Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/TlIUjHU-I8WGIJpGLqKiZT8dvcs.roa
File: TlIUjHU-I8WGIJpGLqKiZT8dvcs.roa (raw, json)
Hash identifier: +arJ3XdLIQYmHMzqvu2YaXK2sdBCeVkfnFK01ZMPFxU=
Subject key identifier: 4E:52:14:8C:75:3E:23:C5:86:20:9A:46:2E:A2:A2:65:3F:1D:BD:CB
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 018DC38B97E1DD5F328C8827CEB0BC61EBCA
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/TlIUjHU-I8WGIJpGLqKiZT8dvcs.roa
Signing time: Mon 19 Feb 2024 22:45:21 +0000
ROA not before: Mon 19 Feb 2024 22:45:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 217.147.166.0/24 maxlen: 24
217.147.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:8b:97:e1:dd:5f:32:8c:88:27:ce:b0:bc:61:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Feb 19 22:45:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e52148c753e23c586209a462ea2a2653f1dbdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:6d:ac:8b:fe:17:56:df:a2:57:8b:10:fb:
ab:0a:a1:21:d0:08:65:6e:5c:a6:2a:6e:44:87:e7:
ba:c0:76:13:33:cb:ad:a8:55:cc:cc:52:7e:2b:53:
ae:03:73:5a:64:27:96:d3:4c:45:87:71:f1:1d:29:
e0:5d:71:b2:3f:43:cb:2c:79:d2:29:ad:51:eb:e6:
f0:4e:92:bd:0d:5b:24:9a:f0:a5:83:75:75:80:9b:
e2:6a:12:92:ff:e8:ec:d5:46:0f:2c:e2:ad:c2:78:
35:c8:c2:98:b6:6b:5b:11:52:ad:47:d4:9c:84:7e:
9f:f3:ac:81:c3:b8:bf:3e:8a:f0:f0:84:4f:01:ed:
ce:b3:7a:95:d3:df:b3:d7:b3:11:a5:2d:90:24:4b:
e1:b5:dc:05:63:ab:8c:01:1a:db:d4:56:68:c4:34:
f4:6e:b6:c2:75:ab:d8:4a:ea:35:7d:ae:67:c0:14:
59:2a:5c:6e:30:05:31:61:b9:dc:c6:f6:30:fc:24:
55:5e:46:1a:e4:3c:61:93:82:f4:c5:a4:9e:c3:22:
a3:04:7e:fb:9f:4a:c0:17:79:ba:84:2a:ad:7a:7c:
31:29:00:d9:4e:b7:8f:cb:4d:68:ca:c4:89:d4:d6:
41:f2:b8:04:1b:b3:27:b9:11:9e:80:3f:d9:e3:b7:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:14:8C:75:3E:23:C5:86:20:9A:46:2E:A2:A2:65:3F:1D:BD:CB
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/TlIUjHU-I8WGIJpGLqKiZT8dvcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:e9:97:a9:4a:88:a1:0d:a7:a1:bb:e2:1f:bd:3a:c7:1c:f4:
7c:ff:81:7e:f0:ee:e4:61:0e:e5:bf:82:69:28:b8:c3:f2:5b:
8f:3b:39:b5:b3:93:38:48:26:f1:48:20:a4:bc:6b:49:e7:64:
01:04:2b:58:35:70:78:fb:48:ae:4d:e0:95:a6:02:f3:43:f5:
84:6b:ed:d1:e4:7a:f9:38:12:db:66:67:2e:dd:8a:f0:1d:5c:
67:a6:52:ba:be:9c:40:c0:5d:95:69:1e:af:39:5b:4b:97:67:
c1:bb:1b:59:5d:91:83:4b:ee:d0:fe:df:8b:1c:ac:ff:fc:3c:
91:f0:23:25:67:48:42:56:b7:b3:2b:61:be:b1:ef:dd:a8:03:
06:03:52:4e:db:45:8a:e9:0f:f8:2f:f8:d0:9a:ed:7c:1c:3f:
62:5f:5a:69:ca:61:e2:1c:a2:f2:79:a5:25:5e:3b:aa:4a:ea:
81:5e:aa:79:0f:55:2b:3f:ff:1c:e4:54:0d:95:24:3f:2b:1d:
35:81:53:65:71:91:54:12:91:f7:7d:66:c9:1d:f9:5c:05:5e:
2f:82:b4:f6:81:62:29:73:0f:0c:f7:96:67:f0:a5:12:51:1f:
a2:ed:d9:1f:33:fb:13:6b:54:f3:e0:77:d5:bc:20:d8:9b:b8:
10:85:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:49 2025 by rpki-client