Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6Z8-Fn5wGdnf2kfoIOQpNcWlIgc.roa
File: 6Z8-Fn5wGdnf2kfoIOQpNcWlIgc.roa (raw, json)
Hash identifier: sNmHW18/WgAiGd2Bb0v0KltdyMlCSkDWUaZ5o12tths=
Subject key identifier: E9:9F:3E:16:7E:70:19:D9:DF:DA:47:E8:20:E4:29:35:C5:A5:22:07
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019448E8B9E8291ADED3543A53DA46350AD0
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6Z8-Fn5wGdnf2kfoIOQpNcWlIgc.roa
Signing time: Thu 09 Jan 2025 02:33:19 +0000
ROA not before: Thu 09 Jan 2025 02:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209181
IP address blocks: 124.155.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:e8:b9:e8:29:1a:de:d3:54:3a:53:da:46:35:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 9 02:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99f3e167e7019d9dfda47e820e42935c5a52207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:59:fc:d4:15:51:00:53:2c:87:25:14:be:
1d:da:f1:8a:67:85:97:6f:74:14:f2:07:cf:e4:07:
5f:6b:4a:ed:13:ab:34:d1:26:24:89:6a:ff:bb:db:
f4:8e:00:bc:01:db:a7:d1:c9:50:5e:ec:b1:64:8a:
43:3c:2d:84:7f:69:f3:1c:fe:26:89:af:ec:69:3c:
f3:86:dd:c1:a0:54:64:0b:e3:2a:cd:38:c6:a8:89:
ec:bc:6e:a2:7d:f1:b9:39:64:1b:b4:34:22:8d:93:
51:46:73:f0:77:7e:5b:78:b6:94:71:21:29:ea:f6:
7d:7d:20:b4:b2:50:aa:26:9a:42:c4:76:81:ba:a4:
27:5f:18:11:ea:ce:08:07:92:b9:18:94:97:e6:59:
bd:53:18:76:b7:42:1e:b4:56:25:16:63:4e:e2:a7:
d6:96:2b:b5:b6:23:fe:e5:fd:2d:04:62:ec:c4:73:
4f:2c:e2:61:2e:96:ef:7c:ad:a2:16:ff:ad:ae:20:
a3:8c:1a:5d:d7:90:84:5f:61:ef:00:8b:d3:75:c9:
c7:d4:d6:68:ed:8f:51:01:18:6b:44:f9:f7:7a:d8:
1a:c0:16:53:c0:b1:65:74:a9:24:eb:63:8f:f6:a1:
90:2b:5b:e0:72:e3:4a:e9:38:9c:22:6f:dd:d3:23:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9F:3E:16:7E:70:19:D9:DF:DA:47:E8:20:E4:29:35:C5:A5:22:07
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6Z8-Fn5wGdnf2kfoIOQpNcWlIgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.249.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cf:ae:2b:0c:67:d2:8e:3f:7e:f4:d8:76:88:82:26:e1:d8:
98:ec:e6:83:44:e4:7c:ec:57:f9:f9:d0:55:fb:03:ed:a3:44:
26:7d:53:09:f7:e9:68:54:89:b1:0c:b6:90:4e:d8:9b:ae:b0:
3a:b1:0a:96:89:ff:bd:56:2e:a2:4b:16:4c:48:bd:3f:f7:d0:
03:d5:28:21:4a:f9:56:93:75:28:58:58:56:d9:94:9f:80:3c:
15:f7:22:03:3f:a0:31:cf:2c:df:92:30:11:18:fa:9c:74:47:
e0:9a:be:c9:4f:9a:79:4f:09:66:43:0f:ae:b2:26:a3:f8:6c:
72:63:97:76:3f:af:80:f5:18:08:c8:14:ff:15:b7:b7:b1:70:
cd:e9:8c:2c:44:43:03:00:76:4a:30:a5:df:63:21:59:15:28:
de:2d:22:9d:7f:ee:88:1d:0c:9f:0a:81:4a:c9:86:de:15:6f:
68:c2:66:1c:6a:fc:e2:d4:97:13:11:7d:56:72:76:ea:62:5d:
be:83:b5:7a:37:7d:8e:bd:53:82:8a:23:19:a5:98:42:1a:c7:
df:e3:ca:31:e6:16:75:81:c4:8e:8c:ee:58:26:ec:74:08:03:
dc:67:94:e0:12:20:c1:1d:36:f9:85:6a:ea:4c:fe:44:4e:b5:
29:8e:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:01 2025 by rpki-client on console.sobornost.net