Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/8gl6w-ccmQkJiz6LD4JPTUW8aeY.roa
File: 8gl6w-ccmQkJiz6LD4JPTUW8aeY.roa (raw, json)
Hash identifier: SxJHdZt0HA2/CZYxp314U9qbmuHgcxggYGIQetdSyoc=
Subject key identifier: F2:09:7A:C3:E7:1C:99:09:09:8B:3E:8B:0F:82:4F:4D:45:BC:69:E6
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 043BA54E
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/8gl6w-ccmQkJiz6LD4JPTUW8aeY.roa
Signing time: Tue 08 Feb 2022 11:56:23 +0000
ROA not before: Tue 08 Feb 2022 11:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21379
IP address blocks: 217.147.160.0/24 maxlen: 24
217.147.161.0/24 maxlen: 24
217.147.162.0/24 maxlen: 24
217.147.163.0/24 maxlen: 24
217.147.164.0/24 maxlen: 24
217.147.165.0/24 maxlen: 24
217.147.169.0/24 maxlen: 24
185.189.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71017806 (0x43ba54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Feb 8 11:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2097ac3e71c9909098b3e8b0f824f4d45bc69e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:a7:76:83:6f:74:8a:00:07:58:4e:ea:58:
d8:7f:55:d3:c0:34:2e:5a:2e:5c:a3:35:96:73:ac:
e6:81:04:83:46:43:a3:03:84:20:36:2c:31:79:06:
3f:21:01:07:e4:08:0d:ad:d0:b2:78:b2:77:ce:05:
4a:0c:ba:75:fe:c6:a9:29:9d:29:d9:8f:55:e1:a2:
b0:bf:05:45:1a:fc:52:47:e7:7b:17:61:e4:c7:c3:
1c:6d:c8:fc:42:f9:90:d4:02:94:4a:13:4a:cd:d5:
c2:e2:68:23:b9:a1:01:e1:e1:f6:a7:b6:32:ae:89:
71:55:c9:55:c1:07:8a:cf:e5:6f:8d:84:df:0d:ad:
27:ec:66:cb:61:8e:20:ec:0e:3a:75:e0:5a:23:5a:
a7:b6:25:0f:14:7d:cd:86:80:e0:f0:f4:b2:b5:d8:
67:ab:f1:90:3b:e1:e3:85:d1:5b:93:76:87:b1:53:
d0:69:bc:fc:9c:07:25:41:1f:85:6d:d4:b3:60:0b:
45:f3:c8:bb:f8:cd:7d:de:2b:32:65:a7:3d:67:45:
c5:25:5f:06:2e:b3:a5:f2:d9:47:89:ba:f0:2a:11:
9d:e6:30:f6:39:1e:55:12:e8:87:bc:fc:f9:42:62:
0e:49:78:e0:d0:12:6f:95:06:4f:20:ea:f8:8e:c0:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:09:7A:C3:E7:1C:99:09:09:8B:3E:8B:0F:82:4F:4D:45:BC:69:E6
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/8gl6w-ccmQkJiz6LD4JPTUW8aeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.244.0/22
217.147.160.0-217.147.165.255
217.147.169.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e9:40:72:4e:38:4a:a2:75:d0:92:e0:86:43:00:b8:ed:00:
ab:5f:99:1a:9b:01:8b:92:b7:a3:a2:09:6d:64:10:18:b2:0c:
bf:4c:40:a5:53:8f:25:b6:8c:92:23:f5:02:7f:00:8f:a8:8d:
85:01:32:c5:6c:8c:aa:d5:9b:b3:cb:9b:3f:5e:da:28:f5:a7:
61:a7:c3:4e:b8:5c:c5:89:66:ee:04:c5:ba:d8:32:f9:78:39:
df:c4:b8:32:4a:bd:00:f9:31:b4:75:a3:17:17:8f:e9:60:cd:
aa:8e:70:ea:ba:84:75:7d:5e:2e:05:e7:d0:b4:25:ac:87:07:
ec:af:ba:54:2b:57:f4:90:e0:ff:ee:b0:ed:23:e2:4b:3c:65:
34:8a:da:1c:83:66:65:f7:b5:a0:bc:18:a7:45:57:f3:58:bf:
36:d5:9d:a4:d2:00:d9:22:47:f6:69:2e:03:bc:7f:ec:d7:b5:
c4:69:fb:7f:3b:7a:02:2d:6e:1b:7d:ef:66:86:a5:2a:62:79:
e9:0f:c9:8b:51:f3:cd:de:31:59:2e:30:e8:63:fa:c0:ff:87:
d8:08:7d:62:c2:a2:92:48:1b:d4:0f:66:49:f7:08:e4:56:e9:
ba:06:bc:08:09:9d:d0:f7:63:f6:ab:38:72:a2:77:bf:d4:4d:
0f:3e:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:28 2025 by rpki-client