Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/xNRwkNylbCvOGEdcMKsMdXLZZ0c.roa
File: xNRwkNylbCvOGEdcMKsMdXLZZ0c.roa (raw, json)
Hash identifier: jj4C6OsfMtE155HzM7gXx+3Tvu/3QbJfFF0mLhS+hAU=
Subject key identifier: C4:D4:70:90:DC:A5:6C:2B:CE:18:47:5C:30:AB:0C:75:72:D9:67:47
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 01856BE5B265B9522981CEA1EA022148CC74
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/xNRwkNylbCvOGEdcMKsMdXLZZ0c.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21379
IP address blocks: 217.147.160.0/24 maxlen: 24
217.147.161.0/24 maxlen: 24
217.147.162.0/24 maxlen: 24
217.147.163.0/24 maxlen: 24
217.147.164.0/24 maxlen: 24
217.147.165.0/24 maxlen: 24
217.147.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b2:65:b9:52:29:81:ce:a1:ea:02:21:48:cc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4d47090dca56c2bce18475c30ab0c7572d96747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:d9:13:8d:47:27:fa:20:0c:cd:08:12:42:
99:16:00:87:aa:cb:de:f8:bb:1c:d8:70:77:61:70:
cf:c2:bc:23:a1:be:6c:b5:98:75:ee:9e:fa:f2:79:
40:69:80:a9:08:94:a9:55:e7:ab:13:18:90:f0:5a:
ba:0b:60:7b:2d:5e:d1:a1:99:8b:b7:98:cf:7f:c3:
53:58:b3:60:73:d2:65:ce:2e:a6:f9:7f:9b:f4:36:
fb:b8:db:57:19:92:32:bd:ad:7e:ad:49:dd:19:57:
60:b7:fe:69:e0:f4:65:be:f7:36:73:80:68:3c:60:
70:9c:2b:0f:ff:3e:f0:fd:6c:e2:91:b9:fc:7c:bc:
e3:db:21:2e:f2:39:c7:55:e4:40:f3:72:83:6b:cc:
00:c4:18:26:4c:30:6b:a7:fe:e4:d3:83:f7:72:d9:
b3:c1:22:35:84:44:7e:ee:81:b5:56:e4:1d:62:02:
05:8c:de:6f:fa:5c:17:70:3f:15:13:09:fd:cf:b5:
b0:e6:49:43:cd:95:5e:f5:ff:42:48:ba:f6:93:00:
13:36:95:82:87:ef:6d:7e:1a:75:74:22:58:9d:bd:
8e:2a:d3:80:90:4d:d8:54:05:43:df:98:fe:c1:d4:
3d:59:00:00:e3:21:b6:3c:15:7c:ce:b4:8f:bd:51:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:70:90:DC:A5:6C:2B:CE:18:47:5C:30:AB:0C:75:72:D9:67:47
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/xNRwkNylbCvOGEdcMKsMdXLZZ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.160.0-217.147.165.255
217.147.169.0/24
Signature Algorithm: sha256WithRSAEncryption
78:94:da:e8:0f:15:f3:82:ff:c0:62:a9:6f:99:b2:42:07:7d:
7b:14:e8:bb:7c:6b:71:a3:d6:5c:f4:53:c7:f4:d6:e7:cc:9f:
16:4d:f2:ff:4b:05:4e:31:90:58:43:5b:97:d7:97:ef:9a:68:
c1:2d:04:9b:e5:b9:8f:bd:f8:c5:fb:ee:7d:61:df:40:70:59:
02:ba:fb:d4:11:9b:9b:27:a4:fd:39:67:91:6b:48:ed:78:bc:
24:7b:53:94:4e:bb:f8:9b:7e:3e:4f:3b:e3:6d:5c:b2:d4:26:
95:7d:e9:95:95:03:ce:f1:dd:54:e3:eb:24:49:ac:c4:91:6e:
6f:20:d4:66:09:c2:2d:20:48:59:3c:1d:08:b1:cc:a6:12:ac:
86:aa:6a:0b:21:10:a5:b9:ca:51:a8:56:0d:c1:54:0c:4f:c5:
9e:85:bd:0d:25:24:9f:2f:5c:fc:c0:b0:d5:7f:5f:7d:5b:16:
1a:8b:1b:cd:1e:fd:4b:3d:f4:64:75:8d:97:be:20:f6:12:56:
ce:66:41:31:c5:18:34:3d:82:6f:55:2d:3d:61:7f:65:42:18:
ae:ca:5f:92:ac:06:ab:09:34:d0:a5:8d:9e:44:a5:d4:b2:31:
5e:bb:54:bc:6c:8c:82:ca:85:8e:b7:60:98:23:b0:9e:84:a3:
ce:1b:13:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:10 2025 by rpki-client