Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/f7g9WoNm-2HicP4eAC6c6FDXbfw.roa
File: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (raw, json)
Hash identifier: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=
Subject key identifier: 7F:B8:3D:5A:83:66:FB:61:E2:70:FE:1E:00:2E:9C:E8:50:D7:6D:FC
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207BAE059B0114B0BEEB59404E6A90
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/f7g9WoNm-2HicP4eAC6c6FDXbfw.roa
Signing time: Thu 02 Jan 2025 03:47:53 +0000
ROA not before: Thu 02 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61121
IP address blocks: 217.73.116.0/22 maxlen: 32
217.73.116.0/23 maxlen: 23
217.73.116.0/24 maxlen: 24
217.73.117.0/24 maxlen: 24
217.73.118.0/23 maxlen: 23
217.73.118.0/24 maxlen: 24
217.73.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7b:ae:05:9b:01:14:b0:be:eb:59:40:4e:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb83d5a8366fb61e270fe1e002e9ce850d76dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:39:73:73:65:b1:15:86:3f:28:a2:48:3b:
39:39:95:de:1e:eb:03:47:39:08:57:49:cd:55:4f:
ba:1a:c2:7d:2e:1b:f8:62:ea:4b:d5:d0:18:d8:84:
29:0a:5e:1b:f2:13:e9:d8:5a:cb:78:f4:57:06:d0:
82:20:89:3d:d7:30:1f:34:75:5f:85:b9:1d:ae:13:
6e:84:76:fa:5c:c8:80:34:f4:a7:25:f2:df:b7:88:
be:78:42:b3:20:9c:5c:aa:56:90:f7:38:39:b7:45:
6f:7e:8f:39:7b:53:24:65:56:00:c4:ef:31:17:3e:
83:50:cf:5c:8a:ba:78:3b:69:2e:ac:e4:0b:a5:af:
0a:b5:8f:0a:0f:54:e9:8e:3e:a5:fb:dd:e6:7c:8f:
4d:79:5b:6b:37:09:7b:ab:26:72:ab:97:68:ee:b7:
a3:37:2b:aa:b0:74:24:2c:25:09:5a:78:7f:c6:ac:
35:e5:62:eb:3e:21:5b:96:da:fa:39:09:83:95:51:
ce:0f:92:34:d2:9d:b0:d2:ef:b1:39:4d:d8:d1:ab:
da:7d:d0:22:3d:2e:98:b6:40:9c:a0:66:d5:b6:79:
9f:f1:a9:fb:8f:dc:ed:8d:7b:29:8c:97:bb:b3:52:
4a:c8:f0:e4:c5:e1:d0:4e:85:82:fb:5d:eb:6a:3b:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B8:3D:5A:83:66:FB:61:E2:70:FE:1E:00:2E:9C:E8:50:D7:6D:FC
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/f7g9WoNm-2HicP4eAC6c6FDXbfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:4f:82:cf:35:c3:b8:f0:15:b3:30:8d:38:1e:01:70:80:76:
1d:02:41:68:9f:65:a7:a6:95:ce:67:f6:48:e7:43:d8:74:51:
fb:7a:15:ac:77:55:c5:09:c5:fd:f6:32:e7:40:c1:76:84:e0:
de:65:00:e4:df:7a:89:09:e2:52:d7:25:f4:fb:ab:2e:82:b6:
04:1a:8b:5d:9b:f9:4b:30:78:f0:94:ce:e8:16:08:97:a5:bf:
0b:ad:d7:23:36:27:30:26:b4:3e:95:87:31:46:ea:46:1b:bd:
66:90:df:c1:07:a6:05:a2:4c:08:02:63:39:7d:53:a4:d1:d0:
90:ae:f0:7f:bc:e6:e0:6a:fb:df:02:ca:7e:af:7c:f4:72:0b:
97:83:aa:b9:09:78:dc:b6:ed:c3:8a:4f:38:d4:90:ea:69:19:
1c:20:11:a2:a6:3a:05:1a:aa:b6:b2:7c:50:60:3b:69:77:25:
c4:48:c1:7c:85:6d:28:ed:8a:ac:89:0a:f6:7c:61:de:26:d3:
eb:35:63:66:29:c8:7d:b4:4a:66:b2:cf:b7:2a:79:36:05:40:
e4:2c:41:23:a3:13:41:fa:75:7c:f3:d6:28:77:ac:c0:45:a1:
f1:ce:dd:a5:87:fb:28:4b:31:fe:ae:2e:f3:af:26:be:5e:86:
b3:3d:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:48:58 2025 by rpki-client