Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/gq-eQa57hyW8T_h21QQ1OXyJfcg.roa
File: gq-eQa57hyW8T_h21QQ1OXyJfcg.roa (raw, json)
Hash identifier: odIKUbLX7JMSdwh7WR+G6RYEJC32tOrtMPLmgspKTP0=
Subject key identifier: 82:AF:9E:41:AE:7B:87:25:BC:4F:F8:76:D5:04:35:39:7C:89:7D:C8
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019425FC3F481100A998D8C8F5F4C946AAF8
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/gq-eQa57hyW8T_h21QQ1OXyJfcg.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 217.147.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3f:48:11:00:a9:98:d8:c8:f5:f4:c9:46:aa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82af9e41ae7b8725bc4ff876d50435397c897dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:28:ca:ab:7d:d1:1d:78:82:94:a3:a3:8a:
f7:52:82:ad:1e:9b:af:b5:b4:70:41:67:38:b3:33:
56:dc:53:64:97:69:15:58:01:3a:9d:7f:24:21:a2:
54:17:71:f7:ae:fc:1e:81:ca:20:e8:0f:af:61:98:
66:1b:7c:8f:ac:88:20:8e:eb:19:0e:ea:00:87:fe:
48:13:1a:db:b8:89:93:e2:d0:0d:10:01:77:2c:84:
d7:2b:84:9e:be:ad:61:bd:08:a7:ce:49:97:04:4f:
0f:4c:68:4f:8c:a7:2c:51:6b:58:9e:fb:d9:45:35:
3e:d3:a9:19:3f:43:c2:4e:cd:13:01:c1:00:36:b8:
80:cb:2f:15:b5:89:c8:6a:29:c4:50:ae:76:44:00:
de:b8:b3:8c:ed:05:42:c8:30:03:ba:cb:38:9e:58:
0b:40:93:37:a5:54:f7:26:77:c9:4a:97:f3:86:e4:
d0:ea:c9:f9:0e:fb:df:01:02:63:3e:f6:40:21:e8:
ea:03:b4:a9:dd:bc:be:75:0f:20:4f:d4:12:e9:af:
9b:7f:4b:30:f8:7f:ba:ec:d1:26:97:5c:c6:8b:b1:
1e:7c:5c:29:eb:75:af:ce:7d:a0:15:15:90:e9:d0:
c4:01:35:b2:8f:5d:9f:77:fe:a5:79:d1:de:99:e1:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AF:9E:41:AE:7B:87:25:BC:4F:F8:76:D5:04:35:39:7C:89:7D:C8
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/gq-eQa57hyW8T_h21QQ1OXyJfcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:24:af:b6:5d:f2:fa:48:7f:25:4c:cd:7b:2f:66:51:df:d2:
47:81:66:d0:7e:a9:c5:3e:11:e9:97:3c:80:76:b6:8f:5b:ed:
e5:65:11:66:11:6c:d0:af:ec:75:c4:ab:07:b2:85:9c:4d:b2:
51:51:68:b6:fc:99:78:8e:7f:f4:cb:da:55:14:fb:63:d3:c4:
1a:d1:3b:27:d2:02:9c:e9:1b:58:4f:58:78:54:71:f4:7e:c3:
b9:a3:c3:f5:93:b6:7b:de:ab:60:56:1b:ab:82:fa:81:b9:41:
6f:01:a3:e1:88:52:f8:8b:18:d2:34:3a:df:ab:fe:5f:87:de:
77:91:93:a2:b0:30:98:1d:e2:2d:0e:e6:d6:34:d0:8a:83:c3:
f4:b5:d0:49:72:2f:56:b1:c6:10:cf:80:9a:c5:20:8e:6f:7e:
40:4c:fb:48:51:45:49:e5:55:c7:32:61:5c:9f:6a:fc:31:37:
b5:82:3c:73:8c:d0:ea:03:92:69:2d:58:04:6f:c6:da:a6:5d:
84:91:35:cb:c5:70:76:6d:c7:8b:6f:68:f0:38:45:1f:52:ff:
a7:94:97:10:71:2b:ea:ac:f5:c4:1d:4a:73:e7:b7:e9:9c:8c:
fa:72:ec:52:e1:11:49:bd:4e:db:29:0b:89:9b:25:90:00:cc:
2b:ad:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:32 2025 by rpki-client