Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/h-L32JDD-cDXLSKS5D8kizQ6BZk.roa
File: h-L32JDD-cDXLSKS5D8kizQ6BZk.roa (raw, json)
Hash identifier: SrQk7B5niRWj3WywMNW4nPtpBFdZAbZhiHLCQKotkS4=
Subject key identifier: 87:E2:F7:D8:90:C3:F9:C0:D7:2D:22:92:E4:3F:24:8B:34:3A:05:99
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3C9D5CA3953D65CD46AAE3B9649E5
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/h-L32JDD-cDXLSKS5D8kizQ6BZk.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198265
IP address blocks: 217.113.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c9:d5:ca:39:53:d6:5c:d4:6a:ae:3b:96:49:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87e2f7d890c3f9c0d72d2292e43f248b343a0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:c8:c0:6f:f1:ac:b2:b9:ae:2a:b8:d1:92:
8d:c6:f6:a6:2c:db:4f:0b:ff:70:4e:77:1a:16:4c:
13:e2:7a:12:4b:a6:6c:2f:ac:c2:3c:41:b4:a4:69:
59:34:2e:96:53:36:20:5e:44:cd:a9:38:7f:62:67:
7e:33:69:bc:28:0f:23:cf:5c:3b:19:22:7c:9c:08:
e5:2c:00:93:cb:17:74:d1:01:53:0a:3c:11:46:27:
87:fc:7c:75:e1:ac:a2:81:e4:8a:87:72:7b:9f:d3:
56:09:0d:49:f1:fa:14:28:0e:65:ae:d8:b8:d8:8c:
b2:db:25:d1:c2:77:43:a4:91:d4:85:27:4f:1e:83:
6a:ad:9a:0f:b1:54:13:8f:b3:ce:33:4e:b5:e9:9c:
d1:5d:26:ba:f9:70:0b:de:27:53:d2:9d:f3:5c:d2:
e1:6e:51:43:cc:67:84:7e:7d:55:f1:f3:19:15:e2:
dc:96:d0:fc:f3:6b:29:bf:9c:0b:a3:01:e6:60:04:
5c:6a:bc:38:2b:26:09:61:34:86:37:92:2d:d2:f1:
dd:36:81:7e:bf:03:e6:99:6b:da:a5:a7:f8:b7:cf:
ee:2a:02:a8:6d:e5:51:d5:bb:53:4d:5c:ad:cf:0f:
3e:90:89:99:fe:ec:3f:7d:0c:0b:a2:fe:dd:03:3c:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:F7:D8:90:C3:F9:C0:D7:2D:22:92:E4:3F:24:8B:34:3A:05:99
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/h-L32JDD-cDXLSKS5D8kizQ6BZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.25.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e8:7a:e7:c3:82:95:3a:6e:9d:e3:f3:ea:59:80:f8:a3:f3:
af:01:43:f4:73:c0:71:e0:c0:cc:a2:90:e8:46:6a:3d:20:d7:
6e:41:58:25:e7:f3:cb:2c:81:12:9f:6e:90:00:6d:34:3d:46:
a8:14:49:f4:7d:6f:3d:e0:d0:9a:22:0e:67:31:84:eb:1e:49:
3c:9a:9d:4c:63:c5:fd:ea:ef:27:b4:2a:45:96:7f:0f:1d:3a:
da:b7:55:aa:d9:fd:3b:92:a5:a3:22:60:2e:65:ee:0f:b4:54:
1d:97:a4:1b:db:d9:00:f2:0f:3f:b1:4a:cc:3c:80:c0:b7:88:
c8:3c:92:5c:33:51:71:e2:ec:7c:94:bc:a6:d2:72:67:b4:ca:
ba:cb:2d:e4:5d:80:08:9c:65:37:3c:4f:44:cc:a1:09:c2:45:
83:83:8b:d0:c1:39:28:99:94:a3:1b:43:84:af:22:16:54:a3:
99:c9:22:0f:cf:20:9a:e4:c5:b6:ec:8d:22:53:41:62:6c:ef:
43:ae:de:99:e0:63:cb:f0:85:62:1f:d1:32:13:a5:55:54:38:
72:bf:59:fd:c5:33:07:8d:34:d5:7b:bb:4f:bb:87:24:39:c9:
12:a8:8c:ae:53:5f:1f:ce:7b:47:be:e9:b9:3a:14:62:51:6b:
6f:55:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:25 2025 by rpki-client