Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/nb4SePFSO-kFEY_Z1lzDojQZiLI.roa
File: nb4SePFSO-kFEY_Z1lzDojQZiLI.roa (raw, json)
Hash identifier: l6O1YQaQ6bW33JAxVMfMACX0nw+WThXgZHtVw6B0l6k=
Subject key identifier: 9D:BE:12:78:F1:52:3B:E9:05:11:8F:D9:D6:5C:C3:A2:34:19:88:B2
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194DB5C4B79EAC49F07AD9A2D5B01C09B78
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/nb4SePFSO-kFEY_Z1lzDojQZiLI.roa
Signing time: Thu 06 Feb 2025 13:04:06 +0000
ROA not before: Thu 06 Feb 2025 13:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 217.177.0.0/21 maxlen: 24
217.177.32.0/24 maxlen: 24
217.177.35.0/24 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:5c:4b:79:ea:c4:9f:07:ad:9a:2d:5b:01:c0:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 6 13:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dbe1278f1523be905118fd9d65cc3a2341988b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:18:8c:01:08:44:97:ab:da:f2:ee:fd:6a:
9c:17:28:e0:be:c2:b3:cd:12:89:13:91:ab:3b:d9:
1c:89:75:d0:21:e4:58:c2:3a:db:9f:b6:b1:38:9b:
22:06:93:b0:13:e2:3e:35:7c:88:12:ed:54:04:cb:
87:e7:0b:24:67:7d:19:f4:0d:10:2a:92:4a:a4:12:
a0:41:d8:bd:60:07:a3:45:39:67:1d:c1:3b:ea:3e:
01:a5:98:a1:a8:ee:ce:e9:c5:33:e6:93:97:12:1d:
d0:54:b2:45:93:84:1d:de:21:cd:a3:8e:e6:dd:cd:
9b:73:b2:d1:ba:23:e5:10:50:fb:25:5c:2e:bc:99:
0e:47:21:27:1a:a3:e1:4a:b0:d9:1d:2c:0b:b6:f3:
a7:d7:bb:55:04:08:c2:76:e5:4b:9e:13:8c:1c:67:
1c:70:ed:83:6e:b0:e3:14:95:0f:0c:70:94:b5:18:
d5:66:db:5c:a3:c6:13:8e:1c:4b:25:9f:61:48:e7:
08:cf:f0:c6:79:3c:ab:66:bf:98:2d:2d:36:7e:bb:
27:04:6c:7e:fb:8a:35:b4:63:eb:da:c1:5f:8d:82:
92:cc:d9:2f:84:05:ab:bd:fe:bd:08:a0:00:12:0f:
47:d0:06:b4:df:48:90:c1:1a:ec:34:03:36:6b:56:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:12:78:F1:52:3B:E9:05:11:8F:D9:D6:5C:C3:A2:34:19:88:B2
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/nb4SePFSO-kFEY_Z1lzDojQZiLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.0.0/21
217.177.32.0/24
217.177.35.0/24
217.180.12.0/24
217.180.22.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:21:eb:b9:5a:66:36:de:5b:6f:a5:59:20:ff:f6:5b:97:39:
a2:f6:3e:15:3a:06:a1:19:89:a7:43:fc:11:fe:2e:e5:c3:7d:
e7:44:70:05:ea:a1:1a:a3:e0:84:0a:ba:23:6c:17:88:1a:9a:
ae:23:07:1f:24:50:00:f2:d0:d6:d9:ce:6c:83:f9:3b:43:93:
17:7d:76:34:d2:25:75:9e:a8:0b:16:82:4e:21:b3:a8:aa:24:
2e:a9:fe:71:c1:c0:2e:4c:1e:24:50:ab:00:25:52:82:ee:53:
33:2f:b7:5d:ad:ea:65:15:79:86:f6:35:d9:6f:cd:73:0b:98:
75:ab:dd:0f:f4:5d:a7:37:ad:72:4a:4c:e0:42:8f:1b:53:ac:
16:92:46:30:4f:cd:5b:3e:86:83:2f:27:eb:e9:fe:90:cd:82:
3a:7e:2d:ec:9a:ba:41:98:a4:60:f6:b3:6d:b5:d3:1d:37:a4:
8a:ae:6d:86:c0:c4:18:40:bd:c6:18:59:95:72:9f:2f:98:6b:
48:23:04:1f:ed:52:be:ae:10:99:81:3b:f6:81:9a:bf:05:c2:
87:ee:fe:82:58:e9:88:b9:4b:98:94:15:fb:e9:82:7d:71:93:
67:e2:79:a4:83:ae:92:a0:20:fa:d2:33:72:2b:f5:88:76:92:
f6:5e:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:52 2025 by rpki-client