Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/ZHjikYyih3f8GANy9W08P7Ji9MU.roa
File: ZHjikYyih3f8GANy9W08P7Ji9MU.roa (raw, json)
Hash identifier: n6WJ7F404W5Ads8JRZsvz4nJfyj30AALKq7OxgIn888=
Subject key identifier: 64:78:E2:91:8C:A2:87:77:FC:18:03:72:F5:6D:3C:3F:B2:62:F4:C5
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 01609D8F
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/ZHjikYyih3f8GANy9W08P7Ji9MU.roa
Signing time: Sat 01 Jan 2022 06:59:54 +0000
ROA not before: Sat 01 Jan 2022 06:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 217.18.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23109007 (0x1609d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Jan 1 06:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6478e2918ca28777fc180372f56d3c3fb262f4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:1b:30:5d:32:4e:da:89:ba:f6:a3:e5:b3:
66:7a:da:ac:b4:05:8d:bc:40:4a:85:a7:e3:fe:17:
e3:e0:fa:7e:93:72:44:a9:dd:9c:a6:6e:8f:5c:b4:
c7:4d:ee:fd:58:d0:97:7b:25:50:0e:3a:4f:e6:d3:
84:8e:09:bf:60:07:55:3a:37:d7:f0:36:d5:f3:cb:
37:73:86:2c:d4:c0:d2:ee:95:b8:1c:45:2d:2e:e0:
d8:5f:b9:66:52:51:a6:9f:de:36:d5:17:6c:6d:36:
f5:2e:af:da:6a:57:aa:a9:f8:1d:7b:f9:83:af:29:
09:b2:c5:d8:1b:6b:10:16:28:ea:68:f4:cb:08:eb:
94:ea:3b:49:59:7e:e6:54:b0:ea:49:8c:e9:ae:89:
f1:67:f8:c4:29:f4:38:af:e0:6e:92:09:b2:02:98:
02:fc:48:20:fb:47:be:39:93:10:e9:4f:10:bf:ef:
5a:19:88:5d:22:70:43:88:19:11:23:58:ee:9b:8d:
18:7d:6e:6b:75:a3:20:46:ce:ef:41:f7:2a:0e:af:
62:10:a4:ce:e9:59:e1:9f:ce:b5:d1:58:ec:ef:98:
73:94:c2:d2:69:4f:01:a7:18:70:7c:dc:9c:72:50:
cf:48:81:e2:87:3c:8f:1e:30:01:a6:bd:75:8a:65:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:E2:91:8C:A2:87:77:FC:18:03:72:F5:6D:3C:3F:B2:62:F4:C5
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/ZHjikYyih3f8GANy9W08P7Ji9MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.60.0/22
Signature Algorithm: sha256WithRSAEncryption
81:36:e4:c3:ae:da:88:96:b8:e7:3b:5c:3a:ba:9a:8a:30:54:
8c:e8:f5:ba:e7:a3:84:87:2b:b9:21:b3:24:0c:11:db:1e:75:
62:e5:11:bf:39:24:18:e1:87:08:16:21:42:6f:84:e5:f4:64:
8b:32:0d:e5:05:83:6b:b2:c7:25:e1:f9:09:7e:9e:66:28:e9:
15:12:e5:e0:58:5b:18:1f:e2:64:c9:3c:5a:bb:50:08:22:9e:
26:34:b1:18:84:3c:07:95:3c:b4:59:d0:21:39:e1:96:8e:48:
10:4a:a3:5f:61:cb:e4:3e:d3:a0:bb:5c:9d:93:6c:23:aa:71:
bf:e9:eb:46:48:a3:dc:2c:3b:23:cd:46:77:63:b3:9f:93:71:
93:13:b2:58:bc:cc:de:ed:1d:51:91:08:9c:5b:78:3b:a1:32:
b0:53:01:84:36:a4:a0:5c:be:2e:f1:f8:94:32:97:15:ef:c0:
fa:0d:10:63:d3:4a:38:12:b6:46:3b:46:4b:fc:6a:e0:f9:1e:
23:89:07:b5:9c:e2:f4:20:03:4c:ef:dc:02:80:c7:40:7d:57:
00:7d:df:32:08:1c:01:36:11:08:c8:16:7b:00:1d:e8:08:28:
7b:b3:62:ab:83:0c:ea:49:bc:b3:9b:0c:df:6a:34:35:c9:4d:
cf:f8:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:04 2025 by rpki-client