Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4f2e46-7533-49db-9c93-a20cb244b7ff/1/8RxrmB5IWQg2aPV5P84Xz9338lE.roa
File: 8RxrmB5IWQg2aPV5P84Xz9338lE.roa (raw, json)
Hash identifier: w0bKu2oB6eQCg2ITe104ugAYo2pNRGOqzeWl6qKppg0=
Subject key identifier: F1:1C:6B:98:1E:48:59:08:36:68:F5:79:3F:CE:17:CF:DD:F7:F2:51
Certificate issuer: /CN=69b2b783855d9ea002f4770b7df406cfedf368db
Certificate serial: 018283487C438BF985A033648A2E5CE31B82
Authority key identifier: 69:B2:B7:83:85:5D:9E:A0:02:F4:77:0B:7D:F4:06:CF:ED:F3:68:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abK3g4VdnqAC9HcLffQGz-3zaNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4f2e46-7533-49db-9c93-a20cb244b7ff/1/8RxrmB5IWQg2aPV5P84Xz9338lE.roa
Signing time: Tue 09 Aug 2022 15:45:41 +0000
ROA not before: Tue 09 Aug 2022 15:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 217.18.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:48:7c:43:8b:f9:85:a0:33:64:8a:2e:5c:e3:1b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b2b783855d9ea002f4770b7df406cfedf368db
Validity
Not Before: Aug 9 15:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f11c6b981e4859083668f5793fce17cfddf7f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:59:b1:60:33:89:af:3d:f8:f0:95:fc:db:
ce:b6:c1:17:7c:ed:74:17:05:12:ed:19:30:f1:92:
4e:a4:81:37:e3:22:85:4f:ff:6b:e7:e1:c0:95:e7:
2e:ed:4b:5e:ca:bc:1a:86:4b:a2:09:dc:43:35:e7:
62:72:5d:aa:c0:f0:18:4f:7c:f8:f1:1c:72:3d:e3:
14:50:46:bd:11:a2:94:8a:f0:98:fb:4a:54:27:ee:
73:12:86:9b:8c:61:44:1f:d7:8f:49:28:27:a9:be:
a3:ab:c6:96:53:d5:3c:3c:42:1c:ad:d1:5f:cb:37:
e8:86:10:94:ea:f3:f4:c4:e7:51:0c:cf:d9:e4:9c:
3c:99:fd:c5:c3:ab:b4:95:11:4b:81:a8:a3:cd:e6:
83:6c:95:d6:4a:4c:ed:48:01:b2:db:58:6c:17:41:
14:ac:4b:9f:4f:19:f8:02:3e:de:4b:36:c5:74:86:
43:14:06:96:90:e9:95:a7:e7:15:78:25:a0:48:f4:
92:3e:b3:05:c9:15:69:f7:d0:e4:ab:09:b5:e8:a6:
64:0d:84:54:e2:f4:4a:cc:fa:b5:c8:dc:15:6c:7a:
f9:a3:ce:14:e9:89:2e:80:68:76:58:9d:91:38:23:
de:5c:5e:2a:4a:b7:8b:de:38:65:97:44:83:58:d2:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:6B:98:1E:48:59:08:36:68:F5:79:3F:CE:17:CF:DD:F7:F2:51
X509v3 Authority Key Identifier:
keyid:69:B2:B7:83:85:5D:9E:A0:02:F4:77:0B:7D:F4:06:CF:ED:F3:68:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abK3g4VdnqAC9HcLffQGz-3zaNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4f2e46-7533-49db-9c93-a20cb244b7ff/1/8RxrmB5IWQg2aPV5P84Xz9338lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4f2e46-7533-49db-9c93-a20cb244b7ff/1/abK3g4VdnqAC9HcLffQGz-3zaNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.208.0/22
Signature Algorithm: sha256WithRSAEncryption
83:07:c6:4a:0b:ab:22:30:73:2f:c3:4d:ff:8f:5f:ae:a6:93:
68:21:2e:a0:fd:b8:f5:ca:f4:89:61:fe:d0:a0:20:7f:a9:89:
be:b7:a6:ef:aa:bc:9c:d2:94:89:09:27:20:2d:15:14:48:0b:
c9:45:2f:62:86:6d:bf:5e:ad:83:58:a9:d5:86:99:ac:75:47:
86:fa:cd:a8:78:e2:6e:4a:70:ac:cd:71:0b:50:4b:d5:b9:49:
54:00:28:ed:be:c7:56:d3:38:5b:05:08:7c:fb:29:05:de:f7:
07:aa:87:54:cd:40:5b:85:80:5a:0b:ae:58:19:3a:3e:ec:79:
0d:92:89:5a:a4:83:3a:b7:54:2b:22:3b:37:d3:09:77:9f:d7:
eb:ab:f6:4e:c8:8b:bf:e6:ba:bd:17:95:84:79:20:4c:16:36:
a9:6a:80:e2:ba:43:05:b3:c5:f5:80:60:1e:29:4d:69:87:a6:
30:fe:d3:f9:a7:33:53:76:31:21:2b:2c:07:af:03:55:31:d1:
c7:82:5b:9d:54:97:50:54:4e:6c:e2:9b:77:03:71:42:e9:0b:
db:c4:0c:37:cf:50:1d:0e:b9:b3:a7:6f:d9:87:98:ca:18:39:
96:89:95:fa:c8:e2:b8:63:c1:60:83:e2:90:45:60:62:61:f6:
e6:99:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:47 2025 by rpki-client