Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Lqf0qmlCh51boHzL0kvV512OVNc.roa
File: Lqf0qmlCh51boHzL0kvV512OVNc.roa (raw, json)
Hash identifier: Wa39+E+kOmLXNxlCbh6KvmHte6Pmn0zqqwqxHztLK20=
Subject key identifier: 2E:A7:F4:AA:69:42:87:9D:5B:A0:7C:CB:D2:4B:D5:E7:5D:8E:54:D7
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 01914AD63BB801D86F7B4D23054A4B7E5BAF
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Lqf0qmlCh51boHzL0kvV512OVNc.roa
Signing time: Tue 13 Aug 2024 08:23:59 +0000
ROA not before: Tue 13 Aug 2024 08:23:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48383
IP address blocks: 217.12.32.0/22 maxlen: 22
217.12.36.0/24 maxlen: 24
217.12.37.0/24 maxlen: 24
217.12.38.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.40.0/24 maxlen: 24
217.12.42.0/23 maxlen: 23
217.12.44.0/23 maxlen: 23
217.12.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:d6:3b:b8:01:d8:6f:7b:4d:23:05:4a:4b:7e:5b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Aug 13 08:23:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ea7f4aa6942879d5ba07ccbd24bd5e75d8e54d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:cd:73:46:0a:cd:a0:b4:ca:5a:1e:1f:a4:
47:d1:ad:71:16:78:f7:46:7f:be:12:e1:f8:e7:e7:
1a:29:b1:ed:e2:9d:d4:60:66:dc:cd:03:79:c1:f0:
2c:ed:67:a2:5a:19:c8:d1:5c:6c:fc:db:18:a2:4c:
e3:80:7d:8c:39:ed:e6:f8:40:ee:85:10:65:bb:af:
b2:2f:db:41:b1:66:b4:9c:8b:b5:bb:59:4e:a6:af:
bf:15:a2:9a:fa:f4:70:b3:86:7a:f5:58:f2:f4:a5:
dd:27:74:ca:5b:fc:8e:c1:0d:da:fd:10:a4:03:e8:
66:a6:7e:03:fb:5a:21:87:ec:31:6f:50:1b:92:ea:
e6:ff:ce:d9:0f:5e:fc:2d:39:47:66:19:af:a8:20:
09:ab:31:2d:da:a0:f9:ec:64:9c:e5:75:d9:f2:2c:
64:1e:a5:b0:cf:63:b4:3c:d4:6c:90:d1:38:88:c2:
e7:f0:16:33:9e:06:52:49:76:29:2c:97:7b:cc:3f:
d9:1b:6f:9c:85:41:5b:46:9e:34:f9:aa:13:ea:9c:
5b:b2:2a:b5:35:dd:20:1e:ca:82:82:50:e3:4c:dc:
3b:16:33:bf:25:a7:cc:85:a4:77:fb:a5:80:b0:55:
b5:38:3e:ca:51:ac:ab:de:29:10:c5:59:e8:1d:9e:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:F4:AA:69:42:87:9D:5B:A0:7C:CB:D2:4B:D5:E7:5D:8E:54:D7
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/Lqf0qmlCh51boHzL0kvV512OVNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.32.0-217.12.40.255
217.12.42.0-217.12.47.255
Signature Algorithm: sha256WithRSAEncryption
bb:b5:e8:41:67:b7:80:98:74:71:4f:d2:ec:2b:7a:40:c3:16:
76:a1:5c:d9:63:d8:f9:64:89:70:20:c2:b3:03:9e:f8:03:2a:
d6:b2:a9:c7:72:ad:d6:83:25:30:ce:15:d6:0f:9b:18:94:d0:
7c:ee:c3:fa:b4:d4:6e:71:76:50:40:35:07:03:60:ef:61:c0:
40:c7:f7:ae:c4:5b:06:1a:c4:44:b2:a2:66:78:23:e6:8b:af:
0e:21:78:a5:91:92:21:af:45:22:75:03:29:7f:58:3c:bb:06:
cf:d3:3d:2c:1c:a3:bc:c7:52:08:19:19:3c:f1:b8:08:88:18:
51:19:b6:54:0c:5c:96:1c:c9:8d:c1:1c:87:eb:93:ab:17:cf:
c5:b0:6c:54:28:30:34:46:8e:9a:ca:71:84:ff:c1:28:ea:19:
a3:e2:39:b8:21:00:e4:4f:84:1b:13:dc:03:1d:19:23:6d:31:
2d:52:96:d1:90:53:6a:bc:d6:be:f6:7b:5f:a3:dd:cb:77:74:
80:0c:3c:80:e4:a1:17:ea:36:8e:05:fd:99:bd:2b:c3:19:36:
cd:a7:a8:91:a7:0d:74:3d:4c:cc:4b:b4:81:ba:ef:ab:f7:3a:
ff:ad:f7:b2:0c:8d:fe:31:71:5f:e5:22:53:c6:67:e6:4e:5f:
50:1b:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:47:23 2024 by rpki-client on console.sobornost.net