Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/p3WeIYMleP3qEPSl6A1R5toxbtM.roa
File: p3WeIYMleP3qEPSl6A1R5toxbtM.roa (raw, json)
Hash identifier: xCgVSVCNCntiShkzj+Jhz09dYLtxeEowocJcYWjUjb0=
Subject key identifier: A7:75:9E:21:83:25:78:FD:EA:10:F4:A5:E8:0D:51:E6:DA:31:6E:D3
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 019421B254C3FAB61C0095D9D15C324CD8D6
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/p3WeIYMleP3qEPSl6A1R5toxbtM.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29488
IP address blocks: 217.74.176.0/20 maxlen: 20
2001:1a30::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:54:c3:fa:b6:1c:00:95:d9:d1:5c:32:4c:d8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7759e21832578fdea10f4a5e80d51e6da316ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:94:f1:35:be:01:92:0f:83:76:1b:9c:77:
c9:21:90:45:bd:22:c1:a0:7e:14:c3:be:39:dd:4c:
ee:c2:5b:9a:5b:95:d2:79:84:13:5b:aa:20:b7:e9:
ff:0e:91:16:ad:8a:80:bb:05:a9:10:f5:b3:25:0b:
68:fd:a0:40:60:8d:64:aa:47:7e:e5:d5:6d:df:1b:
b7:6b:9b:43:c5:c7:d2:c6:9e:cb:8a:7a:6e:95:e9:
ad:63:09:12:80:b0:86:6c:47:c6:25:02:f8:52:89:
08:16:4f:cb:65:b4:99:9d:65:44:28:45:fd:c2:7b:
c4:ef:30:7f:02:99:aa:e1:03:10:c8:b5:dc:08:93:
93:19:8c:a6:c0:ce:9b:09:05:f9:6d:0f:dc:a2:e8:
1d:16:a2:85:70:02:75:ea:44:49:a3:3e:d2:c5:b5:
7b:74:d8:f1:b2:43:9a:38:9d:ea:4e:ad:97:c9:59:
7a:c0:f4:3e:fc:93:55:96:bb:3e:62:43:a5:18:ca:
d9:ae:8b:61:6a:72:15:b7:4e:86:b8:4f:04:e7:cf:
c9:e6:c0:73:c4:91:a5:ac:d7:c3:9f:f5:34:10:8b:
24:f5:e9:c9:39:49:60:86:d4:2d:58:8b:57:38:e2:
6c:d5:3d:ab:c3:c1:87:7b:ce:35:54:89:84:ac:0b:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:9E:21:83:25:78:FD:EA:10:F4:A5:E8:0D:51:E6:DA:31:6E:D3
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/p3WeIYMleP3qEPSl6A1R5toxbtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.176.0/20
IPv6:
2001:1a30::/32
Signature Algorithm: sha256WithRSAEncryption
46:14:83:55:ef:dd:15:9d:e7:ce:d4:aa:f7:18:23:d2:01:77:
3b:6b:6c:91:b8:e6:9b:c6:16:f6:d2:d6:3f:1e:c5:a8:db:74:
17:89:1a:d8:2a:5c:96:15:7d:83:f9:49:45:e8:f4:f1:6a:d7:
cf:90:3e:1c:8b:80:c1:49:fe:05:b0:29:9b:ed:1d:81:5d:42:
0b:50:ff:bc:3f:27:9b:80:88:7d:c5:6b:3d:19:5c:26:c7:7c:
51:43:4b:f4:a1:b0:ae:19:20:18:a3:e7:26:56:90:0b:0c:38:
90:7f:b3:8c:e7:a5:bf:1b:d2:a6:54:9d:ce:ed:4d:57:4c:fc:
cb:12:9a:b5:6e:e4:48:65:8f:f5:4e:54:a2:46:53:b4:58:bc:
2f:ce:9d:be:c8:c1:0e:58:ac:11:ec:25:77:58:45:78:0b:cb:
d2:f7:df:48:53:c6:dd:11:d7:a3:12:90:91:33:3c:db:8a:0c:
91:51:ba:2f:f5:aa:ba:95:e6:b6:76:43:51:76:a5:b6:4b:5b:
06:08:72:be:eb:9c:2d:a4:b0:eb:9e:01:b0:fe:d3:d6:38:a1:
68:07:ca:8a:9b:7f:4e:61:cc:11:d0:3b:38:cd:77:2c:40:e8:
06:e9:bc:03:fe:5b:f3:a7:e9:ac:11:02:59:29:ee:a1:b7:c5:
8f:2e:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:04 2025 by rpki-client on console.sobornost.net