Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/14hghSYuKbF7DLMEPWygMHVGP7A.roa
File: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (raw, json)
Hash identifier: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=
Subject key identifier: D7:88:60:85:26:2E:29:B1:7B:0C:B3:04:3D:6C:A0:30:75:46:3F:B0
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C763542E8A19AACFB338D10A1A579
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/14hghSYuKbF7DLMEPWygMHVGP7A.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208107
IP address blocks: 217.199.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:76:35:42:e8:a1:9a:ac:fb:33:8d:10:a1:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7886085262e29b17b0cb3043d6ca03075463fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:34:3e:6c:79:63:41:76:c3:fc:2a:27:7d:
4e:7f:61:5e:9c:16:ff:8c:11:62:64:a6:22:e4:f6:
f4:a4:1c:b0:5b:03:e9:36:68:71:a5:2a:a0:2f:30:
a2:94:d5:bc:f1:83:6f:f1:d8:d6:25:50:4b:05:37:
89:2e:f1:2d:59:f9:84:fa:51:db:52:22:70:57:0f:
36:6e:14:31:ee:89:a3:99:c9:44:a4:b9:07:4a:d6:
8f:67:cd:64:4b:58:8a:e2:1c:bf:5a:db:1c:b5:ea:
71:91:97:8a:c3:51:5c:43:7c:7d:25:59:bf:16:d5:
72:5d:47:8e:fa:5c:01:3b:e4:45:47:a0:2b:42:e7:
33:21:67:79:a0:1d:47:0a:a9:72:cd:10:57:08:9f:
47:f4:0a:37:8b:5f:32:20:cc:85:8d:73:bc:a5:f0:
a9:bd:10:18:97:22:c3:13:fb:26:87:49:d9:ed:b6:
4e:cd:f1:7e:07:8f:2e:85:6f:20:16:7f:11:d8:80:
31:bd:e1:49:76:d3:81:de:c5:a2:8b:95:d8:08:1d:
4a:4e:f9:b6:fd:2b:67:9d:06:bd:23:9b:cc:7d:7d:
6e:8b:2d:86:b4:21:90:b4:72:6a:94:97:3a:38:eb:
c7:e9:3a:69:15:7f:a1:56:e6:25:24:b4:e9:90:d4:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:60:85:26:2E:29:B1:7B:0C:B3:04:3D:6C:A0:30:75:46:3F:B0
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/14hghSYuKbF7DLMEPWygMHVGP7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.199.208.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a0:4f:25:1e:2d:38:17:7b:86:ae:bc:78:12:61:bb:35:c7:
6e:bb:f9:b9:16:6c:aa:1b:63:cf:47:c6:cb:1b:47:31:03:1f:
3a:2f:01:c0:1e:0a:03:e4:29:a9:7e:95:af:2a:91:0d:9b:bf:
68:7b:36:5e:4e:bc:5a:1e:fa:e0:f7:2d:d4:68:b8:77:a3:3f:
44:7b:7b:d0:9e:33:49:4f:b7:2f:f3:aa:dc:56:b3:e1:bb:f8:
a6:00:4f:a2:a6:e2:09:90:a7:74:88:0c:35:e1:0e:bf:c4:b1:
6e:af:a1:b3:20:13:22:db:91:9d:56:84:18:d8:5c:34:6d:05:
df:30:9c:c9:b9:7b:7b:53:90:84:4a:03:59:30:32:c0:9c:09:
c6:71:eb:b6:9d:f2:35:f2:3b:15:cd:f2:1a:cf:1c:50:52:ac:
07:cf:ca:90:a1:bf:2c:62:42:89:5b:e8:da:8b:b2:e6:de:f5:
de:06:99:ba:ab:ca:67:b5:36:38:a2:47:9e:4a:56:cc:5e:c7:
6c:65:f3:83:52:51:6b:70:13:31:2d:c5:f8:23:38:99:80:a2:
3a:cf:8f:e5:6b:32:d1:e2:87:9c:69:97:b4:1d:4c:9c:78:86:
90:db:8c:43:82:53:8c:fe:a8:36:07:f7:72:c3:76:01:fe:f4:
89:d7:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net