Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/1-R15OZ8yhmHdISvbr_1Ri3cDZ-M.roa
File: 1-R15OZ8yhmHdISvbr_1Ri3cDZ-M.roa (raw, json)
Hash identifier: MXgBkgD1cpMIdZhcVtjVUUNbRZzOM+7zgwwCRFoukNw=
Subject key identifier: F9:1D:79:39:9F:32:86:61:DD:21:2B:DB:AF:FD:51:8B:77:03:67:E3
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C76E6D58FBA6D99EB2362FCF093D9
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/1-R15OZ8yhmHdISvbr_1Ri3cDZ-M.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209406
IP address blocks: 217.199.219.0/24 maxlen: 24
2a03:220:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:76:e6:d5:8f:ba:6d:99:eb:23:62:fc:f0:93:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f91d79399f328661dd212bdbaffd518b770367e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:aa:18:29:4a:1a:cd:6b:28:95:a4:c3:00:
ed:be:ec:3e:29:47:10:88:94:6a:ce:8e:b3:7c:ca:
53:84:e2:2a:2b:7e:ef:7c:7b:b9:6e:cb:26:50:ee:
b4:49:f7:0b:e4:93:d1:b5:5c:12:d6:f6:d0:aa:bf:
fe:82:3b:fe:c5:04:b3:28:73:46:0d:44:bd:13:90:
73:02:39:b2:7e:6f:80:4c:fb:3f:74:e7:cf:0c:0f:
46:92:fd:85:db:61:68:0d:3c:f8:b3:c7:a3:06:26:
5e:a6:3d:dc:8c:f1:a5:4f:19:01:6d:25:8f:c5:5b:
a2:1d:5b:f8:46:2b:29:e9:96:c6:5b:9d:71:53:98:
14:10:40:bb:3b:aa:7a:2c:3c:df:c2:a9:f4:0f:25:
09:84:d8:7d:e0:5a:59:4b:47:1a:b6:ce:f1:18:df:
a4:94:64:4e:0a:bd:42:aa:72:7f:c2:e0:9d:da:a2:
9f:c9:cc:58:22:44:a1:7e:4e:37:0f:46:90:f5:b7:
2d:58:f4:5a:6a:79:41:a7:2e:7e:b9:4f:a7:52:96:
33:6d:e5:4d:71:84:90:27:de:aa:9d:f7:b2:62:95:
70:93:2e:d6:a3:36:6f:64:c4:f5:31:d3:0c:14:f4:
4f:ca:17:9e:4b:6f:9a:b8:8b:c2:83:d2:1a:82:cd:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:79:39:9F:32:86:61:DD:21:2B:DB:AF:FD:51:8B:77:03:67:E3
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/1-R15OZ8yhmHdISvbr_1Ri3cDZ-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.219.0/24
IPv6:
2a03:220:f000::/48
Signature Algorithm: sha256WithRSAEncryption
a8:3c:c4:30:da:f5:0e:32:a8:93:b6:90:59:82:79:31:1e:f7:
04:5d:bb:32:82:7a:f8:2f:55:48:a1:dc:3e:01:21:d0:a9:f9:
45:b0:3a:d5:46:6e:f2:ca:fc:f7:f6:df:33:3f:32:22:97:96:
e4:cc:c0:36:d2:50:67:cf:9c:b9:4f:84:7a:a7:73:ef:32:12:
32:e2:e9:c2:ce:28:29:bf:65:c0:94:36:80:74:9c:66:9f:58:
54:58:d8:6d:36:3b:86:59:e8:ba:60:43:f8:52:94:e2:4b:37:
50:bd:c4:01:4a:55:ba:e7:ee:3e:5f:cd:76:30:e3:58:12:4e:
78:1c:1f:ab:c8:f9:64:87:67:3d:53:6a:1e:f2:55:58:a2:82:
71:70:df:dc:09:b5:9c:f0:43:8a:11:63:9e:02:e5:58:86:d0:
9f:5e:25:05:74:4a:ec:b9:fb:8c:9c:1d:14:39:07:e1:aa:84:
ed:cb:f2:e5:ff:7b:f5:53:bc:4f:7e:a8:93:46:df:7d:1a:41:
ff:38:de:cd:17:fc:6f:f0:1e:d8:0d:53:04:7e:b1:16:8d:be:
a3:5b:1d:ef:8f:dd:86:61:b6:17:16:6c:dd:b8:4e:db:51:03:
44:a5:7f:b2:0e:90:81:b4:d2:76:c6:50:92:0c:89:40:9d:52:
07:f0:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 17:51:12 2025 by rpki-client on console.sobornost.net