Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/47vLiCp2eaHopRFoQDsCmqfAXJ8.roa
File: 47vLiCp2eaHopRFoQDsCmqfAXJ8.roa (raw, json)
Hash identifier: Oxzfwz+ji2m25nt809MrXFlYkfbXBqcy4Lm2zrBxZHY=
Subject key identifier: E3:BB:CB:88:2A:76:79:A1:E8:A5:11:68:40:3B:02:9A:A7:C0:5C:9F
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01941F8C0EAE6BA4A494D3FD3C8F4ACA88D4
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/47vLiCp2eaHopRFoQDsCmqfAXJ8.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216344
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0e:ae:6b:a4:a4:94:d3:fd:3c:8f:4a:ca:88:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3bbcb882a7679a1e8a51168403b029aa7c05c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:c9:31:20:00:d8:99:2f:d4:3a:26:0e:b7:
bc:1d:8d:f6:31:61:74:26:04:cb:b0:d5:6a:a5:3d:
df:9c:37:f9:0d:53:b4:9f:25:c8:7b:ab:f4:b0:b4:
1a:d0:af:d1:52:73:df:56:56:aa:38:6f:b5:16:59:
be:41:bf:2e:4d:a3:2f:75:f4:94:d9:d3:00:22:89:
28:e5:b9:30:99:7c:96:de:d3:f4:80:bb:13:4a:2a:
c0:df:40:96:7d:09:c8:61:dc:84:5b:fa:af:61:98:
91:e7:11:ad:33:42:82:a4:5d:f0:be:e7:b8:9a:58:
67:a8:7c:fc:77:8c:6b:24:9b:69:2c:6a:16:e5:9a:
03:71:44:62:4c:01:72:2a:be:bc:02:29:14:c5:85:
15:ed:20:11:d0:e5:7d:3d:00:88:0a:b9:b9:8a:27:
4c:c0:d2:ac:d7:8e:a2:03:fe:b6:1b:2d:39:92:c0:
83:7e:91:cf:3f:38:c0:bc:26:c5:e1:96:72:a0:5e:
f2:0a:d6:29:3c:ce:63:57:f3:31:02:2b:cd:17:ae:
a5:6b:7a:f9:5b:ba:c9:af:89:29:68:f6:af:bf:c7:
68:8e:07:af:8f:8d:3c:20:82:77:c1:2a:5c:bc:91:
da:9c:6e:86:21:86:0a:79:41:d3:f1:8f:6e:e5:93:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:CB:88:2A:76:79:A1:E8:A5:11:68:40:3B:02:9A:A7:C0:5C:9F
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/47vLiCp2eaHopRFoQDsCmqfAXJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
28:be:0c:e0:89:97:92:20:4e:30:86:d2:9a:3f:55:73:86:e9:
29:e6:bc:e5:0d:b3:7a:1f:61:e5:30:94:9d:e2:72:77:fc:13:
96:80:d7:08:9d:ec:0b:34:f9:2e:95:1d:07:f4:d6:6d:f5:8d:
40:d2:75:1e:16:53:61:d3:65:58:19:b1:12:12:69:b9:39:78:
27:c3:95:dd:da:05:a1:87:b0:6c:c8:b0:f9:f5:b1:3a:14:22:
0e:15:69:85:fc:ea:be:c2:43:aa:56:db:a8:64:72:12:0d:82:
16:52:37:10:2d:93:93:05:a9:52:bf:18:fe:c1:cf:b8:cf:59:
c9:58:81:c5:81:e1:96:f9:20:03:52:88:bd:70:5c:e2:17:cc:
08:12:91:dd:38:55:7f:ba:8e:c7:24:af:bb:07:40:35:21:93:
44:6f:66:39:04:a2:b3:3b:46:d0:ef:cf:be:05:8c:ba:66:98:
a6:e0:c8:5d:1a:59:77:7d:5f:12:ed:9b:e2:4a:89:8b:3a:97:
4d:7d:01:af:0a:b0:c0:fd:f1:59:17:61:41:78:32:54:c3:bb:
fd:db:dc:8e:d9:30:4c:33:1d:9e:be:35:1b:0b:21:8e:1a:18:
27:a6:bd:fa:c8:11:a9:b9:e4:1b:9d:15:78:85:32:58:74:98:
e6:3c:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:50 2025 by rpki-client