Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/K6r9dEA0flUoBfKs2fGl4IHT8s8.roa
File: K6r9dEA0flUoBfKs2fGl4IHT8s8.roa (raw, json)
Hash identifier: XOyLRhh4Ohic+yBW/Trm1Z6K/yxFDTVRsLEBz+wLBzA=
Subject key identifier: 2B:AA:FD:74:40:34:7E:55:28:05:F2:AC:D9:F1:A5:E0:81:D3:F2:CF
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 0183EAEA11D348EDBD4F5E6FB0A0375AC358
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/K6r9dEA0flUoBfKs2fGl4IHT8s8.roa
Signing time: Tue 18 Oct 2022 11:45:52 +0000
ROA not before: Tue 18 Oct 2022 11:45:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206638
IP address blocks: 217.147.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:ea:11:d3:48:ed:bd:4f:5e:6f:b0:a0:37:5a:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Oct 18 11:45:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2baafd7440347e552805f2acd9f1a5e081d3f2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:25:ec:41:e3:63:33:97:1f:e2:fa:1a:c8:
3f:a2:30:d0:5c:be:36:fe:e3:6e:5e:b4:3b:4d:d5:
0a:4b:5a:ac:a6:dd:31:bd:6d:43:c1:ca:15:9b:26:
52:90:a2:02:0f:9d:87:eb:22:25:54:c5:d6:6f:81:
84:5f:09:80:56:ea:ff:fe:1a:3b:fa:56:be:35:a5:
67:d0:e7:e9:39:56:07:6e:eb:fd:8f:50:55:a7:f0:
54:84:0a:a7:0b:40:39:ea:36:6c:95:20:9c:b9:0e:
60:49:ed:fd:87:3d:93:60:e6:48:5f:0c:c4:a1:95:
60:78:f8:56:31:d1:e7:c0:9c:f6:c7:ec:92:c8:5d:
ad:1c:06:96:77:6d:ca:ef:e9:96:de:55:a0:57:b2:
94:48:0a:c3:b5:25:69:8f:2a:cc:eb:0d:dd:22:78:
62:e9:65:81:df:04:38:79:30:1e:f4:da:f1:4b:3e:
1c:61:04:58:8d:27:fb:b7:e7:1e:cc:cb:f1:8b:5e:
0f:23:f2:f2:de:49:75:4c:66:f8:51:6c:de:f6:e9:
e8:9a:97:34:34:96:22:f8:3a:bb:68:b4:8b:8c:bc:
b0:1e:b5:4d:5d:02:af:45:f2:6f:a3:80:ee:7b:60:
bf:a8:9c:89:a9:4d:36:af:ae:7c:6f:e8:7f:50:b5:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:FD:74:40:34:7E:55:28:05:F2:AC:D9:F1:A5:E0:81:D3:F2:CF
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/K6r9dEA0flUoBfKs2fGl4IHT8s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2e:0e:ce:fb:fc:13:57:86:b9:a3:71:ab:4f:65:33:1d:54:
b8:f0:ef:3a:9e:54:f6:c7:c6:83:8a:78:bc:14:1a:81:cd:86:
bc:df:d2:89:ce:aa:44:9a:9a:e6:eb:8e:f4:5c:0a:37:d1:f6:
95:20:7b:21:01:dd:44:de:d3:5b:aa:cb:d2:d4:97:26:29:b3:
66:89:56:db:34:f7:dd:35:c5:6b:14:a7:f5:41:2f:c0:49:8d:
50:5f:4f:7a:c7:96:64:dc:67:e7:e2:08:94:ad:9f:72:e5:be:
53:62:2c:04:ad:ba:bc:6d:c6:63:b2:e6:7d:76:f6:04:ce:8e:
a3:e3:08:d4:dd:5b:a7:df:05:f0:4b:9b:95:88:f5:af:bc:f6:
07:43:4e:14:4b:ba:eb:6a:54:92:fd:80:fb:37:b6:e1:2c:aa:
bc:a2:30:2d:e6:7a:45:c0:80:19:61:e2:0d:db:b5:cb:49:3f:
bf:93:f8:5b:c1:e5:a4:d5:16:6e:ad:8c:8a:2f:29:72:54:23:
3d:c4:3e:36:9c:d7:08:27:89:98:ec:fd:17:ca:33:6b:cf:f2:
7a:1c:bd:98:98:2a:20:e7:60:ce:48:87:33:26:c6:a1:01:71:
f7:63:ca:c0:7a:b7:29:5d:18:7a:8d:ea:39:02:f3:ea:b7:ee:
fc:ae:fc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:51 2025 by rpki-client