Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/fHo2pcaaIcweymRP9VZzAj3Yeqs.roa
File: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (raw, json)
Hash identifier: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=
Subject key identifier: 7C:7A:36:A5:C6:9A:21:CC:1E:CA:64:4F:F5:56:73:02:3D:D8:7A:AB
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019425FC41F133C5E40B974C71A20AF986F9
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/fHo2pcaaIcweymRP9VZzAj3Yeqs.roa
Signing time: Thu 02 Jan 2025 07:47:56 +0000
ROA not before: Thu 02 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214083
IP address blocks: 217.147.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:41:f1:33:c5:e4:0b:97:4c:71:a2:0a:f9:86:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jan 2 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c7a36a5c69a21cc1eca644ff55673023dd87aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:22:75:dd:d5:4f:53:e0:36:3c:fb:37:60:
04:76:e1:d0:d3:12:67:ca:51:c4:c4:77:19:46:31:
6c:f9:2f:c4:58:13:2e:e5:73:4c:f3:d0:c4:31:24:
4c:d5:67:11:49:ad:ac:1a:80:43:51:e8:10:19:5f:
95:e7:9b:89:9b:d8:93:02:54:df:f3:6d:62:2f:cd:
29:c8:da:d1:15:4b:d2:39:72:11:5b:89:9d:e6:aa:
56:5d:9e:11:26:1d:1f:15:10:b8:33:6a:be:57:ec:
b0:f7:7d:ca:3e:41:0f:db:51:c2:a0:12:bc:b3:92:
84:f1:99:67:a8:80:de:b2:45:ab:59:07:11:69:03:
57:74:c7:9a:0f:b7:c1:3c:62:b2:61:f4:8a:97:b0:
58:e9:34:0b:63:08:c5:b2:9e:38:cc:45:29:5e:a1:
cb:3d:fc:4d:13:9d:95:1a:9e:29:37:d5:39:30:2c:
82:6b:21:88:a9:26:be:4c:11:39:3d:1f:ff:f2:7e:
ec:e8:05:0b:db:c5:50:a3:c1:fb:79:5f:9d:d6:22:
2f:3a:6d:36:b8:48:15:44:a5:5c:0d:e5:ca:e4:38:
2c:8f:17:fc:ea:a1:a0:99:b6:75:ae:19:37:ba:38:
da:bb:87:77:b2:30:16:60:ee:a4:d9:f4:51:3d:44:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7A:36:A5:C6:9A:21:CC:1E:CA:64:4F:F5:56:73:02:3D:D8:7A:AB
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/fHo2pcaaIcweymRP9VZzAj3Yeqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.168.0/24
Signature Algorithm: sha256WithRSAEncryption
84:27:b9:2b:84:e0:44:90:ea:a4:72:f1:53:c1:94:b9:b8:dd:
ad:68:51:fa:13:50:44:3b:bd:a9:ae:6a:7d:00:49:b3:35:2b:
34:27:e5:a2:a2:a0:e5:17:28:6c:d5:bf:99:7e:29:8f:43:49:
23:29:90:3f:49:5a:5a:b1:98:d2:a1:56:af:a4:7d:47:02:dc:
47:58:c0:4d:a4:82:e2:68:89:fc:ad:ef:f4:72:ec:be:64:ac:
fc:1a:74:4e:2f:28:69:7b:92:77:34:4f:34:47:87:58:cb:d8:
70:72:98:45:ef:9e:8d:5e:c2:bd:8a:e2:13:d9:3b:7d:12:04:
bb:90:af:b7:f7:59:56:a8:9b:ec:39:09:57:c6:4c:2c:56:9e:
0a:7f:61:69:37:a7:5e:cd:98:f4:00:32:42:7e:ff:c1:64:87:
b6:11:cb:f0:c7:3e:11:39:e3:44:85:c8:f8:a4:81:e3:9a:cb:
ec:8f:60:01:de:2e:ad:c0:96:ba:96:59:6d:f6:ad:aa:4f:63:
61:92:12:39:3f:89:35:ce:9d:62:85:9c:d9:33:bd:05:bc:b8:
02:56:63:dd:09:6d:d6:fc:98:8b:51:6b:29:c0:28:2a:4b:d8:
f6:1e:1f:1d:47:14:3a:9f:b8:62:54:97:80:c7:2e:80:61:22:
7a:52:87:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:56 2025 by rpki-client