Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/nl5ocY3BJbGiAB69YV_PvWbBg1U.roa
File: nl5ocY3BJbGiAB69YV_PvWbBg1U.roa (raw, json)
Hash identifier: hRVRtYdD/fYVrabwKGY5ApsAw5vF5xmgF582IeAo/0g=
Subject key identifier: 9E:5E:68:71:8D:C1:25:B1:A2:00:1E:BD:61:5F:CF:BD:66:C1:83:55
Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial: 0194266B2BAFB01E3455BECB5B16B294A781
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/nl5ocY3BJbGiAB69YV_PvWbBg1U.roa
Signing time: Thu 02 Jan 2025 09:49:05 +0000
ROA not before: Thu 02 Jan 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39519
IP address blocks: 217.18.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2b:af:b0:1e:34:55:be:cb:5b:16:b2:94:a7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e5e68718dc125b1a2001ebd615fcfbd66c18355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:c2:27:10:43:5e:a1:06:53:66:d5:85:10:
25:b2:55:a5:83:4d:c6:24:19:b1:de:22:3f:48:e3:
22:15:15:67:dd:00:61:22:14:b8:7a:b3:36:90:7d:
67:e8:39:81:28:2a:24:e0:6d:bd:5a:a8:c1:3c:f0:
c1:30:04:f2:44:5d:60:a6:bd:66:2c:9f:bf:67:d8:
88:df:41:1b:77:e7:24:44:4a:4f:8a:39:02:7a:b6:
a0:b4:dc:ff:d2:38:ee:dc:77:d4:85:5a:d7:fb:5c:
a6:69:a1:a0:11:b7:ac:35:0f:65:27:11:5a:f1:69:
b5:8c:15:54:9f:5c:07:02:b9:0a:f6:69:eb:d8:07:
a6:87:f9:f9:67:12:55:04:08:1e:79:36:63:84:4c:
e8:09:c4:a5:d4:66:48:46:5b:62:82:d3:18:c3:3d:
52:97:f1:e1:0c:7f:a9:db:37:34:4a:c8:94:f9:9d:
55:c2:54:ef:74:44:0d:63:a7:04:ca:8c:18:5a:8a:
d2:b0:16:34:04:9c:95:59:d2:7e:d3:16:b1:2f:f6:
ec:d0:67:58:5a:40:a3:d0:28:f7:61:4a:cb:4d:60:
10:8f:b9:e3:40:46:8f:a6:a8:84:87:a0:f6:8b:63:
fb:f5:66:72:75:f7:f8:fc:d0:d6:80:96:76:6e:bf:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:68:71:8D:C1:25:B1:A2:00:1E:BD:61:5F:CF:BD:66:C1:83:55
X509v3 Authority Key Identifier:
keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/nl5ocY3BJbGiAB69YV_PvWbBg1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d3:0f:08:05:17:a9:e7:c1:7c:5a:46:00:ff:c6:09:ee:15:
af:6b:2f:11:3f:0c:5e:e0:de:cc:b4:2c:40:a9:63:fc:93:88:
fc:6f:35:a9:9f:79:08:33:fa:8a:ba:cc:9c:7c:c4:87:d0:47:
2f:83:69:39:6d:9e:22:33:bf:00:e7:02:4b:7a:ea:7d:16:b2:
b2:6d:0f:4d:92:42:ee:88:e1:ed:7d:c9:a8:de:9e:6b:1f:a2:
01:de:52:de:a6:ff:74:3b:fe:93:97:f5:ed:e3:56:49:47:bf:
e0:03:84:f7:11:b2:1f:07:64:20:53:2f:1b:3a:e8:7e:b9:29:
a5:39:8c:67:43:fc:f2:1c:12:59:f4:3b:43:00:15:8b:ed:ad:
ba:01:41:0a:0b:df:63:c2:a6:97:0e:c4:15:ce:e5:a7:0d:e0:
6b:b7:b7:f9:d0:8b:4b:20:75:53:55:d7:be:bb:d0:4f:9b:cd:
34:d5:8b:ba:04:1c:7d:cb:0e:46:9b:e8:31:63:5b:35:04:55:
74:32:ea:3c:71:5d:9c:89:a2:ab:04:f0:68:53:d8:0a:32:05:
74:4d:12:b8:16:8c:e7:29:e4:d8:82:f9:91:2c:b6:4b:10:7e:
3d:b9:06:20:cd:99:f7:51:09:d7:da:f0:44:f3:ad:c6:a8:05:
40:2d:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:37:15 2025 by rpki-client