Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/vtn2byVE40E1nEcxeXOJMFebIWw.roa
File: vtn2byVE40E1nEcxeXOJMFebIWw.roa (raw, json)
Hash identifier: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=
Subject key identifier: BE:D9:F6:6F:25:44:E3:41:35:9C:47:31:79:73:89:30:57:9B:21:6C
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0194228D7CECE7A5A01650BADAEB51E11DA3
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/vtn2byVE40E1nEcxeXOJMFebIWw.roa
Signing time: Wed 01 Jan 2025 15:48:05 +0000
ROA not before: Wed 01 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200703
IP address blocks: 217.27.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7c:ec:e7:a5:a0:16:50:ba:da:eb:51:e1:1d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 1 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed9f66f2544e341359c473179738930579b216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:17:7f:27:0c:a8:5e:4a:1c:e0:d2:a8:82:
42:d5:e0:9d:89:11:4e:d9:4a:b9:e8:a2:13:84:1a:
2c:88:3b:51:ad:ae:ee:a7:7b:37:3d:a0:e8:fd:ff:
90:40:ab:9e:79:ea:da:b2:d2:de:9a:11:1f:5f:b7:
58:30:65:76:31:25:48:cc:1a:8a:96:fc:ce:4c:5b:
39:14:2a:8d:0e:e1:fd:b3:f0:de:47:d2:f1:35:08:
7f:21:ce:91:89:4b:44:ed:a8:1f:ec:50:e8:b2:66:
5e:56:8e:59:87:f7:20:55:94:bf:d8:c5:11:22:63:
49:b2:c8:f3:8b:0d:a3:69:32:73:e1:93:5a:9f:87:
22:3a:f8:96:08:6f:50:09:6d:12:ce:4a:9e:69:44:
bd:99:30:05:ea:b0:89:be:ae:1d:3a:d7:b5:e4:1a:
04:18:7d:09:5b:c8:d6:74:ac:af:bd:21:35:6b:f5:
c8:13:f9:88:3d:e5:c9:8e:0d:8c:87:d1:d2:c9:9e:
bb:a5:a7:ef:bf:67:57:93:31:a8:4d:25:1b:5f:b6:
4b:40:d8:5d:5f:40:2f:1f:86:df:10:fc:9f:43:fd:
10:43:6e:f8:82:31:86:c1:13:33:74:f2:d5:f6:14:
ce:46:c2:f0:2b:85:53:fb:bd:71:43:f2:31:1c:2e:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:F6:6F:25:44:E3:41:35:9C:47:31:79:73:89:30:57:9B:21:6C
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/vtn2byVE40E1nEcxeXOJMFebIWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.27.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:48:6e:f2:c3:ca:65:0a:ec:2b:fd:8e:a7:d0:29:ea:02:a0:
d7:d8:58:37:f0:fa:64:7c:0b:90:3d:f7:44:c0:c8:12:9a:8d:
dd:12:bf:93:97:d7:20:53:99:69:59:52:64:6e:5b:e8:bd:2d:
c3:0c:cb:1f:e3:9d:89:f6:0c:3e:ca:09:77:fe:76:6d:a9:4e:
a4:bb:b6:38:2a:34:ec:5c:24:7c:4a:2d:19:17:72:d6:07:e0:
6e:64:3a:c2:f9:75:60:c1:8d:a6:ee:8f:1c:6e:cb:50:b2:f6:
f9:b6:6b:64:23:eb:01:42:38:50:71:b1:41:18:f4:5a:b5:93:
7d:a4:07:05:81:bb:a5:b2:eb:58:17:a9:0c:fa:d0:2f:75:74:
81:a9:52:94:f5:68:91:55:f9:dd:66:71:76:b5:e6:11:0e:90:
22:07:44:f1:9b:aa:39:3e:86:36:c6:db:8c:8d:18:06:cb:04:
62:a8:2a:b3:3e:3d:ff:14:23:51:6f:ce:a3:4d:d6:25:00:39:
69:2b:2d:34:ff:6c:e7:08:b0:d7:2d:59:34:9c:40:97:f2:72:
07:ef:8b:33:91:91:6a:e5:8e:d0:b5:19:30:04:61:ad:98:50:
23:de:18:18:bf:6e:2c:02:fd:c7:6f:e5:01:29:d3:1e:e0:95:
11:5c:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:26:50 2025 by rpki-client