Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/hDoqXFR8UibPRuqFY2xn-m_-15I.roa
File: hDoqXFR8UibPRuqFY2xn-m_-15I.roa (raw, json)
Hash identifier: qknu8HOpVZZ1hKraF3WMV/fgLgKt1U80KJN/d09ixdI=
Subject key identifier: 84:3A:2A:5C:54:7C:52:26:CF:46:EA:85:63:6C:67:FA:6F:FE:D7:92
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 0194236A19CAF2039586EFB7B53C6A5E95BC
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/hDoqXFR8UibPRuqFY2xn-m_-15I.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31180
IP address blocks: 217.144.112.0/24 maxlen: 24
217.144.113.0/24 maxlen: 24
217.144.114.0/24 maxlen: 24
217.144.115.0/24 maxlen: 24
217.144.116.0/24 maxlen: 24
217.144.117.0/24 maxlen: 24
217.144.118.0/24 maxlen: 24
217.144.119.0/24 maxlen: 24
217.144.120.0/24 maxlen: 24
217.144.121.0/24 maxlen: 24
217.144.122.0/24 maxlen: 24
217.144.123.0/24 maxlen: 24
217.144.124.0/24 maxlen: 24
217.144.125.0/24 maxlen: 24
217.144.126.0/24 maxlen: 24
217.144.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:19:ca:f2:03:95:86:ef:b7:b5:3c:6a:5e:95:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=843a2a5c547c5226cf46ea85636c67fa6ffed792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:25:1c:95:59:23:9f:17:51:66:be:d7:ca:
19:3c:84:35:63:8a:e3:cc:f3:4f:99:d6:1b:43:48:
fd:7c:8e:e7:8e:9f:1c:4d:65:89:65:a9:c2:fd:98:
d4:ba:89:86:80:cf:fd:df:10:bf:af:67:79:ff:39:
d0:fd:85:77:5e:31:fa:6a:6c:62:01:c4:9f:01:da:
c1:a7:3b:09:86:cf:26:04:fd:e7:f5:76:35:74:f9:
97:73:56:0a:b5:4d:8d:42:85:2c:61:17:c9:a0:ef:
44:68:e1:a8:d3:30:25:de:75:e8:c3:36:23:ab:75:
57:40:45:6d:2b:2e:52:3b:e8:81:a9:3f:b4:5b:b5:
54:16:36:04:4e:43:77:0e:d8:67:5d:03:59:ac:b9:
d1:80:84:12:62:47:47:47:b9:da:aa:52:22:73:04:
ca:5b:02:ff:e8:1a:80:4d:ff:0f:3d:00:84:84:f1:
ad:53:2c:83:94:e6:2c:42:90:91:8f:0d:f0:07:42:
a9:06:89:00:ef:0c:5c:2a:36:d1:ec:ae:75:68:8d:
23:d4:35:8d:ad:37:7c:ed:74:4d:23:0d:71:61:c0:
11:73:b1:e6:2a:f8:13:2e:e2:c2:bd:95:8c:8c:45:
fa:0f:93:0f:3f:82:88:cb:de:58:a9:d8:36:e6:2e:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:2A:5C:54:7C:52:26:CF:46:EA:85:63:6C:67:FA:6F:FE:D7:92
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/hDoqXFR8UibPRuqFY2xn-m_-15I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.112.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:34:16:5a:6b:95:3c:80:3c:12:88:d1:f7:55:d8:49:25:5b:
b5:2e:af:39:39:da:2e:0f:57:d0:61:13:26:8e:56:0e:2e:84:
75:8b:ed:ea:83:ff:77:e6:e9:6c:55:99:77:54:cd:1d:a2:58:
e8:58:ca:64:83:50:0d:aa:9f:9b:f3:73:8e:3d:3f:f1:33:a3:
ec:63:8e:d1:43:f6:f2:e1:f0:c2:2d:71:f6:ad:c0:2b:cc:b8:
03:a4:e8:63:0d:a7:ee:8e:42:2c:9f:67:a3:7a:ec:7f:75:3b:
7e:6a:28:d4:7f:6e:26:8b:29:8b:8f:90:eb:11:e4:8a:a6:69:
80:a2:29:34:1c:00:56:22:fb:20:b7:ac:99:95:ec:d3:e5:41:
41:6c:90:36:ec:8b:5d:2d:23:87:8c:5b:1c:0b:45:d4:91:70:
76:90:e5:40:fe:bc:2c:b3:f8:17:49:99:24:c7:55:65:dd:ea:
69:a0:93:e8:a8:f3:19:9b:49:2f:77:b5:ad:fe:49:51:c7:5f:
58:88:42:c6:23:1f:33:9a:f3:a6:bf:a6:7d:38:d3:82:2b:f0:
f8:2a:1f:7b:42:88:32:4b:58:f4:99:f7:46:d3:5d:94:95:19:
94:c1:97:bc:c4:df:b2:ef:a4:66:ec:32:62:66:f8:da:9c:1f:
0d:86:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:35 2025 by rpki-client