Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/_sFgsUTyG_kRGy-SrBVz_o3I4mk.roa
File: _sFgsUTyG_kRGy-SrBVz_o3I4mk.roa (raw, json)
Hash identifier: msOYLqnmbILMpcfrVF8vinc40fe/B5wrytAAPaBER5c=
Subject key identifier: FE:C1:60:B1:44:F2:1B:F9:11:1B:2F:92:AC:15:73:FE:8D:C8:E2:69
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019425FC3EE901AFC6D92C28AD70FA091AD5
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/_sFgsUTyG_kRGy-SrBVz_o3I4mk.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 217.147.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3e:e9:01:af:c6:d9:2c:28:ad:70:fa:09:1a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fec160b144f21bf9111b2f92ac1573fe8dc8e269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:d6:fe:9e:d8:cc:bb:7b:f0:9a:65:d9:9f:
a6:78:85:1b:79:a6:77:cb:45:8e:31:72:62:16:fc:
97:b6:aa:5a:4f:c9:ad:2c:89:90:88:d4:c6:10:36:
d6:ad:6c:a1:a6:45:12:50:0a:56:ce:8b:b6:57:51:
94:21:97:0d:0e:93:ec:24:e0:0b:6f:db:73:3e:8c:
b0:f7:33:4d:af:97:87:eb:c6:84:ef:56:9e:96:e5:
f5:ee:43:6b:d1:83:15:52:bb:99:fc:9a:f2:b3:18:
1b:9f:e0:25:5b:5f:87:b0:78:75:45:ff:06:7b:d4:
77:46:2c:62:9f:89:a4:57:17:4b:10:cd:80:36:67:
0a:67:b1:58:22:f0:f3:e3:fc:bf:50:a1:80:98:2c:
11:27:c9:84:5f:84:55:a7:16:73:af:27:18:87:d4:
ea:a1:c8:73:e0:9b:fc:e1:80:bc:da:ad:d6:53:ff:
b6:d7:6a:a7:80:ca:2c:35:e6:c3:a5:fb:43:2d:4e:
08:83:91:50:9d:9a:a5:57:c9:fc:9e:54:fb:d6:22:
50:dd:d5:5c:e5:d7:2c:b2:2c:99:c1:5d:9c:4c:6b:
0a:9f:fc:7d:a1:ab:60:98:1b:0a:b6:3c:16:73:c6:
6f:f6:33:cc:72:e9:d4:86:e1:04:54:36:77:64:44:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:60:B1:44:F2:1B:F9:11:1B:2F:92:AC:15:73:FE:8D:C8:E2:69
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/_sFgsUTyG_kRGy-SrBVz_o3I4mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:05:23:80:b9:83:f2:71:a5:04:e3:ba:77:67:3f:4d:a6:50:
94:d0:25:6f:37:75:24:6e:02:e9:c6:c2:6b:bb:2d:c9:83:7e:
97:7d:25:73:79:fa:a4:64:24:25:63:60:84:b9:6e:2c:69:21:
b9:7a:e0:c0:96:3a:1f:7a:ba:ad:cf:6d:ce:94:77:8f:50:ca:
80:89:19:63:fa:26:63:10:f1:b4:7e:a0:f1:d1:ba:dd:69:20:
de:20:3a:17:83:a3:c7:15:9e:a6:66:e3:79:94:d4:34:12:dd:
b9:3f:dd:41:d6:76:91:12:3c:b5:10:56:fc:7e:5a:19:20:f5:
6f:56:4a:00:71:84:8c:a3:8f:24:00:ca:34:6c:82:3e:6f:d8:
c7:ae:f6:f0:11:5e:aa:1a:f6:08:c0:ad:c8:19:86:8d:bc:0c:
c8:2e:29:2e:73:93:85:68:87:4e:79:ec:87:dd:c0:a5:f3:31:
d5:6b:7e:52:ad:ba:48:76:6d:c1:de:6b:10:4d:39:02:f6:f8:
b7:62:e8:26:91:bc:a2:76:93:e0:1b:34:9c:c2:c7:7c:96:d2:
b2:e7:3c:06:a6:53:22:52:49:97:58:c6:a3:5b:76:6d:ed:b8:
fa:13:51:fd:43:d9:14:81:67:1a:82:a2:cf:12:5a:b8:e5:c6:
66:8f:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:24 2025 by rpki-client