Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/EgxlDyXVpVfUMe9CyXz4UaUeYrg.roa
File: EgxlDyXVpVfUMe9CyXz4UaUeYrg.roa (raw, json)
Hash identifier: dljtW6TBFGPGtAtUQvPVjui3xZ0ZFWmQquHiPCFKLk0=
Subject key identifier: 12:0C:65:0F:25:D5:A5:57:D4:31:EF:42:C9:7C:F8:51:A5:1E:62:B8
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 0194F574D69B02C7F44BFFB83A87AC662692
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/EgxlDyXVpVfUMe9CyXz4UaUeYrg.roa
Signing time: Tue 11 Feb 2025 14:41:02 +0000
ROA not before: Tue 11 Feb 2025 14:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207108
IP address blocks: 217.147.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:74:d6:9b:02:c7:f4:4b:ff:b8:3a:87:ac:66:26:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Feb 11 14:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=120c650f25d5a557d431ef42c97cf851a51e62b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:8f:09:a7:ef:ec:61:5a:70:c0:d3:1e:0c:
10:39:fa:84:42:03:cb:ec:70:2c:07:ce:d7:c3:56:
8d:68:14:17:b3:d3:9b:b2:c4:4b:18:ed:de:b2:af:
99:bf:11:6e:a9:fe:b9:8d:7c:35:d6:13:32:76:3b:
4c:33:f5:04:d2:97:4b:4b:37:cd:c2:f3:97:af:7d:
cb:a8:3d:38:a3:0b:c7:f1:3c:62:fb:29:21:6a:6d:
51:6d:f6:56:34:70:58:3c:99:9c:ec:10:fb:46:15:
aa:d3:0b:f1:9d:7b:c8:67:c3:96:44:4a:d7:8d:bc:
ed:96:6b:30:84:9b:aa:80:14:57:2f:cf:97:a3:b9:
92:39:6d:7d:c8:dc:1e:32:e9:95:b4:cf:6c:a7:41:
a3:f2:b8:ce:6d:58:1a:a4:11:46:41:3c:7d:72:33:
48:a3:6e:50:15:56:42:7c:96:68:7e:b9:17:46:56:
27:97:55:5e:a4:0d:33:8f:01:6b:35:1e:ff:7b:9f:
f5:8f:25:68:33:ae:8e:55:9b:28:33:2c:a5:e4:59:
fb:b4:71:53:ae:eb:ba:77:d5:92:f8:60:83:b5:a6:
d2:12:d6:36:39:45:99:a6:27:ab:5b:23:e9:60:73:
e9:38:1d:54:eb:de:de:b6:61:81:1f:6f:bb:3f:cb:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:65:0F:25:D5:A5:57:D4:31:EF:42:C9:7C:F8:51:A5:1E:62:B8
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/EgxlDyXVpVfUMe9CyXz4UaUeYrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.165.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8d:d5:e6:72:73:a7:d8:db:d7:cf:01:f2:ac:a9:20:37:4c:
dd:f2:d2:dd:54:7f:3d:44:0c:a4:32:2e:61:09:10:b7:71:f1:
91:16:37:d6:e4:ec:05:f8:8c:34:60:57:b0:6c:59:bf:3e:2a:
e3:d2:90:05:ce:1b:1b:25:d9:13:ae:54:c2:70:3c:63:37:f7:
74:e0:6a:6d:73:dc:c2:c8:e7:6f:b2:4d:a1:d4:c6:b8:84:0c:
1d:c0:7d:ce:f3:ea:be:2f:8d:6e:80:81:c4:b3:bf:83:ae:f1:
87:07:51:5a:c5:c2:5b:92:d1:7d:0e:1d:5e:34:85:83:04:90:
78:77:90:25:ac:55:19:b3:9e:d9:3b:38:6c:e1:4a:f1:85:15:
5e:16:77:7b:cb:fa:4a:bc:3e:7a:1e:14:2b:ff:be:2c:da:7c:
b1:54:d6:e1:83:09:ef:e7:79:46:f6:3a:3a:33:ed:8c:79:87:
b2:0b:2a:8a:1d:a2:1f:fa:4d:c2:0a:f1:b8:ed:26:79:67:58:
cf:94:c5:67:39:77:d3:b7:06:8f:9e:e6:f2:c0:52:a8:c6:4f:
51:aa:e9:73:72:bb:e7:13:ac:70:94:41:fb:55:1b:b9:f7:6a:
6e:0f:a6:46:d8:57:e9:90:b6:27:fd:6c:ab:72:61:0f:71:e4:
61:70:84:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT1dNabAsf0S/+4OoesZiaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2
NTZkNWEwHhcNMjUwMjExMTQ0MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjBjNjUwZjI1ZDVhNTU3ZDQzMWVmNDJjOTdjZjg1MWE1MWU2MmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtWPCafv7GFacMDTHgwQOfqEQgPL
7HAsB87Xw1aNaBQXs9ObssRLGO3esq+ZvxFuqf65jXw11hMydjtMM/UE0pdLSzfN
wvOXr33LqD04owvH8Txi+ykham1RbfZWNHBYPJmc7BD7RhWq0wvxnXvIZ8OWRErX
jbztlmswhJuqgBRXL8+Xo7mSOW19yNweMumVtM9sp0Gj8rjObVgapBFGQTx9cjNI
o25QFVZCfJZofrkXRlYnl1VepA0zjwFrNR7/e5/1jyVoM66OVZsoMyyl5Fn7tHFT
ruu6d9WS+GCDtabSEtY2OUWZpierWyPpYHPpOB1U697etmGBH2+7P8tPzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIMZQ8l1aVX1DHvQsl8+FGlHmK4MB8GA1UdIwQY
MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt
MTc2OWZlZjZiZTk2LzEvRWd4bER5WFZwVmZVTWU5Q3lYejRVYVVlWXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2
LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOlMA0G
CSqGSIb3DQEBCwUAA4IBAQBpjdXmcnOn2NvXzwHyrKkgN0zd8tLdVH89RAykMi5h
CRC3cfGRFjfW5OwF+Iw0YFewbFm/Pirj0pAFzhsbJdkTrlTCcDxjN/d04Gptc9zC
yOdvsk2h1Ma4hAwdwH3O8+q+L41ugIHEs7+DrvGHB1FaxcJbktF9Dh1eNIWDBJB4
d5AlrFUZs57ZOzhs4UrxhRVeFnd7y/pKvD56HhQr/74s2nyxVNbhgwnv53lG9jo6
M+2MeYeyCyqKHaIf+k3CCvG47SZ5Z1jPlMVnOXfTtwaPnubywFKoxk9Rqulzcrvn
E6xwlEH7VRu592puD6ZG2FfpkLYn/WyrcmEPceRhcITh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:22 2025 by rpki-client