Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BuAmcDIPoJ5Lp44p8HB8tAyWhmA.roa
File: BuAmcDIPoJ5Lp44p8HB8tAyWhmA.roa (raw, json)
Hash identifier: yrjTAdHqCaVQiRX6XOva0nJjmmyQUQwT4uCD2MwcGTo=
Subject key identifier: 06:E0:26:70:32:0F:A0:9E:4B:A7:8E:29:F0:70:7C:B4:0C:96:86:60
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3CD356E703C5739A29A28536A6423
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BuAmcDIPoJ5Lp44p8HB8tAyWhmA.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209262
IP address blocks: 217.113.20.0/23 maxlen: 24
217.113.20.0/24 maxlen: 24
217.113.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cd:35:6e:70:3c:57:39:a2:9a:28:53:6a:64:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06e02670320fa09e4ba78e29f0707cb40c968660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:75:24:65:7f:b2:a7:34:62:f1:64:92:d8:
dc:10:0b:3f:72:4f:09:0c:3d:d3:18:a0:79:32:72:
f5:eb:57:c5:ca:a8:fd:0e:c1:16:5d:04:b0:18:69:
0c:9e:0f:c2:13:f3:80:e1:5d:c9:bf:ff:b1:45:12:
f5:8f:45:35:99:8a:f9:f8:5f:d9:60:59:db:1e:d8:
1d:b4:74:93:3d:ff:22:a7:39:41:b9:ef:f3:c6:16:
ff:8e:42:d9:1c:1f:47:d9:d7:f3:60:83:b0:3c:8d:
7a:9b:90:f5:bf:9c:ec:12:a4:4b:94:75:0d:55:76:
6f:58:cf:aa:b9:d4:c3:97:1a:cb:2b:41:9c:51:d4:
91:1e:23:84:4e:13:81:e0:59:61:95:45:e7:10:0f:
0e:fe:4d:b7:99:ff:ee:07:ce:12:4b:38:cd:af:4b:
f1:7f:bc:02:4a:f2:72:4a:9f:68:8d:67:b2:25:29:
23:9f:ef:c4:05:7d:b8:77:4f:e1:f3:b0:b7:d1:05:
15:67:a2:ab:ac:15:23:63:0e:4d:c5:8b:3f:70:9b:
69:7e:fa:5e:df:a0:df:33:3b:78:73:18:46:56:ff:
70:16:5d:b6:65:90:87:6b:37:e6:a6:6b:bb:c0:71:
81:ce:16:2b:79:c1:77:cc:48:b6:2d:bb:80:f7:c8:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E0:26:70:32:0F:A0:9E:4B:A7:8E:29:F0:70:7C:B4:0C:96:86:60
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BuAmcDIPoJ5Lp44p8HB8tAyWhmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.20.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:5d:35:95:38:db:8e:e0:e9:58:48:f0:0c:e9:5c:32:29:0f:
46:28:84:4e:5a:9d:37:07:74:cc:19:35:5f:0d:22:75:c5:ab:
05:2d:1c:66:88:03:38:6d:77:a0:c4:85:fd:25:f9:c6:5e:f7:
cf:72:29:2b:3b:60:c8:bf:49:45:5f:a9:75:ff:90:03:8b:c2:
ab:c5:13:4f:c9:f8:66:7c:08:0b:ec:70:a0:0a:09:e7:0b:b7:
6b:bb:92:51:d6:af:a3:d9:5b:26:26:b5:d2:53:31:91:2e:31:
cc:4c:f5:e1:17:e8:65:a7:ea:09:a4:cd:a2:44:88:bf:af:c0:
95:d7:15:80:41:46:48:49:b2:c3:1e:65:4f:b2:bd:49:92:11:
57:39:61:e0:52:60:0f:1b:5b:30:f5:98:a7:b6:d1:b1:9a:78:
12:e9:2e:77:80:cc:44:5d:e9:3b:a9:bc:e9:01:7d:1f:f4:58:
37:f6:55:e9:1a:bc:03:3d:3a:81:04:ad:ca:2b:50:60:94:d8:
04:5a:68:13:25:ef:ab:d8:b8:7c:4a:76:88:41:6e:8b:cb:3a:
c1:0c:2d:40:4a:97:34:9c:4b:43:0d:34:61:c8:dc:6f:87:49:
42:a6:51:41:eb:9f:05:d6:f0:93:10:9e:ef:4e:e8:aa:3e:83:
c8:ea:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net