Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/r09SSIy-eB-Z25qEgYQUxovsy38.roa
File: r09SSIy-eB-Z25qEgYQUxovsy38.roa (raw, json)
Hash identifier: g2ZJkA65eGJunpXfjHMfkr7mqC8bwf6B7MCgf5tQ0Nc=
Subject key identifier: AF:4F:52:48:8C:BE:78:1F:99:DB:9A:84:81:84:14:C6:8B:EC:CB:7F
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC8FCBE3A261E41481FFDD700C72B
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/r09SSIy-eB-Z25qEgYQUxovsy38.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199410
IP address blocks: 217.153.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c8:fc:be:3a:26:1e:41:48:1f:fd:d7:00:c7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af4f52488cbe781f99db9a84818414c68beccb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:2e:72:43:a0:b0:04:a5:2a:e1:be:e9:e1:
f5:8a:41:94:2e:49:c7:5c:3c:45:10:7a:0a:c4:71:
21:83:19:1c:d6:d5:0d:7d:b7:b1:66:db:11:fe:7a:
ca:d2:46:24:96:a9:11:a6:81:ca:e4:a7:74:eb:52:
38:b6:82:7b:b3:a4:c5:ec:5b:8a:88:77:2e:84:dd:
2b:91:6a:8a:f6:3c:f8:62:5d:72:bb:02:5d:09:f6:
54:86:4d:cf:0d:19:a6:7d:e6:30:63:0f:bc:2d:6a:
da:00:a6:a1:20:5a:54:55:85:22:94:a8:28:e7:60:
30:43:21:13:2c:59:04:3b:bc:a7:31:0e:2b:76:21:
29:4c:86:bc:83:28:fd:43:95:9d:f4:e9:76:69:9b:
c5:9c:ac:5e:8b:7e:77:64:0c:8e:9a:a5:42:48:a2:
58:ff:ee:49:8d:90:89:29:d3:0e:6c:63:2f:cf:b8:
ab:28:0a:3e:43:75:7a:37:37:b1:bb:cd:b8:71:bb:
a3:ad:83:ca:29:65:fd:2b:66:14:f8:0e:e6:b8:38:
29:0d:a7:e5:3a:8f:da:ed:19:ff:39:61:55:e1:aa:
3e:01:ce:0f:d2:07:56:a2:f4:0e:6c:36:2d:e0:84:
ea:66:bb:d6:f1:87:fe:f9:13:bb:95:1c:03:77:e5:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:52:48:8C:BE:78:1F:99:DB:9A:84:81:84:14:C6:8B:EC:CB:7F
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/r09SSIy-eB-Z25qEgYQUxovsy38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.153.154.0/23
Signature Algorithm: sha256WithRSAEncryption
83:58:c6:1d:bb:03:20:74:50:e9:f1:3f:0a:f4:f7:c9:cd:b0:
3c:79:cb:ae:26:b2:c6:88:23:12:33:8d:67:c5:4d:98:5c:89:
05:dc:e6:92:c7:48:d8:b1:f8:74:9a:3b:e7:fd:63:52:c3:2a:
a6:b0:4e:8a:ff:63:80:8a:56:36:99:c1:45:db:96:c1:26:7b:
a2:7b:b3:cf:ed:0e:69:71:3e:28:f9:a4:a6:aa:d2:f5:b1:e3:
05:31:23:cb:5d:ba:0e:89:72:23:94:77:ca:3c:a7:4c:4b:93:
a8:d6:a8:16:00:ae:da:b7:a3:ef:76:13:99:af:ff:32:59:a9:
c7:d2:88:07:78:86:37:6b:7c:da:2d:1e:c2:e4:fe:61:48:16:
ae:c3:83:84:a5:37:c0:e8:e9:98:aa:86:38:49:1d:89:7a:61:
03:32:4c:be:6d:42:79:74:7c:aa:83:83:8e:3d:e3:14:05:29:
6b:04:9c:20:71:8f:3e:21:f2:f2:1c:2c:04:8a:0e:d4:3c:8d:
b3:2a:af:84:e5:0c:fc:79:2f:6e:a3:17:4a:1e:94:61:c5:2c:
76:8d:0b:23:a0:79:db:91:1d:b3:fa:af:43:80:7d:9c:6b:69:
5d:23:48:a1:67:2a:38:bc:90:a3:54:7b:3b:7d:6b:26:d2:5f:
0b:0d:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:15 2025 by rpki-client