Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HCcdolY07iKDzSMbX0IsbzTfmTw.roa
File: HCcdolY07iKDzSMbX0IsbzTfmTw.roa (raw, json)
Hash identifier: O6SvF/g5zmxCv7PzMIz/08Ve/+cImmFAgOqwm+nZTHo=
Subject key identifier: 1C:27:1D:A2:56:34:EE:22:83:CD:23:1B:5F:42:2C:6F:34:DF:99:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194930419552669821956067267561F46CD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HCcdolY07iKDzSMbX0IsbzTfmTw.roa
Signing time: Thu 23 Jan 2025 11:55:06 +0000
ROA not before: Thu 23 Jan 2025 11:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 217.60.242.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:04:19:55:26:69:82:19:56:06:72:67:56:1f:46:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 23 11:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c271da25634ee2283cd231b5f422c6f34df993c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:c2:9a:81:7c:11:b8:f0:7e:21:82:e6:ad:
62:b7:78:a6:76:60:2a:a3:51:23:38:75:e1:ac:81:
94:48:a5:47:c0:b9:73:44:f9:fd:fe:ed:15:e3:df:
7c:af:a9:99:9f:d2:76:05:49:2e:19:77:3c:e6:ec:
34:c5:85:10:cd:dd:2e:59:fe:ff:56:05:c4:94:bc:
10:b8:3c:41:ee:48:02:d0:43:58:9c:07:f9:60:e8:
d0:a5:1b:9d:d6:cd:93:a0:61:d3:6c:2c:cb:61:65:
46:b0:7e:db:8c:1d:f8:cc:04:1e:87:a5:47:e2:4b:
55:14:39:18:7f:c2:d3:36:d2:cf:71:cd:be:9c:83:
5f:2e:f7:8b:26:4c:87:ea:1a:4b:b8:66:ab:4d:a2:
1c:94:d8:1b:cd:5e:df:11:d9:89:0f:20:b3:d9:42:
de:8a:09:23:12:4a:ea:d1:a3:d7:c1:ea:69:bc:8b:
b8:be:9e:b6:76:26:ea:e9:e8:56:71:34:54:33:33:
7f:70:a0:b8:5e:55:71:e8:e4:d5:6a:86:d1:bf:5f:
64:ea:42:2c:aa:4b:b4:8c:56:1a:6c:47:f6:ae:e1:
23:2f:dd:59:54:25:d5:4b:71:63:cd:fc:25:c9:b8:
75:7c:8d:c9:87:c5:b8:1e:72:e6:36:80:3d:49:91:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:1D:A2:56:34:EE:22:83:CD:23:1B:5F:42:2C:6F:34:DF:99:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HCcdolY07iKDzSMbX0IsbzTfmTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.242.0/24
217.60.247.0/24
217.60.249.0/24
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
41:88:e9:dd:48:dc:2b:3e:1a:75:8e:ed:e0:74:b7:af:bf:e2:
20:de:43:40:c8:f9:b6:8f:61:05:fa:55:ff:7c:6f:25:66:b7:
91:08:c8:d3:b5:48:2e:34:54:e1:de:3f:d8:ca:de:e3:5a:17:
99:47:fb:a2:21:99:e2:36:1e:d7:a7:af:db:60:f8:88:6b:d1:
1c:e1:a6:bd:73:da:04:8d:4c:34:23:80:74:cd:3a:42:e7:49:
ab:8d:af:61:38:7d:29:73:bb:00:16:44:0b:59:df:13:2f:e2:
a1:dc:e8:79:d6:16:94:92:9c:92:34:e6:8a:ad:03:e4:9f:c9:
66:b7:2f:6a:c9:9c:cb:ec:97:3b:7c:ad:84:3c:4d:ab:0d:ff:
36:ca:0e:37:31:40:8b:12:11:5a:c5:41:bb:75:db:75:65:7a:
d3:01:37:5a:db:89:19:74:2e:25:77:56:f7:86:2e:82:6a:c1:
02:c6:b8:75:9f:c8:ae:18:9f:63:2a:3e:d5:3a:9b:b4:dd:4d:
7e:0f:a3:4b:53:76:2e:49:09:e9:eb:ca:fa:6b:7c:b4:78:9b:
52:f3:e3:74:fb:b5:8d:47:48:25:a6:00:9f:40:27:8f:86:69:
73:3f:72:31:44:c4:22:dd:69:3d:3a:42:87:62:2a:0a:47:51:
1d:c1:b1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:59 2025 by rpki-client