Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/7eOogqDmx2CLpsCMrfr1fu_g2yI.roa
File: 7eOogqDmx2CLpsCMrfr1fu_g2yI.roa (raw, json)
Hash identifier: 1x1j4C/D1P1zJKyiZJw9qCwWUCCWd2alaVXVkEmIcVk=
Subject key identifier: ED:E3:A8:82:A0:E6:C7:60:8B:A6:C0:8C:AD:FA:F5:7E:EF:E0:DB:22
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 0191E64FB40FEB5528BA41D326F2839C548B
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/7eOogqDmx2CLpsCMrfr1fu_g2yI.roa
Signing time: Thu 12 Sep 2024 12:57:48 +0000
ROA not before: Thu 12 Sep 2024 12:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 217.147.180.0/23 maxlen: 24
217.147.180.0/24 maxlen: 24
217.147.181.0/24 maxlen: 24
2a0b:2900:1100::/40 maxlen: 48
2a0b:2900:1f00::/40 maxlen: 40
2a0b:2900:1f00::/48 maxlen: 48
2a0b:2900:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:4f:b4:0f:eb:55:28:ba:41:d3:26:f2:83:9c:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Sep 12 12:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede3a882a0e6c7608ba6c08cadfaf57eefe0db22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:cb:b2:88:9e:34:bb:06:23:12:ae:9e:ea:
07:b9:37:56:f4:bb:de:43:82:98:e3:81:d2:e1:9b:
b9:e9:06:7c:a3:ce:82:cd:42:4b:34:2d:c0:91:2a:
23:56:59:ef:63:f9:95:76:79:3a:70:10:c7:68:d6:
1b:a6:fc:51:be:4f:2e:8c:39:f5:9b:7b:f4:f8:d1:
f6:60:e9:92:ec:ac:9c:8a:6a:6a:ec:a9:58:1c:f2:
77:55:c5:4b:86:53:3c:82:c7:9e:1d:50:a1:a9:53:
eb:09:40:20:d0:98:50:69:e8:b4:62:86:70:d7:b3:
7a:69:48:bc:a7:8a:bb:c5:fd:44:e7:71:f7:b8:92:
80:29:dd:4c:9d:b3:b4:df:71:71:2f:ba:d5:0e:b5:
f0:8c:41:56:4f:82:11:be:df:bc:ec:c3:6e:25:da:
80:4d:f2:37:f5:b6:e6:7f:97:81:1f:c9:2c:df:49:
7a:a9:ae:82:07:b8:1a:80:7e:cb:51:c3:8a:d3:71:
cf:a1:32:18:d3:ab:2d:8f:51:5a:72:58:2a:1a:0e:
c0:fd:63:b0:2e:39:73:e6:76:ad:84:63:a6:21:41:
bb:7b:2e:54:05:e8:d7:c1:0d:79:96:99:3e:39:de:
5e:f2:02:54:34:21:25:11:89:ed:8c:f3:f3:9a:89:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:A8:82:A0:E6:C7:60:8B:A6:C0:8C:AD:FA:F5:7E:EF:E0:DB:22
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/7eOogqDmx2CLpsCMrfr1fu_g2yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.180.0/23
IPv6:
2a0b:2900:1100::/40
2a0b:2900:1f00::/40
2a0b:2900:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
02:3b:9f:02:f6:d1:a4:7d:a4:d2:db:17:79:f8:89:8d:d9:a0:
1b:6d:f1:bf:3c:30:54:70:f7:ce:7f:c9:f6:36:bf:d1:d0:8e:
c2:90:59:78:26:82:70:c9:7a:72:37:1c:7b:dd:4a:01:bd:5c:
00:96:7f:92:4e:2e:8d:d9:0c:6f:b7:45:0e:85:94:7c:78:2f:
39:e8:aa:d9:52:ed:0b:27:9e:29:01:f1:54:e6:0a:ba:cf:a4:
66:c7:27:94:cd:ac:da:c3:f4:a0:02:86:35:7f:94:25:40:ed:
73:92:0e:bd:42:96:57:86:56:fa:ec:85:36:3f:90:f6:f3:7b:
b2:e1:4e:16:75:fd:a0:94:c3:63:12:52:10:4a:dd:6a:de:44:
50:fb:45:07:9d:b1:b0:33:5d:34:6b:51:6f:77:26:cc:d1:d0:
1d:15:f6:8c:ae:02:d0:0b:7b:d9:3c:f8:63:90:b8:96:1e:99:
2d:1b:c4:a6:a5:3d:00:bf:97:5e:fa:cb:c4:26:a4:57:6d:cd:
0d:cd:48:00:a6:cf:c7:3f:e2:eb:ab:61:d6:45:70:1a:05:0e:
f0:90:bb:67:56:66:0f:da:af:81:9e:00:58:4d:24:81:58:52:
a0:a6:33:b5:97:1b:1a:0f:59:d1:a6:6c:34:66:f3:7f:2b:37:
68:97:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:03 2025 by rpki-client