Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/1Aaeji2MZnsxUqe7GzlTKM-kECY.roa
File: 1Aaeji2MZnsxUqe7GzlTKM-kECY.roa (raw, json)
Hash identifier: ULIiyMRJoIy1v2cVArI/haodlXB2hhFDzw6RLH+AIt0=
Subject key identifier: D4:06:9E:8E:2D:8C:66:7B:31:52:A7:BB:1B:39:53:28:CF:A4:10:26
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 019423D6FF0C0C6C8B9E05E482E6A7B57F55
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/1Aaeji2MZnsxUqe7GzlTKM-kECY.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28990
IP address blocks: 217.26.144.0/20 maxlen: 24
217.26.144.0/21 maxlen: 21
217.26.144.0/24 maxlen: 24
217.26.145.0/24 maxlen: 24
217.26.146.0/24 maxlen: 24
217.26.147.0/24 maxlen: 24
217.26.150.0/24 maxlen: 24
217.26.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ff:0c:0c:6c:8b:9e:05:e4:82:e6:a7:b5:7f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4069e8e2d8c667b3152a7bb1b395328cfa41026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:42:b0:3c:ad:0e:a4:54:cb:88:51:93:10:
01:76:7f:6e:21:f7:22:7e:d1:12:55:93:eb:9f:e8:
18:95:79:76:97:5f:3b:9a:a0:9e:51:cc:b7:5a:63:
ae:6c:21:9a:f9:36:0e:ba:6a:8d:69:5e:d1:f8:1a:
15:9e:84:1f:38:db:f2:c3:1a:fd:52:8a:2c:ac:e2:
d6:2b:55:90:9f:36:ac:42:d2:f7:2a:b8:0c:90:a4:
14:e8:c3:d9:61:8a:9d:cf:0b:a0:81:b2:bc:a5:1f:
d9:4b:59:6e:9f:29:43:54:cf:2f:7c:e5:38:35:47:
7e:fb:ae:19:02:30:8d:65:a2:2d:78:a8:06:f5:c4:
06:8c:2b:2e:81:b8:01:e8:c2:fe:02:74:17:85:00:
1a:eb:65:5a:7b:88:e8:a2:ef:23:80:39:ae:c0:e6:
00:ba:40:fa:0b:5e:79:85:df:24:f5:43:69:3b:16:
9a:97:21:64:18:b1:f1:ed:bf:e5:86:7c:1e:1a:85:
41:c9:0d:19:d9:03:c1:50:4d:58:9c:b3:74:6c:df:
59:67:06:ba:e6:7e:e9:0d:df:27:34:d1:0e:f8:52:
ff:92:34:66:8c:1f:b2:69:05:e2:a3:50:7e:d9:0b:
db:c4:60:e1:d6:8a:b3:b4:eb:3c:f7:7d:c2:b1:09:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:9E:8E:2D:8C:66:7B:31:52:A7:BB:1B:39:53:28:CF:A4:10:26
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/1Aaeji2MZnsxUqe7GzlTKM-kECY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.144.0/20
Signature Algorithm: sha256WithRSAEncryption
38:8d:95:e5:75:87:25:63:30:fa:fb:31:3e:0d:e5:ec:55:73:
a7:55:76:ac:a2:59:a8:e2:55:83:30:37:38:69:95:44:3b:a7:
7c:a5:08:92:72:01:b3:02:26:c7:88:fd:1b:2f:a6:d5:84:a4:
1f:b3:b9:d4:a4:51:a6:47:30:35:f6:56:00:fa:65:b2:16:bd:
b5:39:2e:6e:d9:d8:ea:7d:39:b3:57:b0:3f:83:8b:32:bc:b5:
47:13:eb:71:11:14:87:68:02:d6:27:da:89:ee:3c:14:6b:4a:
97:5d:99:3e:45:e0:2f:96:7e:cc:00:63:6c:3d:87:50:0f:0e:
f8:2e:be:d4:cb:92:c6:6a:55:8b:82:61:b8:e4:ad:d2:26:b3:
c7:d8:6a:a1:29:c8:c0:42:0e:8b:9e:4d:3f:20:98:3e:2a:6e:
3c:28:b8:9f:0b:b0:6e:90:da:e5:78:a0:96:0b:73:de:05:37:
2d:6a:ce:19:92:c9:02:be:8f:07:ad:df:97:6b:20:a7:6a:30:
b8:a4:92:01:36:a4:66:5e:7b:14:04:83:cd:4b:f4:a6:7b:df:
79:69:84:ff:95:d7:ea:c1:63:f2:62:12:c4:ab:c8:f9:1f:d7:
6a:1e:c5:39:e9:0d:82:d8:03:57:4c:f1:b7:b3:0a:5a:dc:3d:
5d:19:c4:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1v8MDGyLngXkguantX9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNDRlNjA5ZTM2MTkxM2UzYzNiMGE3OGQ3NDg2YWE0NWI1
NjI0MDEwHhcNMjUwMTAxMjE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDA2OWU4ZTJkOGM2NjdiMzE1MmE3YmIxYjM5NTMyOGNmYTQxMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG5CsDytDqRUy4hRkxABdn9uIfci
ftESVZPrn+gYlXl2l187mqCeUcy3WmOubCGa+TYOumqNaV7R+BoVnoQfONvywxr9
UoosrOLWK1WQnzasQtL3KrgMkKQU6MPZYYqdzwuggbK8pR/ZS1lunylDVM8vfOU4
NUd++64ZAjCNZaIteKgG9cQGjCsugbgB6ML+AnQXhQAa62Vae4joou8jgDmuwOYA
ukD6C155hd8k9UNpOxaalyFkGLHx7b/lhnweGoVByQ0Z2QPBUE1YnLN0bN9ZZwa6
5n7pDd8nNNEO+FL/kjRmjB+yaQXio1B+2QvbxGDh1oqztOs8933CsQnJlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQGno4tjGZ7MVKnuxs5UyjPpBAmMB8GA1UdIwQY
MBaAFDFE5gnjYZE+PDsKeNdIaqRbViQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYt
Nzc1ODg4YTg3MTk0LzEvMUFhZWppMk1abnN4VXFlN0d6bFRLTS1rRUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYtNzc1ODg4YTg3MTk0
LzEvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2RqQMA0G
CSqGSIb3DQEBCwUAA4IBAQA4jZXldYclYzD6+zE+DeXsVXOnVXasolmo4lWDMDc4
aZVEO6d8pQiScgGzAibHiP0bL6bVhKQfs7nUpFGmRzA19lYA+mWyFr21OS5u2djq
fTmzV7A/g4syvLVHE+txERSHaALWJ9qJ7jwUa0qXXZk+ReAvln7MAGNsPYdQDw74
Lr7Uy5LGalWLgmG45K3SJrPH2GqhKcjAQg6Lnk0/IJg+Km48KLifC7BukNrleKCW
C3PeBTctas4ZkskCvo8Hrd+XayCnajC4pJIBNqRmXnsUBIPNS/Sme995aYT/ldfq
wWPyYhLEq8j5H9dqHsU56Q2C2ANXTPG3swpa3D1dGcTI
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:47:59 2025 by rpki-client