Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/hB9kQl1Y6rBahp990wuCw4pSfNg.roa
File: hB9kQl1Y6rBahp990wuCw4pSfNg.roa (raw, json)
Hash identifier: jB2Ttg5gS2jisY59LQMkSanJOv0YUDqMHRUuoIatX+k=
Subject key identifier: 84:1F:64:42:5D:58:EA:B0:5A:86:9F:7D:D3:0B:82:C3:8A:52:7C:D8
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 019426D8D59EC8F75E2CA5A6EFE588889BB0
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/hB9kQl1Y6rBahp990wuCw4pSfNg.roa
Signing time: Thu 02 Jan 2025 11:48:52 +0000
ROA not before: Thu 02 Jan 2025 11:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 217.28.160.0/23 maxlen: 23
217.28.162.0/24 maxlen: 24
217.28.164.0/22 maxlen: 22
217.28.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d5:9e:c8:f7:5e:2c:a5:a6:ef:e5:88:88:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: Jan 2 11:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=841f64425d58eab05a869f7dd30b82c38a527cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:90:4f:4c:d8:ca:b8:2b:17:b0:df:aa:ae:
1a:2b:8d:30:75:30:00:cb:70:3b:b2:f6:8a:9d:aa:
81:12:10:35:5b:ed:c5:2f:3d:16:67:cb:48:5a:76:
af:bb:bd:19:84:af:9a:7e:d7:0f:8f:5a:9c:f7:07:
bc:71:ad:a8:53:08:fc:5c:70:cf:fe:a8:89:c4:b4:
d9:d4:4b:41:96:18:9b:f8:77:56:82:be:c5:64:14:
e7:74:86:b0:bf:c2:ac:bc:d3:1c:d6:67:da:aa:74:
bb:04:b4:27:56:ca:e8:f1:3c:2a:bb:53:0f:4b:56:
2e:7c:f6:31:14:45:73:c3:03:dd:e5:51:98:75:2f:
9c:73:a6:e6:0f:b8:19:f5:3a:e2:3a:29:4a:79:ef:
82:6b:00:82:7e:7a:a9:a3:b6:7b:2a:2a:36:81:ef:
ff:f0:fe:43:5a:85:fa:92:a2:8b:0b:56:06:b0:17:
71:e5:87:3d:f0:95:2e:a9:61:e7:e7:76:7f:87:34:
6a:6e:d9:a4:37:81:96:c4:fa:af:48:5d:13:e0:10:
30:41:e6:b6:06:d9:51:1a:14:23:08:5f:a7:a2:2a:
a7:84:06:45:6a:e9:a5:6d:1c:a5:fa:3f:fa:90:d7:
09:a0:32:e1:2a:09:50:e7:79:c8:04:b8:05:e2:bb:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1F:64:42:5D:58:EA:B0:5A:86:9F:7D:D3:0B:82:C3:8A:52:7C:D8
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/hB9kQl1Y6rBahp990wuCw4pSfNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.160.0-217.28.162.255
217.28.164.0-217.28.175.255
Signature Algorithm: sha256WithRSAEncryption
39:2f:1f:18:75:43:81:04:c2:e4:6a:bd:b7:34:63:e0:a9:d4:
b8:39:4c:d5:0c:e1:5d:63:8c:9d:a1:24:21:1a:9e:69:de:ab:
ee:d4:9a:e0:a5:5e:57:06:51:04:54:ac:3f:8c:d8:5c:4b:6b:
cc:48:4f:02:0e:83:d8:99:97:95:b6:5e:bb:63:cd:59:5b:45:
66:42:6d:2e:fc:7c:41:3d:9c:b6:bd:0d:a0:57:9c:13:71:f2:
ab:a3:c6:17:5f:fc:08:36:b0:66:66:33:82:d7:16:1c:a3:ac:
99:96:22:56:1c:c8:fc:ff:17:f3:9a:59:e0:b7:bf:c5:b2:cc:
fa:ab:4f:8f:f4:39:f1:78:e5:48:67:e0:74:e1:bd:8c:84:b6:
92:b6:d0:fd:62:48:98:f7:b9:cc:f3:ad:99:a4:37:2a:b7:ea:
1d:9d:a2:30:09:1a:35:47:31:c1:75:c9:87:e7:de:d3:d7:a9:
16:89:99:b3:ee:59:61:13:1f:f4:e1:01:9e:ae:86:b3:1e:6e:
15:fd:f7:02:6e:2c:3f:d1:a6:20:e1:10:ff:d1:cf:a9:aa:3c:
59:2e:32:2b:4c:09:59:f3:74:9d:cc:13:5a:82:dc:27:d5:19:
37:07:be:73:50:f9:44:41:8f:4b:a7:cc:66:de:9f:4e:c9:1d:
1c:43:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:14:52 2025 by rpki-client