Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/T5nQKoi3Dbnxs2oohHlQwFeOOXw.roa
File: T5nQKoi3Dbnxs2oohHlQwFeOOXw.roa (raw, json)
Hash identifier: 9Gty0AmmkCzOAqLT3a0d4BcfLCUXtci+/pSXWjWBlUQ=
Subject key identifier: 4F:99:D0:2A:88:B7:0D:B9:F1:B3:6A:28:84:79:50:C0:57:8E:39:7C
Certificate issuer: /CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Certificate serial: 018543F13ECA841B9C5CC4AB7C04C9B3F9AB
Authority key identifier: 6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/T5nQKoi3Dbnxs2oohHlQwFeOOXw.roa
Signing time: Sat 24 Dec 2022 11:42:41 +0000
ROA not before: Sat 24 Dec 2022 11:42:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210818
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:f1:3e:ca:84:1b:9c:5c:c4:ab:7c:04:c9:b3:f9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Validity
Not Before: Dec 24 11:42:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f99d02a88b70db9f1b36a28847950c0578e397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:69:96:70:67:20:1f:c8:6c:13:d5:bc:66:
b5:15:70:1d:9a:8a:b6:d5:c8:3b:2d:28:fc:e2:69:
a8:96:eb:98:07:0c:cc:5c:93:c6:b8:99:32:b9:d5:
5e:c1:1b:b0:62:27:94:d8:73:cc:2b:64:80:b8:de:
3e:71:e6:0f:4f:14:98:8f:84:8a:19:35:ee:f3:be:
81:97:2e:c7:ef:21:dc:99:6f:86:c2:db:27:1b:e4:
4b:ef:e2:a7:14:38:69:9a:5f:f8:a8:78:7a:96:d2:
63:c7:e1:16:72:ea:7b:01:8f:c1:b7:17:03:f0:e9:
80:ab:f8:e0:fd:3a:63:fe:26:66:06:d3:1c:af:61:
29:8c:80:76:c2:44:9a:24:d7:db:79:b8:a4:5b:a0:
75:de:ea:c4:d4:a7:ae:be:33:5a:fc:c0:cf:d8:7a:
03:c0:1b:46:6c:a3:a8:d4:bb:d4:e4:cd:c0:7f:19:
c3:26:26:a8:d0:8e:c5:63:4f:7d:e9:ab:29:e9:84:
8c:c7:3e:95:b8:4b:ed:64:ee:18:6a:73:df:15:40:
65:90:f2:0b:cc:63:2b:cd:11:03:ef:ab:f5:78:4f:
4d:be:b0:a6:e6:8b:18:c4:64:17:ad:db:c0:54:7c:
0e:35:a8:2e:ca:8b:5a:75:05:b5:ac:1b:ca:38:97:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:99:D0:2A:88:B7:0D:B9:F1:B3:6A:28:84:79:50:C0:57:8E:39:7C
X509v3 Authority Key Identifier:
keyid:6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/T5nQKoi3Dbnxs2oohHlQwFeOOXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7f:06:d2:b3:16:f2:73:e8:c4:2e:0a:e4:cb:72:eb:b6:7a:
d6:68:d6:7f:63:28:c5:89:4c:6f:57:c7:0a:20:36:d0:ca:61:
b7:f5:1f:96:e5:c1:01:d4:41:0b:b0:6a:bd:95:2d:6f:ea:7a:
78:0e:ff:a4:35:83:e5:65:57:90:7f:89:d9:bf:96:38:21:69:
37:c6:3b:bc:ad:c1:56:5d:52:53:68:2a:46:66:f9:23:ff:52:
af:8a:39:37:d0:a6:7e:5f:11:96:74:82:93:a6:79:e9:2d:e4:
f5:97:87:47:d2:23:9a:5f:e8:82:03:6e:8a:43:d4:8e:14:b7:
e3:ec:aa:9d:cb:aa:a5:f7:13:88:7e:4f:cc:e3:fd:63:ec:8d:
21:da:c4:3b:43:be:6a:a3:ac:62:5e:38:ff:5c:23:20:66:f5:
0d:a2:4e:9d:6d:32:7a:0e:1f:cc:97:10:91:06:16:95:6c:fb:
55:50:bf:43:66:ce:8c:8d:0a:26:6e:70:9e:8f:82:a3:0d:b1:
85:e7:19:f1:eb:3c:80:a4:b3:04:8e:b3:20:94:e2:f2:96:eb:
d8:cc:05:8f:d8:c2:a5:ce:4d:35:a6:1f:f4:ea:00:c0:f9:6a:
bc:c6:dc:d0:e6:96:2e:d7:92:46:91:58:bd:4b:00:d7:19:fe:
b1:fe:70:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:21 2024 by rpki-client on console-fra.rpki-client.org