Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/F7hDFgy2-Ut-5JLq-wivybTSOro.roa
File: F7hDFgy2-Ut-5JLq-wivybTSOro.roa (raw, json)
Hash identifier: 3w8D5XT16JlX8MjGWVGP3RbojtlTOEzWSqmmN6s9NbI=
Subject key identifier: 17:B8:43:16:0C:B6:F9:4B:7E:E4:92:EA:FB:08:AF:C9:B4:D2:3A:BA
Certificate issuer: /CN=0797c6ad41e69667fb8fabd223c8baa88dfc5090
Certificate serial: 01856F66CBD8024D769843805D8571E6BE15
Authority key identifier: 07:97:C6:AD:41:E6:96:67:FB:8F:AB:D2:23:C8:BA:A8:8D:FC:50:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5fGrUHmlmf7j6vSI8i6qI38UJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/F7hDFgy2-Ut-5JLq-wivybTSOro.roa
Signing time: Sun 01 Jan 2023 22:14:45 +0000
ROA not before: Sun 01 Jan 2023 22:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 213.5.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:cb:d8:02:4d:76:98:43:80:5d:85:71:e6:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0797c6ad41e69667fb8fabd223c8baa88dfc5090
Validity
Not Before: Jan 1 22:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17b843160cb6f94b7ee492eafb08afc9b4d23aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:98:aa:72:cb:c3:13:2b:40:59:d5:e8:bb:
27:94:cf:1f:9a:d7:18:83:24:f5:b6:46:7a:95:b0:
8f:af:2c:95:f2:0a:6d:59:45:6b:ba:8b:a9:9b:87:
89:99:2f:c1:79:45:b7:41:81:1c:a2:3a:b5:72:fd:
b2:c6:7f:62:1e:81:ed:f5:3a:82:6e:ac:89:9b:fb:
6b:d9:69:90:56:4f:ed:e6:e3:df:34:09:fc:1b:36:
0f:e5:19:cf:69:2f:0d:9d:e7:e2:e6:49:61:c3:b3:
2e:6f:ed:9b:22:07:72:7e:ca:89:b6:e9:04:71:4c:
1a:a0:bd:3c:4d:5e:19:6b:76:90:0c:1c:55:76:3e:
d0:66:f8:78:63:db:b6:5f:1f:f1:38:f7:b6:49:27:
e2:1d:e6:9e:36:2d:5c:cc:4d:5d:69:b4:f2:5f:07:
c9:7d:4a:bb:84:d4:e2:2e:6d:57:c2:39:4b:6e:9d:
41:87:f7:ca:d8:a5:83:5e:13:9a:d9:62:77:d4:e2:
6e:8a:b3:dd:83:ed:e1:0e:ca:3a:c1:8d:fd:fb:dd:
75:2b:7f:d9:4a:e7:91:4a:7f:0c:f4:38:e9:5e:f3:
c8:e5:e9:2b:84:fb:48:4f:26:1f:47:33:b4:1b:7d:
88:b8:a4:8e:ad:c0:22:34:8c:0c:ff:c7:2a:bd:f8:
55:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:43:16:0C:B6:F9:4B:7E:E4:92:EA:FB:08:AF:C9:B4:D2:3A:BA
X509v3 Authority Key Identifier:
keyid:07:97:C6:AD:41:E6:96:67:FB:8F:AB:D2:23:C8:BA:A8:8D:FC:50:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5fGrUHmlmf7j6vSI8i6qI38UJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/F7hDFgy2-Ut-5JLq-wivybTSOro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ecc9bd-89ab-49e2-ab9b-0a47e0aaa895/1/B5fGrUHmlmf7j6vSI8i6qI38UJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.129.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9c:12:dd:60:94:78:3a:fe:5f:d9:2a:ce:67:be:09:28:de:
aa:70:92:8b:16:b1:40:2c:6a:de:2e:6e:30:d0:10:56:02:96:
9c:14:f7:74:7e:7b:f8:af:0a:6a:83:49:b1:f3:b6:b2:79:10:
fc:ef:ce:eb:1f:00:2a:70:ba:5f:68:03:04:52:d2:24:24:15:
05:22:4d:2a:5a:49:90:b4:47:3e:e6:6f:85:cb:03:c2:6e:27:
b7:4b:4e:ef:58:3b:ee:3b:23:b7:d2:14:74:29:0c:72:41:ea:
23:54:80:cc:c5:b6:58:de:da:f4:08:5d:ae:f1:e8:31:06:31:
d7:f5:71:cd:1f:e3:78:04:f7:41:0d:24:5b:ad:b9:e4:2d:fe:
6d:fb:2e:f1:13:74:83:4c:44:c9:21:08:f0:1d:fd:62:ba:bc:
51:e9:79:1c:d1:23:37:87:f7:31:48:e5:c1:c0:c7:c7:4d:aa:
5d:a9:d1:ea:cc:4e:62:9e:ed:5a:03:db:e3:60:ee:2b:27:06:
a8:13:5f:1f:34:f1:0f:55:02:bc:f9:de:91:4a:53:a3:bc:63:
11:70:7f:1f:45:d9:b0:e8:d8:5f:38:90:35:76:9c:4e:9f:c6:
99:aa:6d:70:62:b5:9c:de:3c:2e:6a:cd:60:d0:4a:00:b3:e5:
e6:d5:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org