Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Etbw4KzplCRqm8lR-9DOY9ysEBk.roa
File: Etbw4KzplCRqm8lR-9DOY9ysEBk.roa (raw, json)
Hash identifier: q57PwbIRELFYh/H4gUDztoeKZ996UyZnMMVSjzx6eQ0=
Subject key identifier: 12:D6:F0:E0:AC:E9:94:24:6A:9B:C9:51:FB:D0:CE:63:DC:AC:10:19
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 0182B288853EC443B70FA1203088D7E11FBA
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Etbw4KzplCRqm8lR-9DOY9ysEBk.roa
Signing time: Thu 18 Aug 2022 19:57:47 +0000
ROA not before: Thu 18 Aug 2022 19:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:88:85:3e:c4:43:b7:0f:a1:20:30:88:d7:e1:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Aug 18 19:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d6f0e0ace994246a9bc951fbd0ce63dcac1019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:0a:70:e9:f2:15:3b:f2:3f:d5:26:26:58:
17:2a:35:bd:2e:6e:03:15:6c:31:77:ac:59:ca:d1:
a7:e4:4f:48:a6:de:47:19:ec:72:59:05:b1:dd:bd:
c8:f8:38:e5:a6:98:69:42:39:4c:9e:5b:c3:33:33:
b6:2e:87:77:43:b4:4b:ac:d4:81:6d:98:af:dc:69:
c5:90:53:06:84:3e:e4:aa:1d:46:2f:7d:3c:2e:ac:
ff:1f:1d:1f:72:c8:80:69:14:aa:05:8c:df:dd:11:
d0:48:95:b7:d1:a6:a6:ae:7a:4f:b8:06:38:f5:61:
cf:43:84:ee:11:6b:77:68:b2:c3:19:6f:52:52:ea:
35:c8:a9:dc:79:46:37:fb:35:89:7a:1b:fe:d4:d1:
70:6b:c9:d1:2f:df:9d:16:78:c6:68:73:95:43:5b:
e7:0b:7a:cf:dc:16:38:a3:e0:f0:4d:78:43:c9:ed:
06:dd:38:08:cf:f1:3b:4d:b0:37:5c:88:00:03:aa:
1b:92:11:56:19:de:a6:ec:b7:f0:56:6f:32:77:22:
18:d4:4d:df:04:0d:d2:9d:a3:51:7d:85:13:e1:4c:
28:01:36:d9:b9:00:0f:10:67:fd:61:93:38:7e:a7:
ff:62:a1:13:a5:47:55:88:17:b8:dc:a1:f3:88:fe:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:F0:E0:AC:E9:94:24:6A:9B:C9:51:FB:D0:CE:63:DC:AC:10:19
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Etbw4KzplCRqm8lR-9DOY9ysEBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e7:6b:78:7c:7c:1c:3a:06:6e:2b:b9:04:a6:28:80:82:84:
1c:ed:84:a5:6c:80:a8:96:d3:ca:20:ae:b5:9b:08:73:af:bf:
26:06:3a:bb:f9:86:14:f9:8a:f3:fb:15:50:7e:fd:b1:21:c7:
0d:1e:d9:b3:af:ca:f1:89:11:52:f4:99:4e:4c:f6:58:b7:ca:
1f:c7:cf:70:81:13:24:db:e0:1b:16:cd:a1:30:47:81:6c:40:
08:27:f3:49:0f:51:90:90:38:c6:9b:2c:d6:ab:b5:d5:ce:89:
9d:9d:52:d3:1e:b6:ea:04:b2:29:49:98:98:6b:e0:7f:1a:ce:
52:e3:d5:4a:89:50:62:36:2b:ca:da:61:e3:df:91:8a:50:36:
e2:54:c0:fd:ca:f6:a0:90:f4:97:2c:70:13:03:42:52:c7:ad:
38:b7:dc:13:8d:49:ea:1d:ee:9a:55:56:56:3c:39:5e:d5:b2:
b4:37:89:66:99:22:f3:e5:32:92:e7:2a:9d:8d:17:5e:78:e9:
de:19:9a:7d:d1:c5:df:60:c2:7d:77:b7:cc:23:e2:e3:6a:d5:
5d:fb:8e:4f:15:9e:b8:81:a5:aa:7c:56:87:46:99:1b:43:e2:
7d:46:87:7b:89:e5:98:ff:61:56:3e:18:73:42:a6:e9:33:a0:
2b:9a:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:15 2025 by rpki-client