Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/F4ZLAGEzh2HYyMwMtRnLLiC3Fs4.roa
File: F4ZLAGEzh2HYyMwMtRnLLiC3Fs4.roa (raw, json)
Hash identifier: v78/ZGSkt8E/NWI5IceiB+MGC4l9OqdvBMQ9r8jENRc=
Subject key identifier: 17:86:4B:00:61:33:87:61:D8:C8:CC:0C:B5:19:CB:2E:20:B7:16:CE
Certificate issuer: /CN=10160aa3782177b138e6b00544398a701fb4c514
Certificate serial: 01856EB907AD34F0333977EFCA0CC19724CA
Authority key identifier: 10:16:0A:A3:78:21:77:B1:38:E6:B0:05:44:39:8A:70:1F:B4:C5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBYKo3ghd7E45rAFRDmKcB-0xRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/F4ZLAGEzh2HYyMwMtRnLLiC3Fs4.roa
Signing time: Sun 01 Jan 2023 19:04:57 +0000
ROA not before: Sun 01 Jan 2023 19:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196695
IP address blocks: 217.28.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:07:ad:34:f0:33:39:77:ef:ca:0c:c1:97:24:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10160aa3782177b138e6b00544398a701fb4c514
Validity
Not Before: Jan 1 19:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17864b0061338761d8c8cc0cb519cb2e20b716ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:76:71:06:7f:cd:a8:1c:f8:ac:2c:c1:0e:
4c:75:01:44:cc:59:42:e7:e9:4c:2a:d3:f0:af:3c:
68:60:24:b8:3d:ba:28:d6:5c:3d:4d:3e:ae:57:df:
99:d1:de:78:85:ec:f3:ae:c8:5f:32:50:ac:15:1d:
46:ac:26:85:f4:30:7e:41:88:44:a3:da:31:8e:5a:
9d:0b:24:bb:38:de:23:4e:07:0d:87:4c:ad:9b:23:
3c:6d:9a:80:92:ae:a4:eb:96:0b:8c:b9:41:dc:4e:
84:7b:25:5e:60:04:4e:04:eb:1d:37:ed:d7:91:56:
0e:83:cc:d7:42:17:20:ef:cc:4b:5f:ae:94:8a:91:
31:b9:e3:df:c8:12:ad:c8:dc:4d:31:6b:0c:31:04:
a6:b3:54:4b:59:4e:3f:3a:9d:66:b2:81:93:63:64:
97:36:c1:25:d4:78:ed:a3:49:76:29:ef:ca:66:3e:
41:7f:7e:f0:65:96:8d:b6:cf:e4:5a:f3:81:f3:a3:
4c:7c:35:76:b0:eb:61:fa:bf:7b:ba:a5:d7:db:0f:
f7:83:83:af:ab:1a:4c:70:7e:cd:7a:77:4b:a0:bc:
d0:98:dc:17:2c:7e:da:91:82:b3:39:25:a6:c3:3c:
0e:92:6a:a1:1a:7b:72:2f:d5:5b:3a:f3:29:f0:c8:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:86:4B:00:61:33:87:61:D8:C8:CC:0C:B5:19:CB:2E:20:B7:16:CE
X509v3 Authority Key Identifier:
keyid:10:16:0A:A3:78:21:77:B1:38:E6:B0:05:44:39:8A:70:1F:B4:C5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBYKo3ghd7E45rAFRDmKcB-0xRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/F4ZLAGEzh2HYyMwMtRnLLiC3Fs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/EBYKo3ghd7E45rAFRDmKcB-0xRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:be:80:ec:c9:6c:05:5b:28:32:47:a4:5d:7e:a3:36:66:07:
14:b4:c6:ab:a7:35:b3:c1:be:6a:5d:43:75:22:f9:e3:7e:06:
75:61:3a:32:ec:ea:70:a4:ab:78:54:83:45:76:47:e0:1b:5e:
47:32:ed:91:18:49:19:b2:d6:e9:b2:40:18:a2:a8:b2:b1:db:
d4:fc:53:5c:71:c0:53:30:29:f5:60:17:ec:fe:f6:5b:13:e3:
af:32:7a:a8:7a:37:4d:1f:59:da:b5:c4:55:da:ad:8e:75:5e:
32:a1:be:d7:0a:4b:9a:dd:26:ca:41:aa:56:27:75:11:bf:0c:
af:03:fc:fa:c8:fa:3f:c5:4e:c6:77:15:a8:5d:91:01:ee:ea:
c8:2b:20:c9:c7:9e:16:2e:f6:13:fd:64:3a:5c:8d:f0:c0:9c:
ab:88:0e:0c:e9:ba:96:a9:d5:c3:51:69:69:ec:b1:7e:8f:bd:
03:3e:0e:39:95:ff:61:c6:ae:59:b9:11:de:77:1f:79:12:1a:
2f:12:89:cb:68:95:97:a7:b0:f4:18:9d:42:b0:a6:bd:aa:43:
04:a9:a7:c1:de:af:b0:e9:97:4b:4d:18:5e:dc:00:82:c7:d2:
04:8e:c8:da:2a:c0:ef:59:48:44:c2:69:ec:af:b1:8c:5c:c2:
e3:c4:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:50 2025 by rpki-client