Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4eh9IXZA8qS0p-8RgNFLZX5XulE.roa
File: 4eh9IXZA8qS0p-8RgNFLZX5XulE.roa (raw, json)
Hash identifier: ckXQWG5gd8M7Cj+bWcqrTkwhhK2xkNu9qh/tljKVJTQ=
Subject key identifier: E1:E8:7D:21:76:40:F2:A4:B4:A7:EF:11:80:D1:4B:65:7E:57:BA:51
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09EEE1BA
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4eh9IXZA8qS0p-8RgNFLZX5XulE.roa
Signing time: Sat 01 Jan 2022 04:56:18 +0000
ROA not before: Sat 01 Jan 2022 04:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397349
IP address blocks: 217.145.237.0/24 maxlen: 24
79.110.171.0/24 maxlen: 24
2a06:1e87::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166650298 (0x9eee1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e87d217640f2a4b4a7ef1180d14b657e57ba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:1e:84:c3:71:d4:58:ea:2b:b1:7a:55:e5:
5e:2f:09:6b:02:81:b7:2b:d7:81:08:e2:d7:7e:08:
6a:4c:62:e7:bd:98:d5:1b:15:4f:f4:8e:7a:9a:80:
4e:c3:31:c6:4c:23:75:05:42:e5:8c:15:1f:a2:6f:
ad:62:07:29:c9:a0:b1:66:f1:b9:75:08:a0:32:52:
21:d6:86:55:61:2b:d4:96:63:68:f9:bf:3f:28:af:
57:1f:f4:2e:ff:b3:a5:c7:58:2d:f1:3f:98:be:29:
88:f6:82:a2:03:0f:d3:16:19:48:0c:4a:45:2b:ff:
ec:fd:8f:94:34:bd:02:04:33:58:6c:f7:37:c7:ab:
05:2f:7c:2a:f8:4a:1d:5e:34:84:3c:fe:1d:13:96:
b3:87:26:2f:41:a1:41:3a:20:b9:32:66:79:31:e7:
b2:f5:3b:36:e5:a0:7d:d6:f2:ca:50:0b:8b:7e:b2:
ae:3e:15:86:a4:5b:ae:07:65:64:43:a0:35:24:e1:
2b:71:9b:22:21:1f:8e:ba:9b:a6:0b:fe:a1:75:6c:
bd:92:d8:bd:30:43:3f:42:d9:69:fa:90:78:b4:48:
3f:c2:b2:7a:17:da:7c:44:0e:dd:11:b2:3c:b6:55:
8f:c6:4c:31:4e:7d:d3:3a:f3:dd:86:a3:78:6a:3b:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:7D:21:76:40:F2:A4:B4:A7:EF:11:80:D1:4B:65:7E:57:BA:51
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4eh9IXZA8qS0p-8RgNFLZX5XulE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.171.0/24
217.145.237.0/24
IPv6:
2a06:1e87::/40
Signature Algorithm: sha256WithRSAEncryption
36:f0:d3:a1:9c:b4:38:46:c3:22:5a:0f:ad:e1:99:6a:4b:89:
2d:f9:dc:da:a2:9e:91:2d:4b:0e:03:d3:a3:fa:07:aa:e9:05:
c3:ea:da:b6:5c:7d:80:5c:6b:e8:47:d1:cf:7c:fb:06:a1:f5:
20:16:5f:85:d0:41:de:c0:43:73:85:80:d6:d0:cd:63:b6:8e:
d3:dc:08:24:26:02:f3:80:e0:58:df:3e:9c:99:63:f0:22:b8:
97:4f:ae:ab:4a:cb:17:66:ac:0d:23:8e:20:fe:03:4b:a2:e6:
12:ca:32:d8:f8:d3:27:49:5e:66:97:00:12:01:2e:a2:2f:d3:
7f:97:13:d1:40:be:06:27:65:6a:65:2f:82:18:97:5f:35:67:
4f:1b:33:7a:65:e7:ac:a8:57:76:6f:7c:5f:eb:76:d7:cf:15:
41:27:cc:dc:17:5b:2f:a4:a2:ea:9d:5e:99:4c:10:c1:7d:6a:
3d:e4:dc:25:15:8d:be:90:9f:bb:dd:9a:7e:9a:10:22:37:0b:
49:cc:14:4d:a4:78:1f:ce:d1:d1:ea:f7:a4:da:0c:e8:d3:13:
61:8c:d6:93:98:9e:13:bf:b4:70:0e:a3:2b:61:90:35:db:45:
14:fd:84:a5:69:11:d2:19:66:11:9a:b0:94:d9:6d:ee:46:16:
a6:eb:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:02 2025 by rpki-client