Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/PIZfmT1HWeOeC37d6cpBAUuzjE8.roa
File: PIZfmT1HWeOeC37d6cpBAUuzjE8.roa (raw, json)
Hash identifier: 39BFm+WWSQ/d4RBurOiAjAhtIJI4CDjSijsKb0bKgSk=
Subject key identifier: 3C:86:5F:99:3D:47:59:E3:9E:0B:7E:DD:E9:CA:41:01:4B:B3:8C:4F
Certificate issuer: /CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Certificate serial: 01856EEFDC7EB30DC1093F023B85E4A2C9A0
Authority key identifier: 7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/PIZfmT1HWeOeC37d6cpBAUuzjE8.roa
Signing time: Sun 01 Jan 2023 20:04:51 +0000
ROA not before: Sun 01 Jan 2023 20:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212042
IP address blocks: 217.74.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:dc:7e:b3:0d:c1:09:3f:02:3b:85:e4:a2:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae9beb14e5572bac4fc930b26cacf3d92029662
Validity
Not Before: Jan 1 20:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c865f993d4759e39e0b7edde9ca41014bb38c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:33:97:29:6d:1a:cc:0d:69:d6:f5:e6:a9:
19:f1:77:06:b4:9d:72:1d:41:e1:79:2a:0b:22:4f:
64:2f:6d:6f:1e:fe:68:5e:5b:a2:b9:d1:c8:a0:62:
81:b3:42:a2:37:ca:b8:f6:f1:98:20:2d:0f:39:3d:
16:48:36:bb:11:a5:40:07:8a:b7:bc:ca:ee:4c:48:
35:5c:02:55:33:31:05:07:08:b8:09:a6:84:1d:66:
d7:32:42:2f:c2:77:82:17:88:2e:f5:f3:60:10:82:
53:f0:13:f1:ec:6d:9b:77:11:89:24:41:c4:ab:02:
12:d0:d0:13:02:06:02:1d:2a:55:94:b9:5e:e9:ae:
29:1b:f9:03:72:3e:cf:5b:2f:75:16:9f:b6:4b:29:
b6:4c:a6:bb:04:a3:4a:36:07:f3:52:69:f3:cd:ea:
43:3b:bf:6a:81:dc:6e:84:1b:92:a7:20:e8:38:eb:
ce:b2:49:ec:31:6e:b9:c3:a4:54:70:16:5f:c1:72:
16:95:f7:5c:b5:be:b8:a1:ec:2e:1b:18:5d:aa:ba:
5f:e2:2e:82:2e:da:9c:bb:1b:32:ae:42:16:98:be:
b5:e7:e9:a1:f4:85:ef:2a:92:40:a9:2c:01:ea:08:
2e:e9:0e:16:22:1d:93:d0:d1:4d:83:3a:54:39:12:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:5F:99:3D:47:59:E3:9E:0B:7E:DD:E9:CA:41:01:4B:B3:8C:4F
X509v3 Authority Key Identifier:
keyid:7A:E9:BE:B1:4E:55:72:BA:C4:FC:93:0B:26:CA:CF:3D:92:02:96:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eum-sU5VcrrE_JMLJsrPPZIClmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/PIZfmT1HWeOeC37d6cpBAUuzjE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1e8c8d-f650-4d5a-9e8c-2016b1e97f9b/1/eum-sU5VcrrE_JMLJsrPPZIClmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:95:ea:43:71:77:17:e0:5e:ae:a5:c7:10:64:45:20:93:56:
56:03:31:e6:77:72:77:cb:09:54:00:77:4c:da:91:dc:bc:bc:
97:29:f0:f5:f2:c4:f8:bc:dd:7a:34:28:0f:74:9f:1b:c9:eb:
ec:46:49:8d:fc:5e:26:2e:2e:d2:48:06:a4:d4:dd:c7:fa:62:
f0:f2:f3:5e:24:1f:32:de:59:ff:c9:a6:09:69:eb:ba:1b:a5:
ca:4c:c8:8e:48:bb:19:29:f2:ac:8a:71:4d:10:75:b5:a6:90:
ae:b5:25:e5:0c:60:30:c0:86:df:50:11:d5:4e:04:4b:f9:59:
2c:18:90:2a:86:95:4f:6c:8d:df:d4:5c:92:cb:4a:bb:b6:45:
ce:36:da:39:0c:c6:5c:a5:02:20:4a:d7:64:1d:88:3e:aa:5a:
4d:c6:3a:ad:cb:9f:d9:03:ae:d0:4b:0f:ca:5c:b8:7b:6d:06:
f0:e5:fd:c8:91:95:db:7e:33:57:15:2c:cd:78:a2:ab:4e:c6:
29:6e:1e:d7:62:d7:97:0b:30:1e:15:5a:ce:c2:c8:c9:d9:8e:
27:1b:86:90:da:32:d0:d9:db:f8:24:8b:37:b8:48:8e:b0:d0:
33:3c:68:8d:22:e6:01:8d:93:9a:ae:7e:50:fc:a1:5b:71:41:
17:8f:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:29 2025 by rpki-client