Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/vqjdm1KiZFUuymq7gFNn9nu1xeI.roa
File: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (raw, json)
Hash identifier: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=
Subject key identifier: BE:A8:DD:9B:52:A2:64:55:2E:CA:6A:BB:80:53:67:F6:7B:B5:C5:E2
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 019425214ABBE7160E9BE27C8E1EE06AF17D
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/vqjdm1KiZFUuymq7gFNn9nu1xeI.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8447
IP address blocks: 157.247.0.0/16 maxlen: 24
192.102.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4a:bb:e7:16:0e:9b:e2:7c:8e:1e:e0:6a:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bea8dd9b52a264552eca6abb805367f67bb5c5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:72:40:c8:02:2e:85:02:5c:63:06:a4:b8:
cb:94:c4:b9:1b:d3:10:3f:16:cc:9b:4c:31:be:f8:
15:ef:74:8a:d9:a5:36:33:2b:18:5d:03:47:2a:32:
94:3d:1b:49:46:48:32:3a:45:a7:6b:89:af:39:4f:
73:1e:45:2c:36:01:05:d7:14:7d:87:1d:9e:32:84:
2a:89:d1:72:e3:19:4f:c7:4a:33:1b:2c:14:78:54:
25:c3:31:98:39:8d:c1:f8:6b:f8:5b:43:43:f3:00:
8d:74:f0:03:cf:29:1c:cf:90:8f:98:57:0c:0b:41:
48:d4:48:9c:e5:0e:d4:f4:c5:f1:07:2a:6d:ce:ad:
a4:07:69:4c:bf:2a:01:be:05:b7:a2:72:72:94:34:
9a:22:c2:86:63:8e:f5:f4:67:cc:57:c3:6d:1c:c3:
77:9b:93:86:d3:f6:81:11:99:6e:c2:5a:06:57:95:
5a:89:12:b7:95:91:d3:44:33:77:e1:99:d4:cc:49:
40:d4:aa:8a:f7:82:00:5b:62:96:6a:29:c8:65:7a:
26:32:51:2e:15:75:07:bd:f0:fe:17:d3:ba:8e:34:
17:eb:e1:39:22:12:07:14:96:e6:8e:33:7f:be:10:
29:35:98:b1:ee:71:53:48:cc:86:dc:b8:25:c5:68:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:DD:9B:52:A2:64:55:2E:CA:6A:BB:80:53:67:F6:7B:B5:C5:E2
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/vqjdm1KiZFUuymq7gFNn9nu1xeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.247.0.0/16
192.102.17.0/24
Signature Algorithm: sha256WithRSAEncryption
09:22:0b:59:08:84:b4:37:d5:38:cf:74:cf:0d:ca:a8:2b:3a:
7f:3d:a2:8d:50:8b:e5:88:60:c2:ba:80:1a:99:95:1f:8e:b4:
8f:4f:32:f7:0c:73:70:de:b8:78:8e:eb:c5:cb:f3:f5:c2:ca:
3e:40:5b:6f:f9:87:df:d4:57:ed:62:80:aa:9f:2b:a6:7b:ad:
04:67:22:c0:a4:62:7e:2f:91:92:be:b7:cf:f4:cf:b7:29:99:
60:d2:60:b0:22:d2:16:df:57:53:34:0c:58:68:44:da:ee:0d:
25:d9:9e:8f:f3:6d:87:a5:f6:16:34:1a:23:53:78:c9:7f:6b:
62:f9:c4:b6:fc:aa:21:ab:e1:10:f6:db:64:2b:77:f8:84:d5:
fa:0a:b7:7e:da:3d:3c:7b:75:d8:bc:1c:4c:56:07:68:6f:ef:
8e:11:15:71:3a:6a:d5:ee:b3:00:6a:07:33:2a:fe:6a:87:7f:
85:ad:20:e2:7d:10:2b:07:c4:38:1b:e1:88:77:73:3e:84:8b:
72:9f:ab:9c:18:c2:a7:98:76:92:17:c3:4d:36:5e:d9:1f:d4:
65:78:77:8a:42:65:78:91:41:c7:12:4a:50:c6:a0:d6:86:df:
01:34:85:95:e6:60:04:5d:3e:ca:fa:7f:48:5f:16:14:a4:7b:
61:0a:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:37:01 2025 by rpki-client