Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/9mvI3HIP3JxLhnLuyAB8XAT-iXU.roa
File: 9mvI3HIP3JxLhnLuyAB8XAT-iXU.roa (raw, json)
Hash identifier: vAT+5nmSCtbKjslQaJgJYIkGsz+1u32VyPcvAyDqkXo=
Subject key identifier: F6:6B:C8:DC:72:0F:DC:9C:4B:86:72:EE:C8:00:7C:5C:04:FE:89:75
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 017B5D
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/9mvI3HIP3JxLhnLuyAB8XAT-iXU.roa
Signing time: Fri 28 Jan 2022 21:14:33 +0000
ROA not before: Fri 28 Jan 2022 21:14:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 217.8.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97117 (0x17b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Jan 28 21:14:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f66bc8dc720fdc9c4b8672eec8007c5c04fe8975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:ea:e2:cf:97:f5:67:c1:98:b5:da:d5:7a:
c0:68:10:ff:66:5e:a9:f3:e7:33:90:1e:3e:93:1a:
a5:87:1b:4c:94:a6:b1:ae:ac:13:36:86:97:9d:94:
43:96:a4:bc:30:79:e6:16:ec:b2:e4:a2:2c:53:13:
92:cc:ab:36:8c:3b:a9:f7:4a:fb:9b:40:4e:cc:34:
f9:7b:53:90:a0:10:f3:9c:3f:8a:32:a7:b1:3f:66:
ca:2f:ee:2e:f7:16:b2:63:58:d7:31:6c:a5:cd:0e:
e8:ef:6a:67:35:32:07:a5:aa:84:c7:d7:e1:8b:2b:
e6:bd:ed:6f:c5:66:4b:00:13:22:fd:c5:d9:38:39:
e0:c5:72:f6:26:32:1b:69:47:02:d0:b5:f8:78:6f:
d1:ad:26:ba:c5:80:6d:2f:be:04:08:d5:4d:ed:99:
bf:e3:d1:94:ef:3b:ed:7a:29:ab:f6:85:b7:4e:cc:
5a:1b:ae:f5:9f:c6:4c:3d:1b:ec:9f:60:de:fd:28:
ed:d6:fa:e3:9b:ca:f3:ad:c4:9b:10:6f:6a:43:19:
8f:18:f6:f2:eb:d2:47:68:8a:ea:67:b3:5d:df:48:
37:56:0d:7e:fb:1e:b6:d0:97:1a:fb:2f:c3:48:29:
9f:80:f7:f6:c6:2a:19:6c:4a:3e:7e:ad:9f:ac:a7:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6B:C8:DC:72:0F:DC:9C:4B:86:72:EE:C8:00:7C:5C:04:FE:89:75
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/9mvI3HIP3JxLhnLuyAB8XAT-iXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:af:2f:bc:3f:5c:5e:21:d5:02:a4:51:8c:ef:f5:36:75:71:
c3:59:f7:01:33:2e:e0:f1:3f:09:44:94:22:11:9e:b5:d6:76:
b4:99:1d:51:89:65:3f:ee:2b:8d:31:51:12:78:7f:7e:ea:43:
d1:4e:b5:84:22:08:aa:3b:3a:09:7b:a6:20:59:dc:ff:36:eb:
d4:19:9b:58:7f:23:97:37:34:1b:80:74:be:ce:30:9b:61:00:
93:a8:19:80:21:8b:bc:71:97:24:f5:32:11:3f:fb:b8:32:91:
5b:6d:06:b7:93:e8:4c:95:f3:31:75:68:11:c2:54:64:ba:a5:
26:59:d8:82:69:05:14:c6:69:a1:ba:c5:79:02:1f:8d:30:62:
80:9a:86:1c:52:48:db:1a:04:09:9a:70:a9:cc:8c:8e:2e:d5:
4f:b3:f3:73:82:79:35:ad:c5:ba:2a:a5:27:c9:14:e3:be:a2:
d2:af:72:e3:39:ec:ce:ce:33:aa:e6:3e:45:ce:3b:1b:1b:57:
28:cd:bd:6d:b6:a0:39:28:06:cc:d6:4b:4b:6e:12:f1:e3:b9:
2b:e9:fc:f8:71:73:25:00:46:6a:20:82:be:50:b5:1f:b2:3f:
31:82:bc:70:a7:9f:a8:51:21:0a:ca:c2:3b:bb:ca:70:f9:3f:
32:a6:23:65
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAXtdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
NDdlZTFmMTdjOTg3ZGViYjJjMDIwZDhiNWYyZDhiZGFkYmViNzcwHhcNMjIwMTI4
MjExNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNjZiYzhkYzcyMGZk
YzljNGI4NjcyZWVjODAwN2M1YzA0ZmU4OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoq3q4s+X9WfBmLXa1XrAaBD/Zl6p8+czkB4+kxqlhxtMlKax
rqwTNoaXnZRDlqS8MHnmFuyy5KIsUxOSzKs2jDup90r7m0BOzDT5e1OQoBDznD+K
MqexP2bKL+4u9xayY1jXMWylzQ7o72pnNTIHpaqEx9fhiyvmve1vxWZLABMi/cXZ
ODngxXL2JjIbaUcC0LX4eG/RrSa6xYBtL74ECNVN7Zm/49GU7zvteimr9oW3Tsxa
G671n8ZMPRvsn2De/Sjt1vrjm8rzrcSbEG9qQxmPGPby69JHaIrqZ7Nd30g3Vg1+
+x620Jca+y/DSCmfgPf2xioZbEo+fq2frKf8QwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFPZryNxyD9ycS4Zy7sgAfFwE/ol1MB8GA1UdIwQYMBaAFJtH7h8XyYfeuywC
DYtfLYva2+t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2FhLzEv
OW12STNISVAzSnhMaG5MdXlBQjhYQVQtaVhVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85
YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2FhLzEvbTBmdUh4ZkpoOTY3
TEFJTmkxOHRpOXJiNjNjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Qh2MA0GCSqGSIb3DQEBCwUAA4IB
AQBsry+8P1xeIdUCpFGM7/U2dXHDWfcBMy7g8T8JRJQiEZ611na0mR1RiWU/7iuN
MVESeH9+6kPRTrWEIgiqOzoJe6YgWdz/NuvUGZtYfyOXNzQbgHS+zjCbYQCTqBmA
IYu8cZck9TIRP/u4MpFbbQa3k+hMlfMxdWgRwlRkuqUmWdiCaQUUxmmhusV5Ah+N
MGKAmoYcUkjbGgQJmnCpzIyOLtVPs/Nzgnk1rcW6KqUnyRTjvqLSr3LjOezOzjOq
5j5FzjsbG1cozb1ttqA5KAbM1ktLbhLx47kr6fz4cXMlAEZqIIK+ULUfsj8xgrxw
p5+oUSEKysI7u8pw+T8ypiNl
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:42 2025 by rpki-client