Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/1-zlYbRsSE8_lcGlLoB-P9s09gpY.roa
File: 1-zlYbRsSE8_lcGlLoB-P9s09gpY.roa (raw, json)
Hash identifier: 522z0zC074tp+sYfdaGIiiP9OVb7/QqpNxRGnaQ6zkk=
Subject key identifier: FB:39:58:6D:1B:12:13:CF:E5:70:69:4B:A0:1F:8F:F6:CD:3D:82:96
Certificate issuer: /CN=26dc466e56225124ee805885441305662ceb1f23
Certificate serial: 0187ECC9DD8A4E38F6D6DD917616182572C3
Authority key identifier: 26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/1-zlYbRsSE8_lcGlLoB-P9s09gpY.roa
Signing time: Fri 05 May 2023 16:41:05 +0000
ROA not before: Fri 05 May 2023 16:41:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211588
IP address blocks: 217.119.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:c9:dd:8a:4e:38:f6:d6:dd:91:76:16:18:25:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26dc466e56225124ee805885441305662ceb1f23
Validity
Not Before: May 5 16:41:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb39586d1b1213cfe570694ba01f8ff6cd3d8296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:fd:54:ae:92:2d:6d:b7:63:27:e8:9f:5f:
c3:87:ce:95:bc:74:b4:9f:1f:08:c3:77:c2:07:78:
97:de:a0:56:1f:d7:ae:4b:4f:bc:7a:74:ae:cb:80:
36:ff:60:37:45:69:f3:f3:94:61:87:2c:8e:4a:d4:
4a:66:e5:80:f5:60:3a:d3:62:ff:cc:64:3e:bc:5d:
07:b3:f1:83:b3:7a:3f:65:03:8e:a2:6f:13:c9:b7:
fa:63:4a:18:ce:01:48:e3:5d:c2:35:d3:66:07:4a:
06:c6:6f:8f:13:13:3b:a3:e4:38:21:ec:1c:6d:a2:
e0:b8:e2:f7:c5:93:64:a5:f3:75:5c:a6:c9:d4:f7:
7e:05:09:5b:23:01:0a:d3:6f:4f:c0:96:eb:71:37:
2e:e3:4e:6c:71:97:41:7e:c3:a4:66:33:a4:6a:ca:
44:39:7f:52:79:d4:5d:53:0d:7c:e2:c5:f0:d3:96:
2d:a9:d6:f1:ec:42:82:e8:81:e2:08:f6:85:af:f2:
48:b5:e0:e7:b0:38:47:1f:a1:5d:6f:be:36:99:e8:
ff:d7:2c:28:ed:6f:e0:22:4d:92:fc:1a:2f:95:52:
b6:87:c8:d1:cb:7e:85:18:f4:d6:72:e9:b7:ea:2d:
ab:79:72:a2:64:77:49:5b:3e:b2:96:1d:80:a6:77:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:58:6D:1B:12:13:CF:E5:70:69:4B:A0:1F:8F:F6:CD:3D:82:96
X509v3 Authority Key Identifier:
keyid:26:DC:46:6E:56:22:51:24:EE:80:58:85:44:13:05:66:2C:EB:1F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtxGblYiUSTugFiFRBMFZizrHyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/1-zlYbRsSE8_lcGlLoB-P9s09gpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/abf2be-9ee1-4178-be1d-22f628d9f5a3/1/JtxGblYiUSTugFiFRBMFZizrHyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.143.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7b:c2:ff:2b:1f:7c:25:44:4a:72:56:6b:4d:6d:9d:ee:36:
c3:5f:9f:d9:ef:99:13:36:cf:d1:f8:98:ff:df:50:6f:b3:39:
f7:df:e9:d5:29:da:db:81:0f:3c:7b:dd:ad:59:e5:9a:8f:cd:
f1:37:5c:62:c6:93:05:a3:7c:0a:88:3d:70:e3:e1:49:c2:20:
0c:96:9f:85:25:f0:21:c1:3e:86:b8:7a:4c:b8:5d:8c:9c:d1:
1f:73:d6:db:2f:0a:e3:27:0e:4e:72:9f:a5:46:63:6d:12:8c:
a3:7d:85:64:07:d5:30:d5:be:70:3c:0e:b1:6a:e8:a9:3f:ed:
7b:1c:0e:51:00:20:e9:72:89:b5:56:44:a6:a6:df:be:de:21:
01:63:aa:9d:c1:3e:88:43:b5:c0:cf:29:60:a7:92:92:b1:5b:
ec:3a:c1:a6:dc:d0:b0:94:f2:e1:09:ec:1d:17:51:70:aa:21:
30:d3:db:e8:bf:6f:c5:78:a0:a9:c9:2d:88:ed:42:80:92:b0:
e0:ea:45:23:de:3a:55:ed:ad:a2:38:38:4c:4c:f2:c6:42:a5:
31:41:37:f8:97:88:ab:ed:a7:01:9b:0a:b0:87:5c:3d:6d:22:
44:91:74:8e:3d:1b:63:98:ba:5b:9e:fd:92:2c:23:d8:66:de:
38:da:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 15:53:01 2023 by rpki-client on console-ams.rpki-client.org