Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/86moQPpqTbtxzwmIWWJ6awQKaD8.roa
File: 86moQPpqTbtxzwmIWWJ6awQKaD8.roa (raw, json)
Hash identifier: jKGkF8KR+fRnfdNshc2xYnZZsoULn2rmhN8qVGPT9Yw=
Subject key identifier: F3:A9:A8:40:FA:6A:4D:BB:71:CF:09:88:59:62:7A:6B:04:0A:68:3F
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 3F19D68A
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/86moQPpqTbtxzwmIWWJ6awQKaD8.roa
Signing time: Fri 20 May 2022 09:24:29 +0000
ROA not before: Fri 20 May 2022 09:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28852
IP address blocks: 217.214.194.0/24 maxlen: 24
217.214.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058657930 (0x3f19d68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: May 20 09:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3a9a840fa6a4dbb71cf098859627a6b040a683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:93:5e:a3:22:e5:7f:bf:34:04:79:9f:db:
d9:1f:a6:94:f2:f4:81:6e:05:0a:26:ab:27:c1:d3:
4b:07:30:61:e3:1e:98:f0:eb:ed:f1:df:07:4d:63:
cf:4a:d9:58:41:44:2a:7b:52:f5:53:e3:17:08:f2:
06:02:e6:dd:22:4c:96:e8:8b:ae:1b:25:90:75:29:
42:89:f2:d7:cb:4c:ee:20:59:36:69:c6:bb:72:9b:
fa:05:00:f0:e4:f9:66:50:a5:f6:a1:ed:e5:f1:cd:
21:71:31:5d:da:bd:14:33:1a:9b:3d:4b:fd:85:40:
52:2e:3f:b8:bf:ee:f2:d3:d6:0f:a5:93:1b:f8:bf:
c7:b7:46:d6:9c:5b:66:9f:17:fe:31:7c:46:5f:51:
89:d7:3b:9c:63:e6:2a:16:90:f2:5d:7c:a0:ae:1f:
64:7e:64:c6:af:9f:87:78:f9:18:95:67:8a:f6:43:
c8:f9:40:ee:b7:f3:0d:86:a5:c5:04:51:85:58:a3:
df:f6:3f:e7:9f:5d:60:b6:04:62:ef:d1:5d:f1:4c:
0e:ad:30:23:df:b9:40:65:a0:89:b6:bc:a7:49:6e:
a7:f6:85:2c:4f:56:cf:61:bd:ee:eb:cb:cf:72:48:
71:71:b1:50:a7:b8:f1:9c:09:d5:bb:4e:06:5e:24:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:A8:40:FA:6A:4D:BB:71:CF:09:88:59:62:7A:6B:04:0A:68:3F
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/86moQPpqTbtxzwmIWWJ6awQKaD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.214.194.0/23
Signature Algorithm: sha256WithRSAEncryption
63:61:b8:c8:f3:33:b1:24:1c:4a:a3:eb:6f:20:be:20:8b:59:
57:bd:46:fb:49:23:3e:f4:1d:8a:02:e6:ab:97:6c:f2:97:a1:
5a:a3:88:ea:68:6e:2f:c7:f4:7e:5b:aa:ea:fa:3a:d9:43:10:
03:6b:26:d9:77:1b:61:5a:88:50:97:59:8d:77:1f:5b:78:01:
c6:74:98:db:bb:72:5b:4b:dc:c9:a3:c3:2d:8a:f1:81:05:b8:
20:c5:47:26:c5:c1:d5:99:e4:d8:21:a1:ec:46:76:bf:5b:bc:
5f:4f:cf:36:20:f3:26:15:dc:1a:c1:1e:27:fb:65:cb:08:d3:
4b:8e:0a:50:f6:32:ea:dc:d9:f8:00:81:52:03:4f:0e:bb:9b:
52:74:27:6d:69:6e:f6:88:76:13:a0:9f:1f:d0:c3:cc:5c:4a:
d0:36:e1:e4:6a:62:df:08:ce:f5:d9:7e:93:e0:1f:d2:e1:1f:
3f:37:4c:d3:87:10:32:23:7b:e6:22:64:d2:97:97:e5:3d:c9:
06:9d:9d:22:58:0b:aa:ff:eb:fd:32:ca:31:0f:37:0d:7d:42:
b5:4e:73:d3:dd:07:bc:26:6d:3b:30:e7:f8:25:92:45:3b:ef:
f1:d8:a2:55:78:49:00:1a:2f:47:7d:08:57:0f:79:8f:ec:3b:
a7:1f:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:54 2025 by rpki-client