Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/1_CHZT9QfuR7tsU-euaK767cklU.roa
File: 1_CHZT9QfuR7tsU-euaK767cklU.roa (raw, json)
Hash identifier: 63+eLT9Dw8Qs2m1cc8lHoIY3XMdIir76QzW85Og4v9M=
Subject key identifier: D7:F0:87:65:3F:50:7E:E4:7B:B6:C5:3E:7A:E6:8A:EF:AE:DC:92:55
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAEEF2BEC30ADD3891A13FA2C9EC12
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/1_CHZT9QfuR7tsU-euaK767cklU.roa
Signing time: Wed 01 Jan 2025 17:47:37 +0000
ROA not before: Wed 01 Jan 2025 17:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42870
IP address blocks: 217.22.168.0/22 maxlen: 22
217.22.168.0/24 maxlen: 24
217.22.169.0/24 maxlen: 24
217.22.170.0/24 maxlen: 24
217.22.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ee:f2:be:c3:0a:dd:38:91:a1:3f:a2:c9:ec:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7f087653f507ee47bb6c53e7ae68aefaedc9255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:7b:2a:90:ef:67:54:33:d1:9a:8f:69:3d:
a0:be:34:f7:53:0f:06:e1:1c:2a:c3:00:77:02:2a:
22:a2:2e:38:0f:e2:16:37:b9:4b:bd:1c:72:81:0c:
35:96:32:77:6c:d6:af:d6:00:11:c7:32:61:2e:20:
c6:d0:4d:af:0f:f0:de:7f:76:7e:fd:cc:11:68:85:
cf:6b:6f:f4:e0:c4:4e:e0:72:c6:75:9a:f6:ef:c5:
bd:c9:14:8d:e8:ae:dc:d6:a6:c9:37:3e:e7:a9:e3:
34:56:5a:b5:08:10:71:de:d2:3d:ae:fa:69:a6:8a:
89:12:80:d0:85:2c:2a:d3:a5:68:6a:45:ba:00:13:
ae:c6:5d:1b:78:58:e4:2d:c4:c3:7e:5d:cb:21:a0:
13:49:74:ed:19:d5:e6:73:12:2d:1c:ef:8b:23:23:
ad:56:be:01:a3:c6:07:7a:7e:19:8e:b4:21:b4:fe:
65:5c:52:07:a8:1c:87:a6:ec:93:9e:42:05:52:ad:
9d:55:05:9f:64:57:8a:ec:61:34:9b:7d:eb:a8:40:
6a:5c:bc:11:0b:d9:86:a4:a7:2f:fd:de:fb:75:a7:
be:43:2d:23:8e:d2:97:bc:a4:c7:23:93:06:b3:a9:
e4:62:90:12:d6:ff:ba:56:71:b2:6f:08:f5:d7:ce:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:87:65:3F:50:7E:E4:7B:B6:C5:3E:7A:E6:8A:EF:AE:DC:92:55
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/1_CHZT9QfuR7tsU-euaK767cklU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.168.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:f6:d1:e6:3e:97:ca:83:79:e9:09:fd:db:8f:c1:fd:8d:39:
d8:3e:c1:f4:ef:5e:51:cf:28:e2:e5:c9:0c:b7:20:31:4a:ce:
dd:56:e6:2b:c9:09:da:21:46:9b:cb:d8:5a:e7:aa:a6:77:31:
28:d9:26:24:c3:ca:9e:74:78:d2:44:c3:19:00:55:b1:93:16:
5b:1a:97:dd:b3:75:90:19:cc:40:45:61:ad:33:a9:ba:ed:93:
de:64:59:eb:a0:2f:4f:c2:aa:17:ac:f2:19:43:89:b9:20:9e:
72:ca:47:83:3c:f5:31:0e:31:35:8b:6e:14:99:97:75:8e:94:
9c:62:56:34:72:05:c6:31:3f:a5:8d:1c:6e:de:b1:27:59:3c:
7e:4e:c2:04:e3:79:fb:51:96:54:6e:47:91:47:61:ae:6b:6c:
6e:6b:22:37:37:ee:73:c5:5b:49:2b:78:9a:59:b4:00:4b:7d:
f0:43:1e:60:cb:95:6a:9e:b4:ff:f5:9d:a2:23:89:06:9e:72:
44:90:e9:0f:c3:86:4f:f8:39:0f:6f:ec:90:7d:03:ed:32:50:
0a:19:13:e9:f9:ce:c1:b7:ff:f5:f9:79:41:d9:d8:a6:75:9f:
7e:c0:2b:54:a1:9a:17:09:63:3b:01:14:b4:e7:da:7f:d8:37:
fc:fc:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:19 2025 by rpki-client