Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/17FLk26rZWNpnvEJucbEAG-7zqY.roa
File: 17FLk26rZWNpnvEJucbEAG-7zqY.roa (raw, json)
Hash identifier: qMmpcRGKwOqOR5+GsVwNkgRbdBAdNorVpaMiale+nXI=
Subject key identifier: D7:B1:4B:93:6E:AB:65:63:69:9E:F1:09:B9:C6:C4:00:6F:BB:CE:A6
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 019422FB6F1E99067F015EDCA450D20CCB89
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/17FLk26rZWNpnvEJucbEAG-7zqY.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203428
IP address blocks: 81.8.150.0/24 maxlen: 24
81.8.151.0/24 maxlen: 24
81.8.152.0/24 maxlen: 24
81.8.153.0/24 maxlen: 24
81.8.154.0/24 maxlen: 24
81.8.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6f:1e:99:06:7f:01:5e:dc:a4:50:d2:0c:cb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7b14b936eab6563699ef109b9c6c4006fbbcea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:50:1b:97:d4:d1:43:0d:e5:ad:0b:cd:c0:
08:3d:62:84:b5:6e:2d:5b:56:a6:be:27:cc:4a:d0:
58:b5:9b:3e:62:f9:1e:c2:28:3d:66:93:42:bd:3f:
be:50:2e:44:ef:53:ea:c5:c3:cd:2f:a0:c8:16:bc:
03:59:6a:d6:83:e5:93:a5:e6:67:1a:ac:79:67:34:
ff:06:d2:f2:06:d2:8d:ff:27:0e:c8:09:19:22:c6:
b3:ff:ad:ed:d8:17:3a:e7:3e:1e:a7:e2:77:a1:a9:
7a:dd:47:7e:2c:db:42:47:6c:ec:ef:fe:0f:86:18:
12:f4:c5:cc:98:7e:20:87:7f:55:e5:17:8d:ff:bc:
aa:6a:90:35:d8:ea:fe:b0:78:31:3e:30:19:5a:e4:
a0:b1:58:88:27:83:ff:1b:66:a2:3a:2e:a1:95:18:
26:9f:50:54:6b:bd:1d:9f:51:b1:7d:5a:44:33:20:
db:6d:26:52:96:e5:9c:4d:04:b6:d7:b7:bd:d5:1b:
12:a2:d0:38:cc:78:59:03:84:0c:2a:62:94:55:16:
04:05:3e:ca:67:8b:d3:e2:28:64:f8:f5:3b:be:3d:
eb:58:71:6f:67:15:4e:f1:2c:b1:3b:db:49:ee:d3:
cf:78:c8:69:37:15:b1:5c:05:c4:42:e7:11:53:69:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:4B:93:6E:AB:65:63:69:9E:F1:09:B9:C6:C4:00:6F:BB:CE:A6
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/17FLk26rZWNpnvEJucbEAG-7zqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.150.0-81.8.155.255
Signature Algorithm: sha256WithRSAEncryption
7c:92:df:c4:b3:fc:7c:81:8f:cf:de:48:fb:3b:66:87:90:40:
17:8b:66:81:a3:2c:23:cf:67:c2:8f:c2:6e:d8:ce:c2:3a:09:
9e:2f:38:01:97:fc:e4:22:ea:e9:fc:0e:39:f0:96:11:99:df:
74:d7:88:76:8f:39:8a:8d:47:26:5e:54:26:75:fb:8f:59:36:
99:8f:6e:dc:be:79:35:e4:4d:ea:b9:f5:e7:2b:a2:37:a5:a3:
26:15:72:6f:95:7a:4a:02:f7:20:e7:8b:3c:04:ef:7a:bd:06:
9a:0f:0e:26:a1:a4:22:28:61:6d:2c:ba:c5:2b:fc:64:eb:df:
ac:1c:12:1b:b7:9e:6d:24:a2:62:a4:15:44:03:9d:bc:3f:f0:
72:fd:c8:b6:e5:85:47:e2:d9:00:d2:59:e7:76:74:03:52:d4:
f3:6a:dc:99:5a:9e:3e:91:91:3a:7d:44:c5:36:6d:f3:01:8e:
a5:6e:76:75:5d:ee:8a:aa:ad:43:a4:05:71:a0:2d:a1:68:e6:
b9:e6:0f:32:87:7c:3b:09:3d:a5:c7:92:02:b3:97:e8:7b:12:
9f:db:28:71:5a:0a:7b:50:43:19:19:36:9c:aa:9e:d6:d6:dd:
92:7f:2e:48:30:23:2b:f4:55:da:96:f0:14:fd:4f:7b:df:73:
de:b8:30:51
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+28emQZ/AV7cpFDSDMuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGIzM2NkZGI3OTliN2JjZjVkM2RjZTAwNGZkYmE4YzNl
ODY0ZmYwHhcNMjUwMTAxMTc0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2IxNGI5MzZlYWI2NTYzNjk5ZWYxMDliOWM2YzQwMDZmYmJjZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfZQG5fU0UMN5a0LzcAIPWKEtW4t
W1amvifMStBYtZs+Yvkewig9ZpNCvT++UC5E71PqxcPNL6DIFrwDWWrWg+WTpeZn
Gqx5ZzT/BtLyBtKN/ycOyAkZIsaz/63t2Bc65z4ep+J3oal63Ud+LNtCR2zs7/4P
hhgS9MXMmH4gh39V5ReN/7yqapA12Or+sHgxPjAZWuSgsViIJ4P/G2aiOi6hlRgm
n1BUa70dn1GxfVpEMyDbbSZSluWcTQS217e91RsSotA4zHhZA4QMKmKUVRYEBT7K
Z4vT4ihk+PU7vj3rWHFvZxVO8SyxO9tJ7tPPeMhpNxWxXAXEQucRU2mFkwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNexS5Nuq2VjaZ7xCbnGxABvu86mMB8GA1UdIwQY
MBaAFNoLM83beZt7z109zgBP26jD6GT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQt
NzczM2JkODg4ZTI4LzEvMTdGTGsyNnJaV05wbnZFSnVjYkVBRy03enFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wMzJkOGItNDg4MS00NmZhLWI2NzQtNzczM2JkODg4ZTI4
LzEvMmdzenpkdDVtM3ZQWFQzT0FFX2JxTVBvWlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFRCJYD
BAJRCJgwDQYJKoZIhvcNAQELBQADggEBAHyS38Sz/HyBj8/eSPs7ZoeQQBeLZoGj
LCPPZ8KPwm7YzsI6CZ4vOAGX/OQi6un8DjnwlhGZ33TXiHaPOYqNRyZeVCZ1+49Z
NpmPbty+eTXkTeq59ecrojeloyYVcm+VekoC9yDnizwE73q9BpoPDiahpCIoYW0s
usUr/GTr36wcEhu3nm0komKkFUQDnbw/8HL9yLblhUfi2QDSWed2dANS1PNq3Jla
nj6RkTp9RMU2bfMBjqVudnVd7oqqrUOkBXGgLaFo5rnmDzKHfDsJPaXHkgKzl+h7
Ep/bKHFaCntQQxkZNpyqntbW3ZJ/LkgwIyv0VdqW8BT9T3vfc964MFE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:04 2025 by rpki-client