69:b6:e9:c0:1d:ce:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:86:C9:43:74:1B:41:11:0F:A4:A6:60:0F:62:D2:BD:F4:CE:27
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/t16GyUN0G0ERD6SmYA9i0r30zic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.54.0/23
IPv6:
2a13:e700::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e7:7e:f4:c9:0f:0c:6b:7e:7d:c5:10:b2:7c:79:83:ee:2b:
ed:77:cf:82:74:b7:eb:17:5c:f9:b4:80:9d:d0:e5:06:96:79:
73:9a:5e:40:7f:a1:20:1a:65:bb:4b:e1:ee:f1:6a:a9:0c:2e:
b8:13:86:46:79:9c:b4:10:94:61:74:f1:fd:cf:1c:16:0f:86:
ed:d9:31:70:75:48:31:81:a9:2e:75:c8:01:d3:44:fb:f2:8d:
ed:b4:8c:a3:39:ff:db:ca:b7:95:b3:dc:d9:54:82:0c:2a:58:
e7:a1:dc:9d:60:69:89:75:08:0f:12:87:b3:2b:82:f9:18:c5:
db:e9:fb:68:07:f4:66:ce:97:b8:22:3a:16:99:ea:b4:28:4d:
7c:92:3a:55:48:88:c0:1e:41:36:1b:9d:24:63:8d:f5:95:4b:
63:4d:95:b9:5c:0b:fa:0d:24:51:ff:cc:5f:c5:42:3e:5a:7d:
6d:4b:7a:6f:46:c1:b8:e7:69:e7:f3:a7:5d:e2:48:51:3a:03:
5a:92:b4:20:60:1c:72:35:30:2a:b5:12:43:57:63:ea:df:c2:
1c:12:ad:ba:41:43:7c:67:fd:e0:fe:e4:1c:8a:11:c3:6a:66:
a0:15:c8:82:0d:67:bf:b3:a7:2b:28:38:9b:2c:bc:c3:96:45:
74:4f:93:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQl/L9mMVpoGE3zlZUT2PJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh
NTZjMDYwHhcNMjUwMTAyMDc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzVlODZjOTQzNzQxYjQxMTEwZmE0YTY2MDBmNjJkMmJkZjRjZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3jSW5m9qHGruT0OtU1u2KwYskf4
KVNsGq7RRS5L65KPrDoYBgxwiSWp4OCOz5c9iC+hhDWRnYRDwNDe3YRn5RtLKoLW
aFPwBsXQBvwKQijnJK251lM+Ioi/fFm1CPPrmIJ4CQIT2fSaTt93SdbzB6oG7o3l
ENjkOtjI0bQfUbR5zB2Vif7RFb8p40/lHAEnRNyRsMRh9VKdAPGhqW8WytZ+eq+2
mnTsSxBG06wCFe2UBmYZGp5brM1oa03Eqo+YM2GJRFmeRd/vMZxTfrfVBbwceeEu
yFrbh1Lm5+IQoDyb/T7YaDMIxQtRrmxG9FxY+eNmvPGh8FxptunAHc6OeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLdehslDdBtBEQ+kpmAPYtK99M4nMB8GA1UdIwQY
MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt
NmEzNjcwNWJiYTZmLzEvdDE2R3lVTjBHMEVSRDZTbVlBOWkwcjMwemljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm
LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB2XE2MA8E
AgACMAkDBwAqE+cAAAAwDQYJKoZIhvcNAQELBQADggEBAA3nfvTJDwxrfn3FELJ8
eYPuK+13z4J0t+sXXPm0gJ3Q5QaWeXOaXkB/oSAaZbtL4e7xaqkMLrgThkZ5nLQQ
lGF08f3PHBYPhu3ZMXB1SDGBqS51yAHTRPvyje20jKM5/9vKt5Wz3NlUggwqWOeh
3J1gaYl1CA8Sh7MrgvkYxdvp+2gH9GbOl7giOhaZ6rQoTXySOlVIiMAeQTYbnSRj
jfWVS2NNlblcC/oNJFH/zF/FQj5afW1Lem9Gwbjnaefzp13iSFE6A1qStCBgHHI1
MCq1EkNXY+rfwhwSrbpBQ3xn/eD+5ByKEcNqZqAVyIINZ7+zpysoOJssvMOWRXRP
k6A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:17 2025 by rpki-client