Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/gizPDPJlnHFMwdNkDj4bjEHwsOM.roa
File: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (raw, json)
Hash identifier: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=
Subject key identifier: 82:2C:CF:0C:F2:65:9C:71:4C:C1:D3:64:0E:3E:1B:8C:41:F0:B0:E3
Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial: 019425FC543D2933DC611D535EA184D75390
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/gizPDPJlnHFMwdNkDj4bjEHwsOM.roa
Signing time: Thu 02 Jan 2025 07:48:01 +0000
ROA not before: Thu 02 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15917
IP address blocks: 217.31.0.0/20 maxlen: 20
217.31.0.0/22 maxlen: 22
217.31.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:54:3d:29:33:dc:61:1d:53:5e:a1:84:d7:53:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=822ccf0cf2659c714cc1d3640e3e1b8c41f0b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:0f:b9:06:ea:3f:07:12:0f:46:90:67:36:
a7:a7:ca:c8:52:0c:0b:99:44:9e:cd:15:91:c8:41:
e0:39:b6:0a:71:25:37:fe:44:08:45:6e:a3:35:53:
e8:ca:d0:dc:b5:ba:25:3a:2e:08:ea:d3:94:fc:3a:
32:be:58:52:48:e5:f9:fc:93:50:8f:67:e4:3b:43:
e2:91:72:dc:67:3e:f0:57:fa:d9:c6:83:54:74:ec:
f9:0e:f5:0b:11:8c:05:3a:7c:80:6b:5e:58:43:f1:
07:bc:45:ea:9b:e7:91:15:77:e1:6e:e2:29:51:30:
c6:00:40:51:71:32:91:88:5e:2a:8f:d4:44:7c:65:
29:69:57:48:66:cc:de:75:72:ef:2f:38:c4:cf:4c:
40:88:8d:6e:26:5c:3f:5b:f8:78:b3:d8:59:47:8f:
d7:bd:cd:3f:b7:6c:85:8d:59:88:2f:6f:9d:81:4d:
3f:a9:e7:0a:96:d1:73:66:c9:e9:d8:57:ad:63:fa:
09:f5:8c:98:8f:ac:1b:3d:4f:0f:39:c3:5f:cf:f6:
a4:60:8c:27:84:79:66:0e:43:c0:6a:a9:b6:3f:bf:
0c:78:8f:78:11:fa:b3:a1:b2:53:2e:c9:9e:05:9e:
aa:f1:f6:11:cf:68:62:06:f9:e2:fc:4f:3e:51:78:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2C:CF:0C:F2:65:9C:71:4C:C1:D3:64:0E:3E:1B:8C:41:F0:B0:E3
X509v3 Authority Key Identifier:
keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/gizPDPJlnHFMwdNkDj4bjEHwsOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.31.0.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:10:48:7f:e2:37:30:da:f2:28:63:14:af:ff:3e:4c:90:81:
71:16:fa:bf:5f:32:b3:7a:48:eb:69:24:15:5d:18:6f:f1:a7:
7b:e9:72:cf:13:86:14:fe:11:d8:81:26:6f:ad:86:e1:94:0d:
d4:0a:b3:c1:bf:17:10:e9:23:8c:e8:90:de:eb:ab:3d:33:02:
03:95:e7:5b:11:45:84:b3:db:64:2c:c6:85:c0:fd:23:6a:b0:
07:ad:0e:87:cf:99:cd:be:68:93:fb:af:98:7c:3d:dc:b7:a5:
2d:42:fe:16:58:8e:94:01:1e:e9:af:a1:2a:c5:8d:34:c8:9f:
b4:58:70:62:a7:72:2e:7a:fb:2d:28:e7:13:94:b8:1e:e7:65:
26:83:f3:63:64:27:3b:eb:ec:d8:80:78:d3:2b:60:a2:ec:bf:
18:6d:0f:7f:8d:9c:d0:bc:47:7a:8a:57:61:7d:08:4f:c6:74:
42:1f:4b:d4:de:b4:ba:39:cb:98:9e:3d:99:39:11:8f:62:41:
2c:7b:9e:e6:80:ac:f1:f9:38:40:75:4c:b7:08:56:0a:df:4c:
e0:a8:5d:08:ab:9d:a3:da:e4:ee:86:a1:87:89:c9:41:66:20:
c2:54:9d:a5:d8:3e:4c:17:29:0a:8b:76:e1:13:f9:89:74:47:
76:df:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:08 2025 by rpki-client