Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa
File: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (raw, json)
Hash identifier: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=
Subject key identifier: FA:78:8B:D0:76:C1:16:72:55:BC:A4:2D:D2:1A:D4:7E:70:D8:03:67
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 01943A1FEFA5B65952F5F61BDD9B10792085
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa
Signing time: Mon 06 Jan 2025 05:39:18 +0000
ROA not before: Mon 06 Jan 2025 05:39:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 217.147.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:1f:ef:a5:b6:59:52:f5:f6:1b:dd:9b:10:79:20:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jan 6 05:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa788bd076c1167255bca42dd21ad47e70d80367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:fb:88:87:b8:70:a0:18:f9:4d:e2:4d:5b:
91:3f:0d:a2:e4:e9:57:36:4f:e4:c5:db:e9:55:85:
31:79:43:ea:1f:ee:35:2b:38:66:b8:ea:cf:19:71:
0f:b7:ba:8e:b5:e5:4e:16:63:60:d2:ed:cd:24:bd:
6c:b7:bf:c9:0d:38:9f:b3:3c:8e:b0:87:6e:6d:ad:
9e:9d:7a:65:9a:aa:24:0d:3c:99:08:5f:2f:9b:8a:
23:b0:11:ff:57:da:9f:87:8e:22:00:8f:5a:92:e1:
68:47:7e:42:f0:bb:b5:07:df:63:e3:f8:d2:ef:2c:
ba:e0:fc:a6:34:fc:c0:88:36:4b:e0:ff:fb:09:a0:
0d:f0:50:34:a8:6b:08:f3:7b:b9:0d:ba:83:15:44:
26:f2:52:63:24:54:0a:98:59:e9:48:6b:47:cf:1c:
87:ad:64:02:e5:59:a4:f8:a1:0c:66:18:16:40:10:
e6:be:a3:c2:6d:47:e9:52:ca:3f:86:9e:e5:8b:44:
c0:17:20:54:8d:1e:83:ff:00:01:ae:5f:ad:7d:a8:
f8:48:e9:0c:46:77:f3:56:5f:df:b5:41:13:88:cf:
72:dc:9f:0e:7a:df:c4:6e:7c:65:e9:02:2f:95:c1:
19:56:03:ab:5a:aa:5b:c0:5d:14:42:5e:02:66:79:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:8B:D0:76:C1:16:72:55:BC:A4:2D:D2:1A:D4:7E:70:D8:03:67
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2a:29:1e:24:7d:99:75:36:b2:47:ff:70:19:05:75:d8:cb:
af:37:df:81:89:f4:b3:91:6b:f1:37:88:11:3b:2e:4a:b5:37:
a2:e1:14:82:57:a1:ad:a1:64:2c:20:8d:ba:84:18:e6:a1:48:
b9:80:30:20:e9:ca:c8:dc:39:42:9a:e4:6f:08:7a:46:ee:9f:
ad:fe:1c:63:b0:4f:8b:6b:8a:c8:19:48:26:da:63:6e:24:ab:
1a:02:29:53:83:b7:f3:8a:6c:20:14:be:b3:c5:ca:34:99:7f:
42:e1:29:5e:46:3f:71:35:c4:a5:d3:6d:dc:f7:b8:91:44:63:
13:80:8b:20:ca:7c:82:5a:9a:e9:15:db:6c:a6:5f:44:3d:55:
a5:aa:d6:2c:40:31:95:e2:76:d1:45:d6:40:f5:f6:43:0b:62:
b2:a3:97:78:52:1b:16:fd:da:22:c7:e0:04:c5:6f:7a:77:85:
32:4d:3f:f7:72:91:2f:7d:39:ec:f4:83:54:fa:dd:a7:69:ee:
98:5d:5a:3b:e2:66:3e:33:50:06:8a:f7:1e:1c:10:54:85:ba:
1d:2f:a9:40:50:7e:46:25:df:e3:ad:0f:5d:5e:cc:ae:80:d3:
b8:f4:a4:46:c8:73:3e:aa:3d:f2:cd:62:a1:cc:35:c3:5c:48:
80:4f:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:04 2025 by rpki-client