Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/EH2EY47ofIR9KRx-7c_mn69vt4Y.roa
File: EH2EY47ofIR9KRx-7c_mn69vt4Y.roa (raw, json)
Hash identifier: qXZaVOd/KNhwf9MUlJdd71p5pv0hyWLtrMJhSnldAHk=
Subject key identifier: 10:7D:84:63:8E:E8:7C:84:7D:29:1C:7E:ED:CF:E6:9F:AF:6F:B7:86
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 03E2995C
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/EH2EY47ofIR9KRx-7c_mn69vt4Y.roa
Signing time: Sat 01 Jan 2022 03:59:20 +0000
ROA not before: Sat 01 Jan 2022 03:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198227
IP address blocks: 217.147.170.0/24 maxlen: 24
217.147.173.0/24 maxlen: 24
217.147.174.0/24 maxlen: 24
217.147.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65182044 (0x3e2995c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jan 1 03:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=107d84638ee87c847d291c7eedcfe69faf6fb786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:5d:37:b2:f0:9b:4a:88:39:27:28:f1:44:
b7:00:d9:f8:51:ae:3f:25:35:39:91:40:64:a3:f7:
e8:20:54:7d:e3:03:4b:88:42:4a:a3:3e:e9:a0:0f:
7a:1a:9f:ba:d2:e4:c5:88:c2:03:41:83:e1:37:7e:
d1:50:61:e5:d6:f9:31:03:4f:70:ba:bf:38:42:f1:
52:b3:04:b1:8c:25:45:54:d5:a3:cd:8f:fa:8b:27:
48:8d:b5:ee:96:d6:fa:2a:93:58:51:ee:fb:22:0b:
20:b3:a1:fc:46:cc:55:ee:f8:d1:46:b1:2f:c2:ed:
4a:e9:05:ee:ae:18:67:3d:75:d5:9f:36:5e:f1:29:
3e:36:ba:59:87:78:d6:c8:b9:e2:ac:58:0b:3b:7a:
dc:6e:c5:47:b3:22:ee:42:a2:f3:07:c4:b0:46:38:
9e:a0:57:63:ed:31:01:f0:60:4f:6e:37:90:5f:f4:
6b:0e:e0:f9:fa:58:a4:1f:81:a2:f4:b9:cd:19:f4:
f9:77:b6:e1:16:dc:11:b1:f8:da:e5:cb:ba:05:05:
f2:2e:3d:17:6e:eb:c7:90:68:82:5b:27:0e:10:8d:
55:fe:de:09:51:64:ef:19:ca:02:cb:85:31:e2:35:
28:91:50:e3:ac:88:7b:db:15:f5:53:46:82:9c:97:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:84:63:8E:E8:7C:84:7D:29:1C:7E:ED:CF:E6:9F:AF:6F:B7:86
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/EH2EY47ofIR9KRx-7c_mn69vt4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.170.0/24
217.147.173.0-217.147.175.255
Signature Algorithm: sha256WithRSAEncryption
50:91:2e:72:e9:d9:3b:98:8e:13:47:fe:f6:1d:74:1a:b3:b5:
e8:69:d3:15:6f:7d:e0:6c:68:b0:44:c9:30:48:7f:60:82:0d:
64:f3:ee:76:53:54:74:e7:f0:24:76:96:39:28:b9:b8:ee:8c:
36:94:0d:11:90:db:73:a8:ec:2b:a0:39:64:58:0c:6d:c8:a6:
7e:cd:41:c0:20:d5:83:18:c8:0a:29:87:cf:ab:fb:a0:e7:6d:
d5:cd:3a:b9:cb:25:2e:5c:84:b4:c8:20:63:e0:10:50:60:fa:
36:23:a8:61:26:d1:68:37:15:50:37:d0:f8:d5:fd:a2:1a:8e:
af:41:0f:20:0c:dc:53:1a:e0:33:b0:47:ff:0c:c2:bf:83:95:
7e:07:71:d9:59:66:54:92:e6:86:06:d2:18:c0:6a:68:8f:8c:
89:04:46:f0:19:0e:b4:5f:77:f3:21:ef:37:52:77:65:51:45:
8b:55:3e:ec:46:0c:fa:0d:54:90:82:05:8f:3b:71:94:02:0d:
49:cd:1f:d3:7c:37:59:27:c8:77:25:33:63:c6:64:0d:57:28:
42:29:96:fb:10:18:8f:39:cf:16:ee:58:58:6a:ee:d9:e3:07:
8c:07:0d:46:3f:46:a2:8f:f8:a3:db:94:52:99:a8:dd:c4:56:
ce:3a:d9:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEA+KZXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MmY4YWIyYmEyNDg3OWU0NWM0NDU0ODZmY2ViMjFhZjQ2NjU2ZDVhMB4XDTIyMDEw
MTAzNTkyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTA3ZDg0NjM4ZWU4
N2M4NDdkMjkxYzdlZWRjZmU2OWZhZjZmYjc4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOwXTey8JtKiDknKPFEtwDZ+FGuPyU1OZFAZKP36CBUfeMD
S4hCSqM+6aAPehqfutLkxYjCA0GD4Td+0VBh5db5MQNPcLq/OELxUrMEsYwlRVTV
o82P+osnSI217pbW+iqTWFHu+yILILOh/EbMVe740UaxL8LtSukF7q4YZz111Z82
XvEpPja6WYd41si54qxYCzt63G7FR7Mi7kKi8wfEsEY4nqBXY+0xAfBgT243kF/0
aw7g+fpYpB+BovS5zRn0+Xe24RbcEbH42uXLugUF8i49F27rx5BoglsnDhCNVf7e
CVFk7xnKAsuFMeI1KJFQ46yIe9sV9VNGgpyXtRECAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQQfYRjjuh8hH0pHH7tz+afr2+3hjAfBgNVHSMEGDAWgBRC+Ksrokh55FxE
VIb86yGvRmVtWjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1F2aXJLNkpJZWVSY1JGU0dfT3NocjBabGJWby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvYzE3YzVkLTc1NDMtNDQwZi04NzhmLTE3NjlmZWY2YmU5Ni8x
L0VIMkVZNDdvZklSOUtSeC03Y19tbjY5dnQ0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
YzE3YzVkLTc1NDMtNDQwZi04NzhmLTE3NjlmZWY2YmU5Ni8xL1F2aXJLNkpJZWVS
Y1JGU0dfT3NocjBabGJWby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEANmTqjAMAwQA2ZOtAwQE2ZOgMA0G
CSqGSIb3DQEBCwUAA4IBAQBQkS5y6dk7mI4TR/72HXQas7XoadMVb33gbGiwRMkw
SH9ggg1k8+52U1R05/AkdpY5KLm47ow2lA0RkNtzqOwroDlkWAxtyKZ+zUHAINWD
GMgKKYfPq/ug523VzTq5yyUuXIS0yCBj4BBQYPo2I6hhJtFoNxVQN9D41f2iGo6v
QQ8gDNxTGuAzsEf/DMK/g5V+B3HZWWZUkuaGBtIYwGpoj4yJBEbwGQ60X3fzIe83
UndlUUWLVT7sRgz6DVSQggWPO3GUAg1JzR/TfDdZJ8h3JTNjxmQNVyhCKZb7EBiP
Oc8W7lhYau7Z4weMBw1GP0aij/ij25RSmajdxFbOOtmB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:32 2025 by rpki-client