Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/eUlaq5gS3GI6r3fmoZPaba7Dfho.roa
File: eUlaq5gS3GI6r3fmoZPaba7Dfho.roa (raw, json)
Hash identifier: PBjrFIbcmCvN1hWwmYdZLCa28CsdtHFqI3Efr5fS4Bg=
Subject key identifier: 79:49:5A:AB:98:12:DC:62:3A:AF:77:E6:A1:93:DA:6D:AE:C3:7E:1A
Certificate issuer: /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial: 019424B3B8485ADF9A15976765B7F017807B
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/eUlaq5gS3GI6r3fmoZPaba7Dfho.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198256
IP address blocks: 217.194.128.0/23 maxlen: 23
217.194.128.0/24 maxlen: 24
217.194.129.0/24 maxlen: 24
217.194.158.0/23 maxlen: 23
217.194.158.0/24 maxlen: 24
217.194.159.0/24 maxlen: 24
2a14:6f80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b8:48:5a:df:9a:15:97:67:65:b7:f0:17:80:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79495aab9812dc623aaf77e6a193da6daec37e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:90:e0:fe:bf:eb:05:9d:a8:a0:0c:76:f8:
b5:6a:4f:b9:f8:dd:a6:a5:4a:9b:f9:30:77:90:c5:
de:1d:9f:6f:9a:d4:8b:e6:8a:33:a1:bb:5b:55:0b:
03:18:51:d6:4f:ff:9b:d8:3f:de:cb:bb:1c:ac:2c:
b5:42:dd:91:f6:98:2e:9e:80:44:d0:c8:e6:c4:6a:
2e:c5:62:86:0b:61:19:e0:ba:58:9e:81:da:86:ea:
1e:de:dd:2a:8d:4f:f2:40:92:d8:19:6c:b0:73:3f:
9d:65:45:bd:e0:fe:34:3e:72:3e:37:f7:1b:e8:5f:
75:ce:3c:1b:08:c9:df:f9:a2:c6:0f:96:59:34:6e:
1a:e0:25:7f:5a:b9:56:49:e1:e0:83:03:9f:56:60:
87:0d:7d:ca:19:f4:c5:a2:00:0d:25:ad:80:49:b5:
32:38:a7:da:33:08:c9:dd:59:8e:e2:8e:b0:79:e1:
b8:fd:a9:d5:76:d8:3f:f9:12:ee:61:97:a0:e0:39:
ed:45:7f:04:ab:e8:35:43:cc:87:b6:5b:20:ff:0b:
4d:ff:62:68:73:7d:ea:57:28:fe:c3:f4:f5:b9:87:
85:3b:37:c6:19:34:fc:81:40:1d:41:ee:a7:84:50:
e4:7d:62:61:08:38:16:9e:76:ac:38:cd:51:b3:00:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:5A:AB:98:12:DC:62:3A:AF:77:E6:A1:93:DA:6D:AE:C3:7E:1A
X509v3 Authority Key Identifier:
keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/eUlaq5gS3GI6r3fmoZPaba7Dfho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.128.0/23
217.194.158.0/23
IPv6:
2a14:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
12:dd:09:30:b4:08:34:cc:e4:db:c9:12:4e:dd:43:73:3a:bc:
a3:3d:de:3e:8b:4b:f2:fb:89:e4:9b:ac:53:15:b8:7e:58:79:
59:d5:7a:f8:84:85:ac:f2:18:73:9c:d8:9b:51:a3:2b:d2:96:
c2:3a:34:27:a5:18:4b:fe:62:aa:06:a5:c1:c3:50:95:cc:ae:
e2:75:6f:22:8e:52:e8:3a:9e:e7:f8:33:ab:7c:8f:24:4c:64:
1a:9f:cb:5e:6b:41:35:2f:44:10:fc:86:40:f5:0b:fe:6a:d3:
a4:a2:5b:57:a7:6d:36:ab:db:a1:9c:51:da:00:13:16:aa:a7:
6a:d7:d7:ca:28:c0:f4:28:0c:fe:80:9b:f3:d3:95:e9:26:9b:
b8:2f:6f:44:54:ef:63:7c:5d:5c:1f:18:03:88:df:06:c4:db:
bc:6e:ac:38:cc:23:f5:d9:23:31:60:3f:45:9c:a3:c0:6a:0a:
bf:cd:eb:1c:08:ef:0b:b1:21:24:0d:7f:8f:0e:0d:51:e9:3e:
c9:0d:b8:0a:5e:4b:b1:43:fb:87:1d:c1:43:d3:d6:c0:c4:e8:
77:3e:7c:64:ae:3e:d3:70:85:4a:2b:81:ef:fe:b6:2b:86:e7:
f5:97:1a:63:24:b5:5d:ef:81:b3:3c:ec:30:ad:a2:53:61:59:
20:7e:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:00:48 2025 by rpki-client