Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/6_VthmtCFVoFgnrv7AyjJptBLuQ.roa
File: 6_VthmtCFVoFgnrv7AyjJptBLuQ.roa (raw, json)
Hash identifier: SvwULvQRJncn6SJNeqM19vLpt9Z16yE+fnln2KH2tcs=
Subject key identifier: EB:F5:6D:86:6B:42:15:5A:05:82:7A:EF:EC:0C:A3:26:9B:41:2E:E4
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FBEDDF830727A669F804C0EF3EB67
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/6_VthmtCFVoFgnrv7AyjJptBLuQ.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33895
IP address blocks: 217.153.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:be:dd:f8:30:72:7a:66:9f:80:4c:0e:f3:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf56d866b42155a05827aefec0ca3269b412ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:c2:67:fc:93:f1:ad:d1:3a:20:14:b9:73:
e6:41:81:15:bd:12:1c:4e:f3:01:2b:d3:c4:a8:84:
fb:f8:07:ad:f7:41:5a:c8:2c:b6:19:eb:4b:62:68:
e0:23:cf:6a:82:b5:17:30:1b:b6:f8:6a:dc:16:33:
67:d6:10:34:45:da:61:9e:35:7c:80:50:91:45:7a:
97:34:f5:ee:9d:e6:51:e1:10:82:cb:10:d3:b6:4b:
12:e6:56:fc:03:91:fb:15:82:b6:e8:3d:51:85:a7:
23:d1:14:11:47:c5:fd:54:eb:8e:c2:b6:da:dc:52:
ab:93:1c:19:87:89:1f:95:c7:a6:58:6b:32:bc:c3:
f4:1a:13:b3:b6:5d:92:81:bf:9a:62:b3:87:17:6b:
1b:f9:e3:73:f7:b1:9a:dd:71:f9:54:d5:cc:59:c1:
09:24:8d:a3:3c:ea:44:67:15:a5:36:c0:34:03:10:
fd:68:5c:70:1f:56:16:91:16:00:29:e9:cb:ad:f4:
7c:32:b5:9c:a0:5d:54:a8:e3:9d:28:c3:2e:a5:2c:
47:ae:97:03:a7:a1:dd:6e:72:9b:17:dd:1d:97:e2:
b6:19:31:11:34:98:e5:25:5c:c5:af:93:7a:84:d6:
1d:22:aa:61:0e:da:61:72:ea:7f:e9:e9:aa:16:95:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:6D:86:6B:42:15:5A:05:82:7A:EF:EC:0C:A3:26:9B:41:2E:E4
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/6_VthmtCFVoFgnrv7AyjJptBLuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.153.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8b:6e:f7:ec:9c:84:4c:a1:ec:bb:86:85:3a:4b:08:82:fd:
3e:d0:21:09:37:d6:6e:70:8a:96:bf:7c:ad:d4:52:7b:d7:80:
10:d0:f5:23:81:9a:ae:5f:a0:02:f4:42:0f:7c:05:d3:62:c7:
4c:1d:d7:43:d6:2a:c7:cd:a1:91:9b:96:1f:47:03:8d:fb:d0:
69:19:92:e4:29:37:a5:fa:6d:62:ae:00:3a:e0:22:2a:28:81:
f6:8f:eb:12:53:6e:76:db:2c:d9:15:8a:f2:c4:f9:3e:ca:fc:
31:15:53:7d:33:e6:3e:96:62:cb:22:24:d3:8e:cc:3c:03:a5:
9c:d4:a2:4e:ac:31:e7:0b:0b:80:22:9a:b0:ec:e3:1b:13:2e:
12:98:1c:5a:ed:13:02:71:32:09:e0:85:73:e8:ae:d9:15:3d:
e6:6b:28:b7:a9:b9:0a:06:ef:18:53:9a:a1:56:47:d1:49:be:
df:22:8a:4f:25:55:79:8e:71:a8:9d:1f:85:e4:2a:a5:a5:a5:
c9:b1:f3:06:ad:c4:fa:94:bd:d4:9d:89:58:bd:bc:5e:13:58:
96:7c:1b:01:af:d0:d0:82:04:6e:85:66:6d:24:1c:ec:33:0b:
d5:1e:be:cf:f0:b4:68:84:a8:6c:7a:a2:c8:65:f8:7f:32:c5:
9e:8d:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:21 2025 by rpki-client