Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/IoK2zTe-OC_dDY_734EVd48qQJ8.roa
File: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (raw, json)
Hash identifier: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=
Subject key identifier: 22:82:B6:CD:37:BE:38:2F:DD:0D:8F:FB:DF:81:15:77:8F:2A:40:9F
Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial: 0194244583F5D3F6456C381897AA91EA25A9
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/IoK2zTe-OC_dDY_734EVd48qQJ8.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199415
IP address blocks: 216.87.54.0/24 maxlen: 24
2001:678:204::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:83:f5:d3:f6:45:6c:38:18:97:aa:91:ea:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2282b6cd37be382fdd0d8ffbdf8115778f2a409f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:bd:77:e2:1d:50:82:74:5e:b4:50:11:1f:
64:d7:9b:35:d5:57:b1:f8:26:f7:11:e7:a4:87:ec:
6b:76:29:85:a9:71:eb:62:c1:3c:54:63:44:6d:62:
f1:a7:bc:02:c7:89:ee:bb:7d:81:d4:71:73:27:fd:
83:0c:d1:f5:b6:26:e3:44:36:01:2a:6d:2b:eb:39:
b9:43:f3:d0:ea:47:87:1a:86:36:1f:ed:4e:17:21:
b3:01:d3:e6:6d:a1:93:65:48:4f:02:b0:2c:a1:c6:
e9:c4:bf:ed:c6:8c:6f:bd:69:14:f8:86:16:d3:be:
0f:a6:bf:2c:17:a9:c2:c6:22:79:bf:5f:99:21:4d:
6c:43:e7:9b:e0:db:af:e1:1a:6f:66:fa:12:75:f3:
70:bc:65:97:59:47:7b:31:ea:ae:83:25:a9:2b:24:
d9:14:89:c6:5e:92:f6:ea:57:4b:c9:5e:5c:7a:0b:
e0:ed:89:c8:87:38:1e:9b:e4:3b:26:5b:47:a7:67:
06:da:bf:3d:16:58:15:05:e6:db:52:9a:39:08:eb:
f1:3e:ec:a8:35:39:0d:7d:3a:bf:7f:c8:c0:4c:cc:
25:b5:0f:64:10:8b:cc:9d:d8:35:57:3f:22:aa:38:
73:b1:5d:a3:f7:1b:1c:4b:3c:72:7f:5a:17:c8:6e:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:82:B6:CD:37:BE:38:2F:DD:0D:8F:FB:DF:81:15:77:8F:2A:40:9F
X509v3 Authority Key Identifier:
keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/IoK2zTe-OC_dDY_734EVd48qQJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.87.54.0/24
IPv6:
2001:678:204::/48
Signature Algorithm: sha256WithRSAEncryption
7d:93:06:82:aa:96:35:d3:8d:90:02:6f:38:98:47:aa:5c:f5:
0e:6c:41:a5:b0:dd:0c:91:1d:e8:b3:7f:7d:86:a5:cb:68:08:
8a:c6:d0:f7:ae:f2:29:40:ce:c2:6c:f4:a0:39:e0:20:c7:49:
8f:ce:b2:e6:37:75:b3:b4:28:75:85:ee:72:17:d9:e6:aa:02:
fe:89:d8:3c:64:78:b1:0f:1f:83:90:f1:6c:21:6d:1f:3e:6c:
fe:f4:0c:1f:ed:00:8a:e7:dc:04:d8:80:05:bb:00:c8:ed:65:
96:f7:b7:ce:db:e9:e9:bd:0d:1d:77:54:fb:45:0e:a0:bc:18:
03:79:9e:68:ea:c6:3d:4e:4c:fe:aa:30:12:f1:b0:df:66:86:
c5:10:1f:bc:11:d5:64:88:b7:a6:fd:a6:87:55:c0:cb:41:2d:
33:8e:9a:51:07:45:31:ca:96:7f:35:94:f7:4e:00:b3:63:3a:
d5:0e:18:30:80:0d:c9:0e:76:bf:28:72:f3:76:4a:6b:0d:c6:
6a:ea:88:e4:f1:2d:19:8a:48:2e:9f:2f:76:c6:bb:a2:3a:3c:
ba:ee:a4:fa:40:12:93:31:81:d0:f8:93:e8:06:21:60:f8:d5:
f6:d2:53:fc:ba:c3:af:3e:c6:c3:96:fb:0f:53:be:47:91:c6:
68:c1:aa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:52 2025 by rpki-client