Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/1-nkbEUuPAsT-pm0npX0tSNIRVDQ.roa
File: 1-nkbEUuPAsT-pm0npX0tSNIRVDQ.roa (raw, json)
Hash identifier: gTgxoG9aDAq+gt8LS/NdPbqUnr99wgE12J22bl1LWsc=
Subject key identifier: FA:79:1B:11:4B:8F:02:C4:FE:A6:6D:27:A5:7D:2D:48:D2:11:54:34
Certificate issuer: /CN=34f838d3a9de854c98af8320c3deb0041e239e8d
Certificate serial: 018570FBD58D814FAE2F671537C3684E7389
Authority key identifier: 34:F8:38:D3:A9:DE:85:4C:98:AF:83:20:C3:DE:B0:04:1E:23:9E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPg406nehUyYr4Mgw96wBB4jno0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/1-nkbEUuPAsT-pm0npX0tSNIRVDQ.roa
Signing time: Mon 02 Jan 2023 05:37:10 +0000
ROA not before: Mon 02 Jan 2023 05:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 213.109.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d5:8d:81:4f:ae:2f:67:15:37:c3:68:4e:73:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f838d3a9de854c98af8320c3deb0041e239e8d
Validity
Not Before: Jan 2 05:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa791b114b8f02c4fea66d27a57d2d48d2115434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:85:c7:df:42:5b:a4:fa:29:e2:1e:d6:a0:
02:e2:49:c5:27:40:14:f9:02:77:c9:1f:b2:fe:a7:
3f:8f:df:74:34:05:c8:b0:99:c5:6e:ae:2f:f1:65:
49:7c:2e:e6:dc:3b:93:0e:64:e9:0b:fc:62:e6:cb:
7c:f2:5d:5c:df:9a:7b:4c:51:e2:b8:69:e6:26:e7:
d1:6c:1d:b8:98:9d:53:35:5d:dc:b2:da:a1:a2:12:
aa:97:6a:22:5c:10:24:5e:16:22:e0:61:42:d8:24:
0e:c5:cb:84:43:74:2c:84:f9:0a:b0:88:82:95:e7:
a0:59:73:85:6e:a7:ae:38:65:50:0c:c9:93:25:62:
c4:72:b0:76:6c:63:87:60:38:39:54:a4:09:64:a2:
1d:45:19:79:79:bc:f6:6a:c5:99:1e:02:38:27:d4:
13:8b:97:9c:90:7d:9b:b4:5e:62:4a:9a:47:5b:25:
ea:6a:5a:67:09:e3:07:97:52:68:ef:dd:e6:91:4e:
4f:96:72:34:48:71:43:de:b0:da:35:72:97:58:a4:
ae:fc:99:c4:84:77:b2:05:2a:a5:af:8b:e5:5f:e9:
0c:a6:9a:6a:86:9e:73:a2:20:14:ea:d9:86:7c:10:
6c:b9:87:1b:b0:59:4c:00:4a:00:4d:a8:21:18:de:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:79:1B:11:4B:8F:02:C4:FE:A6:6D:27:A5:7D:2D:48:D2:11:54:34
X509v3 Authority Key Identifier:
keyid:34:F8:38:D3:A9:DE:85:4C:98:AF:83:20:C3:DE:B0:04:1E:23:9E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPg406nehUyYr4Mgw96wBB4jno0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/1-nkbEUuPAsT-pm0npX0tSNIRVDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/NPg406nehUyYr4Mgw96wBB4jno0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:61:37:b0:da:f6:b6:29:e4:19:20:16:10:9b:dc:79:02:6a:
6c:16:f5:40:16:74:03:51:2c:25:06:e1:c2:5e:8f:d4:82:76:
cf:32:3b:ff:11:7e:67:20:2d:f5:04:12:e1:82:a4:5d:c6:b7:
f2:36:ea:86:99:f8:85:0e:c1:e5:b8:3b:d6:cb:cf:a2:9b:a3:
82:c1:33:7c:a8:7c:be:e4:fc:cf:9e:6d:74:86:a5:da:0e:b0:
eb:89:6b:ee:0e:4c:c8:80:73:d7:5d:0d:5b:93:ad:c6:b9:64:
4a:67:d4:2f:61:f8:ce:77:a5:bd:b9:b9:60:3c:16:74:36:22:
5c:59:0a:ee:ca:25:7d:48:da:bb:29:69:8c:3c:63:71:9c:06:
a1:9d:5d:f3:3f:3a:d3:bc:b7:b4:0d:aa:0c:ad:24:ed:2c:33:
a3:69:d6:fd:00:97:df:be:dd:55:ee:5f:49:a4:a6:9d:52:ed:
37:1c:1f:4b:b9:8c:9a:d9:bc:73:7f:c6:62:47:34:8e:49:a4:
cc:90:df:1d:d1:03:44:73:e7:28:a6:a7:3a:cb:f9:5d:05:bf:
fe:e1:cc:9d:68:c5:1a:d1:f8:47:08:7d:7a:06:fd:d0:33:e6:
57:f5:35:46:2a:d2:b0:72:19:f4:8d:57:0f:a6:b7:92:f1:63:
cb:24:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:40 2024 by rpki-client on console-ams.rpki-client.org