Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa
File: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (raw, json)
Hash identifier: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=
Subject key identifier: 51:FE:EF:F3:11:A2:3F:AF:10:C4:0F:DB:86:0A:A9:D9:C6:74:AD:2C
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019422FC4C07B3BE3B8117699772888FEE33
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212172
IP address blocks: 217.23.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4c:07:b3:be:3b:81:17:69:97:72:88:8f:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51feeff311a23faf10c40fdb860aa9d9c674ad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:b1:1d:4e:2f:4c:cb:57:1f:5b:f3:8e:af:
9e:0d:fc:f8:00:3d:46:05:84:f7:80:bf:d3:0b:ef:
a3:04:15:e5:6a:7d:72:94:7d:14:8c:fb:e8:96:5c:
d6:d8:09:44:90:bd:70:cc:4d:e1:6e:8b:b7:3e:6b:
5d:2f:27:87:5c:5b:50:0f:5e:5c:34:be:9e:68:dc:
04:37:0d:5d:e3:16:94:1d:8f:fa:6d:7f:ef:0c:6d:
41:1d:3b:29:42:bf:45:fe:1e:8d:25:27:00:76:80:
83:35:4b:17:0f:a5:d1:ee:14:78:91:bb:19:68:ce:
69:31:fe:d9:26:31:8a:40:f0:f3:7e:89:e1:2b:eb:
08:9d:27:78:8d:5b:e9:97:b7:aa:7e:31:a1:bd:1e:
ea:70:43:d8:73:ec:15:f1:55:dc:2a:e0:a9:67:7d:
0f:45:b9:2c:f5:79:91:df:c1:7c:33:c5:bb:6b:81:
02:39:17:7f:2f:eb:e2:d1:c2:c2:64:f9:f6:ba:5e:
af:7c:92:c1:77:ec:0d:f8:12:7b:1a:fe:52:e1:95:
01:fe:19:b9:4b:2f:85:b6:50:48:16:b0:92:33:de:
b2:dd:ab:6e:9f:cb:9b:13:b9:c3:4e:53:65:52:57:
01:eb:00:3e:6b:5c:5f:82:67:59:d7:84:7f:bf:9f:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:EF:F3:11:A2:3F:AF:10:C4:0F:DB:86:0A:A9:D9:C6:74:AD:2C
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.118.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:56:a8:ad:93:e9:09:39:9b:1d:e0:fd:82:d0:a9:e1:b6:e3:
d9:87:76:32:ef:6c:77:c2:6f:62:4d:2a:10:4f:e6:4f:23:38:
79:34:fe:0b:f0:65:ae:16:63:84:52:21:6a:b5:54:4e:cf:de:
08:b0:5b:0e:b5:e0:d5:bb:35:76:89:c0:33:55:c2:b7:bc:db:
89:42:ae:a0:0d:16:43:9a:04:15:ac:b3:f6:4d:84:ae:e5:ec:
1e:b9:39:53:5a:14:fc:90:e8:57:ca:34:5a:55:96:2e:70:e5:
d7:e7:42:78:f2:bb:54:bc:bd:8f:21:86:46:6e:44:8d:a5:42:
a6:cc:55:96:1f:e1:73:0b:73:13:7d:f6:4f:3d:0c:2d:dd:10:
e7:40:00:98:47:6e:a6:19:71:3b:f1:59:a3:16:af:67:6f:b1:
13:72:38:c5:ef:92:76:e1:9a:c8:e9:40:86:27:40:c7:8d:0b:
25:42:6a:9e:c6:35:bf:eb:12:5a:7e:45:f3:80:d9:70:73:82:
ff:a9:c9:02:d1:e3:6b:3a:37:1f:bf:40:46:cc:58:33:a5:5d:
ed:fd:d7:8f:74:18:d7:91:d9:95:0e:2a:ff:a2:2d:56:c1:46:
78:2d:f1:93:ff:0e:ff:6f:04:a3:a3:2d:e1:f6:89:ff:9a:d0:
a5:a1:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:26 2025 by rpki-client