Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/Rxg5b8TVQSPFdWFOKvBN85kybDA.roa
File: Rxg5b8TVQSPFdWFOKvBN85kybDA.roa (raw, json)
Hash identifier: UtF92U/9meAF41tjwSEGw6eGscll7EeWN/zVkMTCT2M=
Subject key identifier: 47:18:39:6F:C4:D5:41:23:C5:75:61:4E:2A:F0:4D:F3:99:32:6C:30
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 0194266BB53A3F2264826F460C7744EA2AB7
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/Rxg5b8TVQSPFdWFOKvBN85kybDA.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 217.119.96.0/24 maxlen: 24
217.119.98.0/24 maxlen: 24
217.119.104.0/24 maxlen: 24
217.119.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b5:3a:3f:22:64:82:6f:46:0c:77:44:ea:2a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4718396fc4d54123c575614e2af04df399326c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:39:0a:f2:b8:d3:79:57:77:bb:6a:2d:ac:
a0:44:81:08:2f:e5:a5:7a:89:d3:5b:7f:69:6c:6e:
08:38:2f:c3:4c:07:88:ec:76:72:6d:c4:58:1b:cb:
4f:22:9a:86:04:3b:9f:9e:ae:d5:42:fd:b2:18:99:
2a:01:4e:5f:c0:bf:a8:a4:12:ba:ef:61:c2:01:68:
47:73:8d:46:33:d7:a7:f9:34:b1:aa:08:8c:52:c3:
ee:d4:89:ff:84:29:6e:e5:90:66:7a:c0:fb:6f:d5:
12:80:3e:28:4e:a2:00:35:57:02:5a:65:13:22:10:
74:73:53:99:46:76:7d:5a:e0:e8:29:5d:09:d9:5e:
52:6b:76:d4:99:16:26:dc:26:77:94:6e:6b:33:b8:
5b:4c:02:0f:de:96:e2:d9:10:93:76:0e:46:64:17:
ff:6e:ed:20:70:14:bf:d0:88:9b:53:e9:25:ab:e1:
19:09:99:63:3c:b6:98:fb:f0:89:34:6a:ee:34:fd:
09:6a:f9:f4:b6:65:a6:fc:76:50:d1:63:1d:17:95:
d4:26:6e:8b:ef:0f:35:b5:fe:54:43:df:87:2b:f3:
d6:d9:4d:8c:52:b0:28:a0:17:78:68:9e:f4:08:b8:
31:07:b5:91:df:e9:65:10:74:7a:eb:ba:86:ec:23:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:18:39:6F:C4:D5:41:23:C5:75:61:4E:2A:F0:4D:F3:99:32:6C:30
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/Rxg5b8TVQSPFdWFOKvBN85kybDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.96.0/24
217.119.98.0/24
217.119.104.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:ac:07:60:6c:b9:04:1e:b7:49:3f:9a:76:3c:4b:0e:7b:88:
9a:7f:0a:06:b3:dd:b2:bf:30:55:f3:56:ef:c0:4c:49:fa:9b:
5e:26:64:bf:7b:34:54:38:ad:32:b3:d5:64:80:3c:3c:c0:27:
da:57:94:17:75:8b:1f:91:ba:eb:96:59:fa:b8:7f:ee:f2:99:
d0:0c:8f:34:43:3a:ac:51:40:5d:78:db:7c:8b:01:55:af:e1:
ca:88:a9:0d:1d:a7:6a:79:d5:08:aa:0c:13:3a:e8:94:f2:1a:
7d:01:91:a3:b6:12:5b:fc:95:c0:b6:38:c9:96:90:63:c7:cb:
7c:be:3c:70:f0:33:5f:76:80:0d:07:3b:59:16:7c:57:e8:65:
22:92:42:33:c4:68:0a:30:4e:92:3f:40:13:10:66:5e:57:52:
39:d2:4b:de:c6:f6:ac:74:cc:7b:ec:6f:06:24:df:cf:55:1c:
7e:62:1d:07:93:c0:dc:ff:7b:41:5e:da:8a:2a:96:52:55:7b:
65:b0:cc:72:cb:2e:56:3f:dd:5c:13:e5:e8:6a:43:91:63:c5:
b3:bb:01:db:e2:4d:3e:37:91:5a:7d:9b:20:fd:a3:dd:20:46:
3a:ce:f9:6f:cf:50:b2:29:dc:65:e0:57:35:6d:7f:dd:40:e5:
cc:06:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:45 2025 by rpki-client