Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/y1PeU9JRt-8zy7fAHdTs76jVsHc.roa
File: y1PeU9JRt-8zy7fAHdTs76jVsHc.roa (raw, json)
Hash identifier: 0p/JFK5m9p7bozQ4pnJznyoRdt6D50XJVcxIdNoOA38=
Subject key identifier: CB:53:DE:53:D2:51:B7:EF:33:CB:B7:C0:1D:D4:EC:EF:A8:D5:B0:77
Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial: 019428236E1E7CA423D1288F02042EF32BE1
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/y1PeU9JRt-8zy7fAHdTs76jVsHc.roa
Signing time: Thu 02 Jan 2025 17:49:58 +0000
ROA not before: Thu 02 Jan 2025 17:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 217.73.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6e:1e:7c:a4:23:d1:28:8f:02:04:2e:f3:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Validity
Not Before: Jan 2 17:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb53de53d251b7ef33cbb7c01dd4ecefa8d5b077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:4c:44:78:d0:67:ed:d9:83:c4:0a:34:48:
44:24:21:4b:8b:c7:8d:c2:99:07:54:07:d2:05:99:
78:7f:c7:8f:f6:0d:df:17:93:66:91:b6:eb:c8:06:
f6:29:7d:49:b1:93:db:24:6d:b5:5a:f4:fb:ec:c8:
0a:39:f0:97:9b:0a:d2:df:63:c9:41:73:ba:a8:40:
4d:45:a7:0e:a0:1c:2d:6e:b9:46:4c:38:98:76:f8:
d3:a6:ab:e3:74:e9:7d:1f:e5:78:ec:30:2b:af:99:
0a:2e:c2:56:c8:5d:11:8d:c6:2d:bb:cb:de:84:3b:
bb:f1:86:e8:9b:e8:da:29:c7:06:57:63:85:bd:86:
00:3c:50:9e:ab:c9:52:b5:54:b1:ae:c0:ee:88:04:
5a:1e:1e:30:b2:c0:aa:fa:eb:9f:6e:1a:4c:56:ce:
a5:a5:a2:27:93:04:14:58:53:60:87:a3:a9:9c:78:
e7:77:87:24:8d:a2:52:15:c7:74:04:1c:6c:5e:cb:
54:2b:4a:a5:c3:1c:a4:f5:e5:90:10:df:d7:b6:90:
da:ac:d2:37:8e:b7:f9:7a:7e:45:bb:89:32:8c:90:
c3:21:ab:c8:01:7c:2a:10:6c:01:c3:07:ab:4e:1d:
c5:22:f2:9e:e2:18:ec:ff:59:54:d6:e6:0e:b1:b9:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:DE:53:D2:51:B7:EF:33:CB:B7:C0:1D:D4:EC:EF:A8:D5:B0:77
X509v3 Authority Key Identifier:
keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/y1PeU9JRt-8zy7fAHdTs76jVsHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ee:60:61:5b:bb:bd:6b:74:d7:59:26:c9:94:ff:35:6d:c7:
09:4a:01:8e:09:15:be:46:7d:95:3f:87:fa:72:63:c6:41:3f:
3a:e0:5e:1a:6f:bd:78:1a:2c:61:2c:19:ac:40:5f:64:9f:9d:
05:29:43:b5:90:0e:7b:0c:9a:c4:44:ee:f3:e0:02:4d:58:c4:
4f:bf:51:ab:e1:82:2c:ba:6d:e0:75:09:b5:0a:49:8d:12:ec:
53:98:46:ee:ef:b5:14:49:59:98:d5:ca:9d:9a:ee:00:b2:fb:
09:f0:8a:07:71:ee:3e:b9:49:fa:08:45:5b:fa:73:29:05:d7:
6b:15:07:3e:da:1f:2f:5d:30:3a:9a:66:a9:be:61:aa:28:c4:
16:a8:dd:07:c8:71:b3:e7:b8:88:bf:b7:8c:ce:fb:9c:2c:33:
41:dd:84:c9:ee:87:4e:ea:5c:32:4f:a5:35:6f:bd:b7:31:e1:
96:cf:20:64:eb:27:11:d5:25:bd:33:61:a3:41:95:4b:5a:a8:
d9:e0:cf:29:b2:96:4f:bf:39:62:3f:f4:e0:6a:41:6b:4b:02:
87:0a:64:66:0b:6c:4e:ed:b5:e3:e0:40:34:1b:8d:82:21:c2:
13:ee:1a:9f:f0:dd:f4:67:86:5d:71:79:e3:a4:0e:f3:d4:3a:
68:0e:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:23 2025 by rpki-client