Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/dlhULa_o4hF10yPrQ_I-UzLSMvg.roa
File: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (raw, json)
Hash identifier: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=
Subject key identifier: 76:58:54:2D:AF:E8:E2:11:75:D3:23:EB:43:F2:3E:53:32:D2:32:F8
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019425FC418DE4EEFFA87D21CBACD5317F31
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/dlhULa_o4hF10yPrQ_I-UzLSMvg.roa
Signing time: Thu 02 Jan 2025 07:47:56 +0000
ROA not before: Thu 02 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209155
IP address blocks: 217.147.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:41:8d:e4:ee:ff:a8:7d:21:cb:ac:d5:31:7f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jan 2 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7658542dafe8e21175d323eb43f23e5332d232f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:cb:aa:78:7c:9a:cc:40:6d:f0:1e:f6:f2:
17:33:f1:ff:d1:15:78:4b:24:e9:5d:e0:c7:e2:86:
a0:cc:06:51:aa:33:10:c5:3f:2b:00:a6:11:5a:9c:
c6:1e:2c:ce:42:7a:42:30:37:c3:2c:ae:2a:9b:31:
eb:d9:d8:d8:be:8c:c5:85:be:93:6a:52:4c:d0:44:
b2:5b:67:7e:c1:f8:a4:83:93:97:e2:6b:ba:62:3a:
90:7c:ab:a2:36:89:8f:04:07:61:62:7b:d2:ae:bb:
71:84:0e:2c:b0:89:0f:47:2f:ed:a9:1f:1c:e9:ec:
d5:ed:d5:e0:b6:37:8a:05:86:08:66:2d:a6:c9:80:
14:fe:54:be:8f:6e:98:ce:59:fa:b6:b4:f4:f0:e4:
ba:5e:73:93:3c:32:f7:90:bb:d9:19:12:81:b6:a1:
d1:22:d3:8e:50:44:5f:cf:40:b3:f7:06:45:fc:4d:
b8:43:4a:0c:0f:af:33:16:05:c0:08:e5:6a:f6:b4:
e8:ff:92:77:77:50:3c:25:df:03:f7:06:f7:aa:62:
94:2d:58:2d:6d:6e:5f:71:9f:b7:a0:f1:52:01:21:
68:a8:38:bf:1e:72:35:a9:76:16:69:23:f7:f1:66:
e9:85:33:bf:5e:02:60:7d:97:91:38:10:f6:19:9c:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:54:2D:AF:E8:E2:11:75:D3:23:EB:43:F2:3E:53:32:D2:32:F8
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/dlhULa_o4hF10yPrQ_I-UzLSMvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.172.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6f:03:2a:09:bf:8e:4b:49:34:7d:78:36:87:a3:e2:8a:f7:
27:4e:af:8f:4e:01:fd:6f:49:d8:df:6e:b7:38:a0:c0:2d:3a:
dd:e6:8c:54:b4:7f:82:77:64:e5:3f:67:f7:be:ab:e6:ab:3c:
fa:4c:cf:ab:b3:86:a4:ca:c1:46:fe:1e:64:0a:4f:0a:92:46:
69:6e:ad:75:47:8a:7a:f3:f1:9d:3a:68:03:3e:1f:63:b2:7e:
f1:33:eb:97:4c:8d:05:b1:e0:1e:7f:ad:9b:7b:d1:93:8c:9a:
c2:16:73:b1:d4:f9:a1:4c:2d:6f:0d:ad:26:aa:6b:b6:26:4e:
da:9e:48:e6:95:e9:13:14:8f:b4:31:16:85:44:14:6d:6f:0f:
b6:be:71:ec:52:15:99:17:bd:4e:88:d4:74:92:45:6d:1e:39:
93:a2:9b:1c:4c:d4:39:7c:f6:e9:fb:55:b0:e1:d4:bb:b9:1a:
ed:f5:aa:09:45:cb:5a:c5:3c:b2:0f:58:3c:8d:22:73:5e:45:
67:4e:e1:d9:a7:59:e2:ae:96:6f:78:68:03:0e:9b:bb:f1:ce:
79:08:98:a9:73:ac:83:b4:a7:86:96:c0:65:8f:94:1e:bc:85:
7b:d2:3f:1e:85:67:15:da:83:b2:53:58:15:c5:e3:92:bb:e1:
c2:bb:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:53 2025 by rpki-client