Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/KVeQXWcxPR28r43yARKQVR7If28.roa
File: KVeQXWcxPR28r43yARKQVR7If28.roa (raw, json)
Hash identifier: 54aiLzjrsQ95xlXM1m92lXyheuVZSyRQfRAaG+bmDIs=
Subject key identifier: 29:57:90:5D:67:31:3D:1D:BC:AF:8D:F2:01:12:90:55:1E:C8:7F:6F
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01948D3631833D45490FC9188337BA5C0373
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/KVeQXWcxPR28r43yARKQVR7If28.roa
Signing time: Wed 22 Jan 2025 08:52:06 +0000
ROA not before: Wed 22 Jan 2025 08:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 178.17.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:36:31:83:3d:45:49:0f:c9:18:83:37:ba:5c:03:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 22 08:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2957905d67313d1dbcaf8df2011290551ec87f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:92:b3:6b:6b:7e:c7:98:29:cd:40:1e:78:
9f:13:00:0c:ee:b1:57:72:cc:45:12:40:01:c6:e4:
87:be:a1:99:01:67:6b:07:eb:5f:c4:3d:a9:bf:ed:
02:73:b8:79:24:90:d6:2f:6d:40:9b:6f:0c:5d:a1:
b0:8f:d2:12:e4:e0:df:d2:86:fa:41:b6:1b:45:8b:
19:38:c8:49:1c:74:89:a2:d4:2e:ba:85:dd:d3:43:
d3:22:a3:30:cf:fa:27:c1:74:12:af:ab:1d:a3:52:
82:41:ba:52:a3:70:b0:76:dc:0d:52:46:e1:13:7c:
42:e2:22:9d:a7:fe:ad:de:a3:de:1b:d0:45:d1:a3:
c9:c4:eb:9d:72:e1:db:bc:7f:8b:4a:41:fb:fb:f5:
75:cb:66:35:57:4e:18:75:0a:a9:c3:bc:a6:de:f9:
eb:0e:03:5b:a2:d9:b7:fe:82:01:ac:f2:d3:0d:64:
cf:62:6e:b0:15:83:0b:0b:bb:e8:4e:f1:0f:38:91:
6c:6a:51:77:fa:27:88:4d:e5:6a:a3:c6:f0:1e:34:
8b:9b:db:67:69:f5:88:72:a3:90:ec:ba:e8:74:d7:
05:db:b4:ec:37:05:d3:04:d5:1d:6c:f1:bd:94:dd:
e7:f7:e1:72:bf:89:0b:8d:f8:c3:ef:50:6b:98:15:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:57:90:5D:67:31:3D:1D:BC:AF:8D:F2:01:12:90:55:1E:C8:7F:6F
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/KVeQXWcxPR28r43yARKQVR7If28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7b:61:ec:b0:42:82:b3:93:7a:05:ba:a9:59:4a:24:b1:e7:
e1:13:18:48:94:cc:cd:a2:db:90:82:93:50:8e:e7:67:ef:db:
df:ae:e6:63:9a:12:cd:12:b5:bc:2c:af:73:9c:6a:b2:87:96:
c0:3d:78:d6:05:74:27:2b:19:48:08:90:9e:23:aa:7f:b3:cf:
34:c3:96:a2:ab:75:76:00:6d:a5:b5:8b:da:03:ad:66:06:4f:
11:be:c3:72:4f:4e:37:a1:a4:a3:23:26:e3:0f:29:5c:e1:fe:
e7:bc:78:59:c7:4f:14:f9:00:d6:3b:b3:1a:a3:25:74:10:2d:
74:73:ca:51:8c:af:f6:45:98:ec:3d:e9:ae:87:02:72:54:fd:
85:00:4b:8b:af:73:ee:c0:66:7a:f4:14:1e:52:23:d0:a7:f8:
9e:7b:69:fa:e6:91:52:ad:38:ea:a0:e2:f8:46:29:90:19:7b:
63:15:6d:30:4c:20:90:1a:fc:78:22:26:1c:0a:58:27:2b:a8:
a8:23:51:1a:76:b1:6b:5a:d3:b6:e1:11:3c:3f:e8:ac:d3:f9:
4a:2b:ee:f3:01:3b:36:7c:91:e4:5c:fc:df:a2:35:d6:6e:32:
3c:9d:5d:76:9a:39:cb:8d:d5:dc:0f:7d:20:e0:c9:13:81:55:
28:aa:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:24 2025 by rpki-client