Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/fRE2vmwaleUiCvDWsnGTFljoLXg.roa
File: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (raw, json)
Hash identifier: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=
Subject key identifier: 7D:11:36:BE:6C:1A:95:E5:22:0A:F0:D6:B2:71:93:16:58:E8:2D:78
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019422FC413942F3D44085BD21F00E1ACCE4
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/fRE2vmwaleUiCvDWsnGTFljoLXg.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204887
IP address blocks: 217.113.192.0/23 maxlen: 23
217.113.192.0/24 maxlen: 24
217.113.193.0/24 maxlen: 24
217.113.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:41:39:42:f3:d4:40:85:bd:21:f0:0e:1a:cc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d1136be6c1a95e5220af0d6b271931658e82d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:d1:64:dd:91:71:81:f1:7c:04:dd:90:a3:
81:e5:de:5a:7c:27:3f:36:3c:7b:50:36:01:3d:4e:
a9:05:b1:1a:cc:37:6c:4b:87:27:83:5c:e9:3f:85:
b7:4d:57:37:7d:3c:00:07:6c:8a:56:5c:60:7d:6a:
12:ec:4b:b8:f4:a5:8e:7b:9f:ee:c2:e6:6c:7d:fb:
40:a1:2b:c7:ea:4a:a4:4f:e0:d4:35:8a:ef:e4:ac:
86:f2:34:61:28:7b:87:7e:6e:5d:70:ca:4d:d8:93:
48:07:fb:7f:0b:1d:69:4e:9c:50:77:69:32:5c:52:
17:8a:a2:03:21:d5:dc:d3:ba:de:79:9f:47:08:79:
6a:be:4f:92:b3:89:f7:3c:96:e1:38:24:0b:ef:f2:
7b:7c:ed:6b:22:d0:f3:4c:05:50:8c:c8:08:61:6e:
f6:38:f0:a4:72:55:93:7a:ee:41:1e:16:55:b6:b0:
03:1e:51:49:0b:1b:ac:fa:01:d9:58:35:f5:d5:41:
bf:02:5c:0c:b9:cd:33:df:7f:01:25:ea:16:b2:f0:
37:b1:f3:d1:55:e2:a2:29:d9:a4:44:d6:2f:96:d5:
f8:69:78:d8:9c:e6:d4:61:30:23:a6:65:1e:98:70:
19:f1:f0:ea:18:98:9f:f6:a7:aa:17:72:ee:b3:ae:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:11:36:BE:6C:1A:95:E5:22:0A:F0:D6:B2:71:93:16:58:E8:2D:78
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/fRE2vmwaleUiCvDWsnGTFljoLXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.192.0/23
217.113.195.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b7:12:78:26:71:37:38:6b:06:d5:24:7f:c7:1e:a3:72:c6:
49:ba:f7:fc:e7:0b:e5:18:17:08:ee:44:4d:eb:da:d0:5c:2b:
c5:40:8a:1f:ba:8e:40:a2:7e:4b:e8:87:05:01:b3:05:ed:c4:
41:f9:a8:d2:b6:2f:19:fb:5a:b7:48:c1:8f:d6:b4:da:5e:68:
3e:4f:de:fb:7d:92:d9:21:13:d9:c5:87:a0:86:0c:b9:3d:de:
1d:b3:54:39:1e:6c:35:ff:26:d4:62:5e:a1:73:b9:1c:20:8a:
bc:7f:13:b7:84:6b:cd:8b:c6:39:35:17:51:c2:e2:e1:94:e3:
3e:6b:7c:73:6d:09:3d:b1:89:75:70:48:27:76:7c:5d:99:bd:
98:d1:68:11:f1:d2:a1:f5:26:a6:e2:d2:83:42:7b:b7:4c:a8:
68:c9:53:a5:f0:0a:bf:de:f2:6c:58:09:ad:ea:b0:eb:3e:bb:
e2:5e:2f:9b:55:d8:45:4c:ac:32:59:9a:e9:18:86:28:ae:80:
49:67:0e:46:b5:bf:dd:50:fb:d4:8b:28:cd:27:47:cf:66:f5:
65:0a:87:ec:49:35:15:7e:9a:10:61:26:85:7d:d7:6c:53:a3:
35:9b:1a:0b:e9:08:a8:6e:bc:c7:fa:64:63:f4:50:4b:7d:11:
6e:14:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net