Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa
File: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (raw, json)
Hash identifier: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=
Subject key identifier: BB:38:F4:33:FB:FB:F1:69:B9:70:E9:86:35:1E:E5:23:44:CE:AA:81
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 0194266AE3AFE7B76FCBBC66A86BB05F26BD
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa
Signing time: Thu 02 Jan 2025 09:48:46 +0000
ROA not before: Thu 02 Jan 2025 09:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25545
IP address blocks: 217.15.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e3:af:e7:b7:6f:cb:bc:66:a8:6b:b0:5f:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Jan 2 09:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb38f433fbfbf169b970e986351ee52344ceaa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:68:05:79:4a:1a:c3:0b:a7:ad:7c:8e:e9:
33:28:ee:d7:36:f9:18:68:f0:77:bf:64:fe:39:11:
39:49:a0:48:da:a4:04:89:86:9d:6a:10:16:6c:51:
3b:1b:ad:75:13:fb:db:91:12:92:ca:6e:24:a3:75:
b7:17:39:db:52:b9:4b:bd:1c:91:ef:1b:b9:53:c0:
58:d9:1a:f5:fa:84:0d:a2:74:8c:d8:43:09:df:68:
9c:e2:9b:3d:06:0d:36:4c:4b:16:4f:a9:e4:b0:11:
f5:cb:17:0f:7d:3b:fe:6c:0d:5c:40:cc:49:65:6b:
1a:64:4f:44:2f:bc:05:bc:56:8c:98:6d:a3:16:70:
12:db:0f:09:3f:a3:de:6c:5a:2c:24:73:ae:33:9f:
23:73:2a:7e:69:3b:62:51:32:09:82:dd:44:46:82:
a3:af:c4:b9:84:39:8e:75:ae:ae:f0:fd:17:8c:ce:
7f:2c:e0:11:4a:bb:ad:5e:38:e5:60:27:72:14:c8:
f9:50:10:b4:a3:33:7a:c8:50:29:73:f0:30:86:a5:
c2:01:3f:95:e4:bd:fe:48:56:54:e4:18:76:86:fe:
eb:71:22:36:4f:94:d5:fd:9e:49:2b:11:6b:63:f7:
15:93:4d:43:df:de:92:4d:ea:d9:92:21:17:5f:de:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:F4:33:FB:FB:F1:69:B9:70:E9:86:35:1E:E5:23:44:CE:AA:81
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.15.240.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:fb:26:f3:3d:09:53:04:9d:00:cc:67:95:e4:69:58:0e:3e:
02:23:b9:be:eb:09:d7:39:af:a6:56:bc:e6:9e:95:18:17:e5:
74:01:69:c2:b1:2d:2c:94:73:bf:a4:25:9a:1d:3c:57:f5:95:
99:c8:19:d3:2b:3d:b2:19:e9:14:9e:f3:bd:dc:3d:34:6c:3a:
d0:aa:4e:10:42:4e:5c:d1:ba:a8:c2:1b:c0:4e:46:38:63:3e:
03:53:f0:21:01:e2:de:0e:9c:8c:a9:0f:c4:f1:92:cc:6e:f2:
79:ee:7b:55:0c:2f:f4:2f:88:6d:c2:d1:6b:51:94:96:2c:ef:
da:b4:c8:8f:a2:a5:73:b6:12:e5:36:25:e5:81:bb:80:b3:b7:
e7:2e:b5:c3:95:d7:bd:e4:87:75:76:0e:08:2c:81:45:64:a4:
83:68:ed:02:ff:86:92:4a:fa:a6:05:0f:52:14:e8:66:86:92:
6f:8c:77:b8:8d:19:b2:cd:18:01:f2:c6:b1:46:95:d8:b8:41:
79:75:de:d0:00:aa:8f:13:30:6e:7b:b3:24:58:54:74:8f:ff:
0a:6a:4e:46:be:55:52:11:ee:5b:48:91:ae:38:77:41:a4:b9:
9e:7d:12:8d:8f:82:68:b9:dc:1e:b4:39:d8:e8:45:8e:ef:db:
8b:bd:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:02 2025 by rpki-client