Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/Fy3QlZwz-uh1jzUwLV16kL9R3KI.roa
File: Fy3QlZwz-uh1jzUwLV16kL9R3KI.roa (raw, json)
Hash identifier: RdinI1LySZlKl6muWG4d7zntyopbhSi2dSgfcsJvs5U=
Subject key identifier: 17:2D:D0:95:9C:33:FA:E8:75:8F:35:30:2D:5D:7A:90:BF:51:DC:A2
Certificate issuer: /CN=871ba47d7bb1246d5b70078372569f94f358fb06
Certificate serial: 01E08F4B
Authority key identifier: 87:1B:A4:7D:7B:B1:24:6D:5B:70:07:83:72:56:9F:94:F3:58:FB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxukfXuxJG1bcAeDclaflPNY-wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/Fy3QlZwz-uh1jzUwLV16kL9R3KI.roa
Signing time: Wed 11 May 2022 21:53:03 +0000
ROA not before: Wed 11 May 2022 21:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 217.119.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31493963 (0x1e08f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871ba47d7bb1246d5b70078372569f94f358fb06
Validity
Not Before: May 11 21:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=172dd0959c33fae8758f35302d5d7a90bf51dca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:01:6b:aa:e0:ed:19:02:ba:b7:e4:85:da:
ab:0a:56:06:1d:97:67:6f:9f:37:f6:41:44:6d:40:
34:41:2c:43:f2:ee:68:21:68:af:45:14:02:88:a1:
5a:3e:7d:e4:8f:e1:41:1a:5c:c6:7f:95:e3:92:78:
f7:2c:bb:c5:8f:f6:ab:54:46:0f:52:7d:b8:f5:a7:
bc:aa:2f:41:d8:3a:1b:f1:7c:34:cb:49:93:54:5e:
69:75:f5:c7:ee:1e:10:52:5a:66:3c:a6:22:6a:83:
6e:46:28:1e:3d:d6:37:b0:8a:5e:ac:5b:16:03:55:
f0:26:a2:86:c0:eb:66:0d:e0:18:9a:54:a2:d9:68:
e3:51:38:c0:e9:a2:fa:1b:eb:8f:24:10:ae:88:68:
a8:b6:44:87:b6:7c:0f:2a:18:84:a3:2a:52:a6:94:
3c:e9:96:d3:9a:e0:f5:97:c8:9a:64:53:ba:18:b0:
43:82:92:1d:b9:ec:da:49:5f:6b:c9:a7:aa:85:86:
90:31:1e:72:77:94:d1:ae:ae:08:44:88:82:0b:9b:
e1:f0:a8:7a:02:1e:2f:ac:45:78:8b:1d:30:03:5b:
81:f5:09:18:3e:88:90:33:19:0d:5d:e2:a5:31:db:
52:6b:94:b9:d4:09:5b:59:b6:b4:91:43:ac:15:e3:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:D0:95:9C:33:FA:E8:75:8F:35:30:2D:5D:7A:90:BF:51:DC:A2
X509v3 Authority Key Identifier:
keyid:87:1B:A4:7D:7B:B1:24:6D:5B:70:07:83:72:56:9F:94:F3:58:FB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxukfXuxJG1bcAeDclaflPNY-wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/Fy3QlZwz-uh1jzUwLV16kL9R3KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/hxukfXuxJG1bcAeDclaflPNY-wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.130.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7a:09:8c:e1:9b:9f:2b:c7:d8:69:3d:f3:d5:cf:f1:14:57:
bb:1b:e9:5b:d6:27:d2:d5:1e:1a:7d:ac:66:c5:bf:12:66:a9:
65:2b:75:2f:46:5a:1e:9c:11:12:b2:9c:ad:ca:c3:8f:b6:a7:
fb:e1:cc:bc:92:de:86:91:b2:f0:a8:32:34:7f:64:ba:cb:5d:
ba:86:0f:8a:d2:7d:b5:c5:a1:5e:77:d3:0c:ed:95:52:41:3e:
b4:dd:bf:39:56:79:97:72:5e:bf:28:29:ba:84:10:1f:7f:f4:
66:d5:56:ab:1a:d9:16:c0:26:4d:ce:55:d7:11:f0:1b:e0:27:
59:15:66:63:4f:62:e9:bf:04:ab:3c:32:33:9c:c3:9c:b1:3a:
8e:74:d9:f4:68:8f:17:6d:96:e4:70:6d:0e:9e:ba:56:05:ab:
28:d0:56:61:23:80:f3:9a:16:d3:44:9f:ea:0f:ac:0c:01:8c:
6d:7b:6c:ea:e1:3b:c1:f8:e1:3f:b4:1a:1b:d0:6c:82:fd:e3:
ab:5e:f0:d1:02:a2:4a:77:8b:18:79:1b:1c:5c:5f:ee:6b:0d:
c3:a5:7a:29:d4:cd:4f:ec:d4:16:7c:05:3d:c3:b5:91:25:a8:
48:3a:b3:26:3b:39:18:38:02:f9:65:3a:c2:de:8d:17:f1:fb:
f8:e5:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:35:23 2025 by rpki-client