Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa
File: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (raw, json)
Hash identifier: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=
Subject key identifier: F8:ED:FE:78:43:A3:E1:63:4C:2A:4C:7A:02:32:79:07:3B:42:41:F0
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 019421B20AEDCDBF9240BB90F463527DB1A0
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51800
IP address blocks: 217.28.80.0/21 maxlen: 21
217.28.88.0/21 maxlen: 21
2a02:28a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0a:ed:cd:bf:92:40:bb:90:f4:63:52:7d:b1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8edfe7843a3e1634c2a4c7a023279073b4241f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:f8:5e:30:0a:db:19:7d:a7:7f:27:db:9d:
3f:0d:6b:b6:40:be:aa:23:3a:3d:b6:aa:7c:4e:b4:
a3:8d:35:d0:fa:7f:0d:fb:6a:65:12:0c:02:b2:6e:
9b:7b:ed:1e:b9:ca:42:f5:19:ad:39:6f:1d:94:cc:
fb:d2:62:48:23:4a:09:be:9b:48:aa:07:89:54:29:
bd:ff:29:63:aa:0d:05:c8:3f:80:6b:c8:d4:d6:cb:
66:77:14:f4:ac:90:b2:dc:24:c7:ab:bb:46:ef:8b:
b4:f9:22:5b:26:d8:56:95:e4:03:26:eb:20:31:23:
89:3a:77:c7:f9:9d:32:dc:69:77:3d:42:a1:0f:0d:
07:85:97:55:c8:e3:5d:85:bf:95:5a:af:e0:b0:39:
9b:f6:af:31:9c:f5:b7:4c:76:f7:37:31:36:2f:5f:
ec:e2:45:66:5a:34:a4:92:38:fe:5e:56:35:bf:87:
33:07:a4:b2:b1:30:6d:a8:8c:5c:e2:ca:a8:f4:b1:
e0:4c:bb:b5:f1:8a:2e:9d:7d:e3:d5:b7:08:19:42:
fa:28:26:a4:06:09:be:2f:97:9f:54:37:f2:9d:91:
da:ea:8f:7a:74:3f:94:89:33:65:70:24:ae:cf:18:
23:6a:81:31:a7:e0:39:1a:3c:2c:08:d6:1b:a2:57:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:FE:78:43:A3:E1:63:4C:2A:4C:7A:02:32:79:07:3B:42:41:F0
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.80.0/20
IPv6:
2a02:28a8::/32
Signature Algorithm: sha256WithRSAEncryption
5f:36:71:7a:ee:09:61:d5:0f:cb:9e:f0:4c:76:06:c3:c2:8f:
95:78:f9:e0:29:76:60:c6:88:f3:78:d1:bf:08:62:f4:0f:65:
2c:9d:72:0b:34:5b:a1:1f:eb:49:0d:18:00:b1:5a:e1:cc:bf:
70:3b:77:08:ad:e3:ee:79:05:30:5c:da:e5:d9:96:3d:5f:8e:
d9:e8:c2:45:06:9b:6e:da:96:04:eb:82:1c:2a:ab:5a:b5:30:
66:e6:a9:ce:b9:ca:bb:3c:6e:f8:6c:83:d0:0f:cc:23:be:81:
4b:37:80:0a:4b:16:36:e7:ed:e3:f7:aa:0b:79:f9:36:39:66:
9a:d0:0c:29:b9:73:00:d8:d1:05:f3:c1:81:f8:62:ea:ff:b8:
e4:78:19:4c:d9:ff:28:77:76:41:f7:0b:17:e4:ff:55:b4:7c:
9a:b1:f8:b3:1f:01:3e:ad:e8:b4:c9:fa:e6:98:cf:9f:e7:19:
bd:5f:c5:e4:62:2b:aa:f4:49:35:ac:71:08:09:cb:cc:23:65:
e4:11:fb:c9:41:04:76:ae:f7:79:d9:9a:75:89:1a:5d:75:30:
e4:95:0c:f6:07:16:68:01:b3:f4:f1:50:1c:c4:73:f9:b3:55:
d6:0b:e6:06:3e:08:8a:50:cf:24:1f:e3:94:e0:f2:9f:1c:1c:
3b:b4:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:04:26 2025 by rpki-client