Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/F9nanZKEFQXOBgdOYzry5TTFKGA.roa
File: F9nanZKEFQXOBgdOYzry5TTFKGA.roa (raw, json)
Hash identifier: qtrfg+PrT8BzRtXH1C5Uz3K0tXznH3Al0OzLKf9juuI=
Subject key identifier: 17:D9:DA:9D:92:84:15:05:CE:06:07:4E:63:3A:F2:E5:34:C5:28:60
Certificate issuer: /CN=218edf6448492384ffc8dba3ce677d77ab68306c
Certificate serial: 059C3249
Authority key identifier: 21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/F9nanZKEFQXOBgdOYzry5TTFKGA.roa
Signing time: Sat 02 Apr 2022 19:43:15 +0000
ROA not before: Sat 02 Apr 2022 19:43:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 193.109.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94122569 (0x59c3249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218edf6448492384ffc8dba3ce677d77ab68306c
Validity
Not Before: Apr 2 19:43:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d9da9d92841505ce06074e633af2e534c52860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:18:68:37:cc:cf:5d:1d:a9:42:44:41:14:
8f:7f:8a:38:c2:11:81:20:80:3c:1e:8b:95:b1:c5:
60:3e:d5:73:00:50:ea:e3:e5:c0:ed:7f:48:ff:c1:
44:e7:ea:d8:b7:26:b1:4c:f7:34:c7:e4:f9:6e:a1:
de:f4:8d:d3:88:e4:47:96:2d:f3:01:17:32:0d:3a:
ae:f2:e4:25:cf:9c:51:87:38:92:eb:12:9e:80:97:
7f:e2:20:2c:63:f5:dd:2e:04:e1:96:77:a0:a1:e5:
76:0d:98:98:1e:2c:f0:4b:09:81:9d:8f:55:9a:f8:
46:ac:fc:3e:d4:d8:bb:1f:8c:1c:ea:49:83:d5:94:
50:dd:d2:ad:f7:46:f9:7a:aa:d7:cc:7c:c2:52:5c:
a3:99:57:e1:7a:a6:f0:d1:e7:6a:68:63:e1:9d:40:
d6:c1:c5:7c:1c:39:5a:72:a6:02:ed:d7:67:f8:1f:
d7:1a:e0:b3:f0:2e:ce:db:2a:53:95:03:c8:74:e1:
ac:68:b4:ca:38:1e:f9:d6:d0:7f:12:85:7b:bb:93:
69:3a:8b:63:4a:7c:f3:96:e2:98:93:b0:e3:f4:1c:
94:a3:b8:d4:a3:d4:cb:c8:5b:fe:bd:49:a8:dc:ea:
ec:7a:a9:fe:90:07:dc:0b:f2:91:76:f5:29:1e:7c:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:DA:9D:92:84:15:05:CE:06:07:4E:63:3A:F2:E5:34:C5:28:60
X509v3 Authority Key Identifier:
keyid:21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/F9nanZKEFQXOBgdOYzry5TTFKGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/IY7fZEhJI4T_yNujzmd9d6toMGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.217.0/24
Signature Algorithm: sha256WithRSAEncryption
39:67:13:89:92:6f:66:cf:89:8a:a1:d2:e9:c2:e1:a5:41:87:
c6:3a:e1:41:2a:9b:72:35:20:58:d0:fb:8c:4f:03:04:ff:1a:
ef:15:10:ac:a1:bd:69:1b:4f:42:07:2d:8c:42:5d:fb:c4:cb:
3b:12:53:44:13:b0:cf:e1:b4:1e:86:de:96:a5:d4:7d:ca:8c:
79:ff:d9:c4:03:65:e3:ee:c6:a5:0a:e5:9d:9a:48:a6:f5:4f:
69:50:e9:5b:31:2e:fe:e0:ee:18:80:36:0b:96:9f:95:94:17:
48:9b:10:0f:e1:38:9c:7c:f2:62:55:08:78:8d:1a:ad:94:d1:
80:86:c3:1d:b9:12:85:ff:16:61:28:d4:1e:11:7f:52:7a:2a:
bb:05:b8:ef:fa:1b:92:ec:10:a5:ef:11:91:37:65:c2:01:f7:
99:ac:cd:0e:2f:83:27:8b:5b:b2:f4:4e:ef:0e:03:c3:8c:91:
cd:47:ee:4e:ef:00:0d:c7:27:ec:cf:b1:69:b8:04:e4:eb:4b:
87:83:b8:74:95:99:f5:28:29:65:01:bb:76:75:e0:f6:48:a9:
ef:39:95:31:d5:f6:9a:69:a9:54:7f:90:68:85:58:ea:4d:c1:
d4:32:b4:5b:63:97:eb:4b:d5:5e:b6:7d:7a:14:69:bc:0c:7c:
95:1d:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:46 2024 by rpki-client on console-fra.rpki-client.org