Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa
File: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (raw, json)
Hash identifier: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=
Subject key identifier: EF:79:65:1F:3F:F1:C1:FF:CA:CF:41:9E:EC:1A:87:F5:79:A0:0E:20
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 019425FC8AD8C17EBC7E150E09AA6BC94D21
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa
Signing time: Thu 02 Jan 2025 07:48:15 +0000
ROA not before: Thu 02 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60398
IP address blocks: 217.150.86.0/24 maxlen: 24
217.150.87.0/24 maxlen: 24
2a02:65c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:8a:d8:c1:7e:bc:7e:15:0e:09:aa:6b:c9:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jan 2 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef79651f3ff1c1ffcacf419eec1a87f579a00e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:fe:02:61:1a:76:58:9e:c9:50:f3:cd:e0:
da:80:29:e6:38:a2:d4:59:c6:0d:83:4a:bb:35:d9:
61:d5:67:72:fc:39:e9:d3:72:65:48:bd:04:0a:a0:
e0:32:69:2a:1d:af:ff:48:66:11:cb:d5:1e:5b:70:
3c:d2:92:11:cc:3e:05:d5:d3:4e:6b:f1:a7:9a:e2:
a8:54:73:60:7b:bd:13:59:4a:34:97:58:63:6a:10:
ac:43:f7:81:21:5e:ed:49:39:94:c6:0e:de:37:7e:
40:88:0d:8e:fc:67:27:5a:e3:ea:3e:7c:ba:ac:56:
20:28:bc:4c:ed:5b:6c:67:78:a9:f2:d1:f6:eb:d2:
d6:b9:2e:46:be:dd:45:5a:8a:1f:95:cd:5e:5d:7f:
6e:fa:9c:60:70:dc:01:ef:4b:f1:34:be:7b:30:4d:
3d:6e:ab:87:eb:e6:21:a2:a6:ec:03:fd:a4:84:4d:
92:7b:67:b9:d9:da:b8:7c:78:5b:cc:09:75:89:d4:
67:92:55:3c:5b:3d:3a:54:9f:34:e7:46:26:3e:f1:
1c:4a:d3:f8:c5:95:7e:4c:7e:73:03:84:46:38:78:
b4:62:34:c1:df:76:0d:64:03:3e:d1:1b:ed:d7:81:
d9:81:6e:0c:b1:3e:69:c4:5d:a3:30:61:63:6b:74:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:65:1F:3F:F1:C1:FF:CA:CF:41:9E:EC:1A:87:F5:79:A0:0E:20
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.86.0/23
IPv6:
2a02:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:95:e9:db:20:d2:c5:2a:f9:86:76:7a:cc:0b:21:f3:38:41:
35:b9:51:36:41:88:34:85:53:66:e8:f9:62:fc:37:45:f1:26:
e5:1f:f5:60:7f:a2:63:0c:c1:bb:ff:b0:3a:e4:00:7b:fb:09:
43:fe:62:b6:ab:f2:6f:3c:ac:4f:41:28:79:2b:8a:6c:f0:15:
9d:4a:bb:e6:25:ee:65:15:df:d8:65:ad:be:0d:6a:0a:12:e2:
49:3b:ae:d4:c5:e9:98:27:7a:ba:db:58:bb:1b:44:89:4d:7a:
d9:11:28:f7:bc:01:f4:47:05:2f:fa:78:c3:de:7d:0e:03:b6:
6e:87:9a:6c:80:03:b3:b3:0c:5c:09:f0:ba:c4:96:91:0c:20:
99:be:85:d0:9f:ab:2d:cd:87:a8:48:b3:d0:b8:fe:58:32:f4:
c3:2b:8a:0e:d9:f9:03:38:7b:2c:4b:bb:b9:2c:81:fe:12:15:
4c:88:26:de:30:4a:9b:5d:c7:dc:74:83:0f:07:f0:1e:4e:60:
0f:67:46:f7:cf:30:a8:b0:8b:1c:79:42:b4:4b:ce:bf:7c:05:
8a:c1:fb:66:d9:dc:45:b6:22:a6:a5:3e:cf:d1:fc:62:d8:97:
d7:a8:a9:36:c2:9e:1d:5f:a3:4e:79:71:91:f2:fd:9b:2f:0f:
b5:0c:1f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:28 2025 by rpki-client