Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/ItL-W3TQniL7Y1K6abAKdZ4vg08.roa
File: ItL-W3TQniL7Y1K6abAKdZ4vg08.roa (raw, json)
Hash identifier: 9YHf1pRN5AyY7o64UJvt0apGOU7p2pgV0JYtG5+mSIo=
Subject key identifier: 22:D2:FE:5B:74:D0:9E:22:FB:63:52:BA:69:B0:0A:75:9E:2F:83:4F
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018427C0173ECB8D6C8984A59B33850EB68E
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/ItL-W3TQniL7Y1K6abAKdZ4vg08.roa
Signing time: Sun 30 Oct 2022 07:16:51 +0000
ROA not before: Sun 30 Oct 2022 07:16:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201719
IP address blocks: 147.78.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:27:c0:17:3e:cb:8d:6c:89:84:a5:9b:33:85:0e:b6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Oct 30 07:16:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22d2fe5b74d09e22fb6352ba69b00a759e2f834f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:f4:af:ce:49:d4:d6:7f:74:7b:d9:44:c8:
53:2d:8c:b1:17:dd:c6:47:60:cc:55:3c:75:4a:a0:
69:cd:f3:45:5c:76:b5:7d:f7:49:1b:e4:5a:63:23:
35:0e:88:67:c6:11:ec:97:0d:52:19:16:bc:36:cd:
03:4c:96:9e:92:96:13:76:2c:ce:03:8a:8a:c3:23:
fa:ce:59:2a:9a:52:fd:ef:23:cb:15:bd:ea:4d:4c:
a1:e4:94:34:64:a5:c4:e4:22:4d:28:d4:0d:0e:3a:
b5:d4:01:2a:cd:4a:5b:fd:10:a1:8e:e0:bc:b8:9a:
4e:31:41:e0:80:17:6e:69:c9:57:4f:b4:e0:d0:4f:
a3:b5:c0:0d:76:b7:b2:63:a4:cc:b5:6b:4e:78:46:
23:f9:f9:f5:dd:9e:c5:13:54:98:34:7e:22:e1:6a:
05:02:52:4b:7d:9a:41:c7:b4:75:b7:fe:93:9c:54:
63:a2:73:d0:da:ee:fb:e3:2e:0b:14:14:9a:0a:3a:
90:1f:6a:fb:ae:08:f8:f4:2f:c7:66:83:b2:39:0f:
d5:16:59:a0:5f:a8:08:e5:23:69:2c:10:e0:70:fd:
3d:5d:c5:82:ce:27:dd:28:13:00:1b:e9:58:98:7e:
6f:08:bc:ea:96:f8:26:60:38:ff:b2:b2:d7:c7:04:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:FE:5B:74:D0:9E:22:FB:63:52:BA:69:B0:0A:75:9E:2F:83:4F
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/ItL-W3TQniL7Y1K6abAKdZ4vg08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.217.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1b:94:c7:6a:19:49:c6:47:db:45:3d:d9:40:ca:ed:f8:54:
55:4f:d9:19:85:67:54:d3:8e:56:3e:30:65:d1:5a:de:be:b6:
fc:85:21:f9:08:8e:a9:57:f2:86:ad:28:8d:f4:4d:f5:b0:d9:
1b:50:16:e3:91:97:19:b0:22:e4:5b:54:e2:3f:8b:f9:3b:8d:
fe:9b:85:cf:29:13:c3:f4:0c:d1:2c:31:c6:f3:04:39:d5:bf:
41:7c:8d:b3:7e:06:25:01:60:f3:eb:1e:05:5f:07:fc:1a:5a:
de:bc:da:27:cd:d6:d2:26:3c:7d:03:6a:5e:ae:52:bc:d6:36:
58:ec:73:c5:d4:11:c4:53:3c:ad:98:1b:71:50:82:1f:23:3e:
44:53:c1:26:0b:0f:37:80:9b:f1:a2:55:8e:12:d2:82:9f:23:
70:47:6c:c9:d6:d0:25:49:56:6a:d1:af:33:1d:f8:f2:90:ed:
99:f5:98:29:d1:13:86:5a:68:6e:ca:ba:71:37:97:54:76:59:
22:b5:6d:fc:48:f0:02:76:60:43:0b:3d:af:15:03:47:88:3b:
83:66:9d:5b:3b:f2:c4:d6:ab:8d:c4:42:1d:80:98:2a:be:a0:
2e:a6:60:87:93:fb:d8:60:bb:4f:f7:1f:28:53:52:32:db:b4:
19:c1:c6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:08 2025 by rpki-client