Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FY9emb5o3VkUHFNSwCAMhqQn1VI.roa
File: FY9emb5o3VkUHFNSwCAMhqQn1VI.roa (raw, json)
Hash identifier: NzhNcoZ+Wka+lNzxdMEVMelW77i173q+A+AsXf48c1k=
Subject key identifier: 15:8F:5E:99:BE:68:DD:59:14:1C:53:52:C0:20:0C:86:A4:27:D5:52
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019483005CDA515A71AA6B6D8B996EB1EBE4
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FY9emb5o3VkUHFNSwCAMhqQn1VI.roa
Signing time: Mon 20 Jan 2025 09:17:06 +0000
ROA not before: Mon 20 Jan 2025 09:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 124.155.240.0/24 maxlen: 24
124.155.241.0/24 maxlen: 24
124.155.242.0/24 maxlen: 24
124.155.243.0/24 maxlen: 24
124.155.244.0/24 maxlen: 24
124.155.245.0/24 maxlen: 24
124.155.246.0/24 maxlen: 24
124.155.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:00:5c:da:51:5a:71:aa:6b:6d:8b:99:6e:b1:eb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 20 09:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=158f5e99be68dd59141c5352c0200c86a427d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:37:1b:99:d1:51:b2:3b:ab:7c:df:97:9a:2e:
b0:09:62:bd:9e:fa:fe:90:45:f4:ab:d9:1b:ba:37:
cc:26:01:e7:0a:1a:cd:f6:b6:d9:43:3a:1c:ee:40:
cd:2d:69:93:14:84:55:68:b3:14:1d:77:a3:65:8e:
2a:7f:ef:94:5a:e3:98:0d:82:64:84:12:8f:44:dc:
c9:20:ea:a2:fd:bd:0b:c9:11:75:1a:db:85:a1:00:
97:a7:e1:7d:4f:ec:30:42:b7:c1:72:aa:09:ca:7c:
3e:7e:d3:97:36:96:2d:7a:0d:55:f1:f6:86:d8:67:
f4:3d:03:ad:64:89:c2:3b:25:ad:b0:e6:f6:7f:07:
a4:bd:59:a8:a1:50:b0:38:d9:93:98:57:a2:f2:ba:
61:cf:fa:44:96:01:62:52:64:39:77:2a:67:66:51:
d7:4f:8d:06:21:41:a0:db:1b:7f:d4:bc:ce:5d:0b:
7b:38:8a:7a:99:d8:77:d9:5b:2d:4f:cc:8e:b5:74:
8f:b3:4c:72:3e:80:aa:57:3d:ae:ab:fb:19:35:20:
f2:3a:d0:36:1d:d3:47:19:dc:f2:e6:ca:b8:b1:5f:
4e:91:21:e0:2e:ee:c7:13:af:06:3c:10:f1:36:a5:
41:47:36:1b:79:ed:d9:bc:9c:d7:24:35:79:4f:4b:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:5E:99:BE:68:DD:59:14:1C:53:52:C0:20:0C:86:A4:27:D5:52
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FY9emb5o3VkUHFNSwCAMhqQn1VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.240.0/21
Signature Algorithm: sha256WithRSAEncryption
38:94:9f:35:6b:9b:b8:1d:77:0d:d0:d9:f5:a4:3b:6f:40:35:
60:fd:4f:c8:3a:87:ee:b8:3a:e4:a0:6b:93:19:fb:d4:d1:e5:
f2:03:dc:61:b2:cd:9a:fc:85:64:8a:c5:f2:f4:4c:6a:91:7d:
e6:c6:f8:4c:c3:03:46:af:f2:fa:34:db:fa:d9:4b:a7:f4:f2:
65:12:02:41:45:d3:07:9e:e9:8d:67:2f:64:68:6a:9b:62:3a:
8c:39:1b:27:63:13:70:16:80:b4:02:f4:f7:67:32:ba:eb:03:
ca:b6:18:08:64:a7:d0:79:9a:67:8f:03:fd:3f:5c:9a:59:71:
01:ce:69:d3:75:9c:42:20:74:54:6b:61:7f:53:2d:8e:c0:3e:
da:c2:bc:8f:8e:6d:0d:11:61:fb:60:70:63:a2:ec:a3:72:b6:
3e:96:09:b9:a7:93:c8:f9:ab:19:21:f9:e2:04:4e:0e:33:8d:
44:4d:b1:14:d7:c2:0c:03:8c:be:74:24:00:a6:2f:5d:fe:5c:
6d:c2:2f:0f:35:76:42:5e:93:b7:2f:ef:7b:b2:46:91:24:f6:
2b:50:5f:cc:67:74:8a:e4:95:a2:5c:bc:32:8a:b2:b5:90:ee:
8f:ea:bc:c4:c9:30:6a:b1:20:fc:55:d6:1e:7e:83:69:ec:05:
1a:09:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:01 2025 by rpki-client on console.sobornost.net