Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/1-bsSLCGQbbBmhmMjW6k6LwFr1FM.roa
File: 1-bsSLCGQbbBmhmMjW6k6LwFr1FM.roa (raw, json)
Hash identifier: CGq87yPaDZPT7VFhizhfdy/j3ZnEJa+fN8bsPvCXuP8=
Subject key identifier: F9:BB:12:2C:21:90:6D:B0:66:86:63:23:5B:A9:3A:2F:01:6B:D4:53
Certificate issuer: /CN=8faca1a5b17015e1d163ddbd51a217ebbe58e46b
Certificate serial: 01857303A15E4D6F273C2C3A70F3199A716D
Authority key identifier: 8F:AC:A1:A5:B1:70:15:E1:D1:63:DD:BD:51:A2:17:EB:BE:58:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6yhpbFwFeHRY929UaIX675Y5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/1-bsSLCGQbbBmhmMjW6k6LwFr1FM.roa
Signing time: Mon 02 Jan 2023 15:04:55 +0000
ROA not before: Mon 02 Jan 2023 15:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 217.114.47.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:03:a1:5e:4d:6f:27:3c:2c:3a:70:f3:19:9a:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8faca1a5b17015e1d163ddbd51a217ebbe58e46b
Validity
Not Before: Jan 2 15:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9bb122c21906db0668663235ba93a2f016bd453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:54:71:03:30:c8:46:3c:6b:71:cb:cc:58:
2c:50:6f:7e:8c:f5:30:be:a8:19:81:a0:fc:26:d3:
46:e4:06:45:0c:b2:b0:44:51:e3:78:06:17:b6:24:
1e:6f:61:b5:3e:01:12:2d:0a:a6:6c:aa:a9:02:6b:
0e:49:57:90:83:3c:f8:88:61:9c:bf:4d:e2:1d:bf:
2e:c2:f3:17:11:ed:54:da:dd:6b:7c:11:f3:c5:7a:
5b:2d:87:22:92:ec:4e:e6:3c:84:f2:a7:c8:89:c7:
ff:66:c9:06:9d:37:83:ab:6c:b4:3f:e7:8f:08:f2:
1c:6b:73:e0:62:14:fc:90:5e:1e:eb:54:d0:62:c0:
b4:e9:00:be:36:04:dc:70:5d:ae:a2:b7:44:20:ae:
43:5b:23:ce:77:f6:0c:3c:a4:36:ae:32:94:c1:ba:
40:85:1e:0c:0f:f5:b5:dc:cc:4d:96:51:71:e3:61:
7a:03:a6:88:c2:e5:ea:fa:f7:25:bb:e6:fb:98:a7:
b6:8f:5e:56:25:44:20:3f:80:9b:e5:9a:d8:58:23:
f7:af:a9:ae:28:45:42:65:fa:23:7f:6d:4d:33:a1:
69:bd:77:60:ac:a5:3a:01:f0:b6:75:c0:2e:86:69:
41:da:e5:bc:4e:f4:de:75:06:dd:85:18:2e:3d:36:
07:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BB:12:2C:21:90:6D:B0:66:86:63:23:5B:A9:3A:2F:01:6B:D4:53
X509v3 Authority Key Identifier:
keyid:8F:AC:A1:A5:B1:70:15:E1:D1:63:DD:BD:51:A2:17:EB:BE:58:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yhpbFwFeHRY929UaIX675Y5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/1-bsSLCGQbbBmhmMjW6k6LwFr1FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/j6yhpbFwFeHRY929UaIX675Y5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d3:8c:42:39:ea:a7:fc:3c:21:76:16:9f:c3:6e:49:60:82:
3a:eb:53:36:2b:26:cb:c9:ae:a6:7d:d3:24:03:69:87:08:42:
e1:c1:cc:06:7c:ac:69:85:be:8d:59:a0:81:36:bc:71:ed:fa:
38:6f:81:ea:1a:f1:36:de:e3:e6:27:ce:42:00:ff:6f:81:1e:
7e:22:90:5b:17:07:ed:a0:3a:c6:2f:b4:8c:ef:2b:e1:e0:4a:
bb:cc:72:a9:54:11:4b:31:5b:e3:e4:54:4d:ae:ea:44:5e:cb:
8e:b2:5b:c5:03:22:7e:0a:7f:e1:81:45:be:72:08:c7:07:42:
3b:ef:91:c7:67:47:13:6b:7c:63:90:7c:b6:80:a9:c9:0d:18:
b0:f0:64:2e:4e:22:63:11:60:20:04:7c:da:b2:cf:63:69:62:
39:15:2f:b5:13:d8:95:77:ef:4d:c3:cb:d4:de:39:da:16:3f:
4c:a6:c3:b2:94:df:0c:51:27:c2:cd:1b:6b:5b:39:57:4f:67:
22:0f:db:88:c9:16:be:c4:a2:de:8f:26:68:fb:e8:c8:b6:94:
67:31:eb:c2:bc:23:67:96:f1:bc:3e:32:5c:15:27:61:1a:0b:
59:e6:de:bb:e8:e2:b6:ff:e2:b3:b0:35:c9:80:f7:3c:15:4b:
f9:fc:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:13 2024 by rpki-client on console-fra.rpki-client.org