Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/sRE7HTSrQG-XVqqoKsePry-1naY.roa
File: sRE7HTSrQG-XVqqoKsePry-1naY.roa (raw, json)
Hash identifier: 8dCUVbr/CyGtwtpaRt16ARrKhkbEz0SlFgfot0vYS58=
Subject key identifier: B1:11:3B:1D:34:AB:40:6F:97:56:AA:A8:2A:C7:8F:AF:2F:B5:9D:A6
Certificate issuer: /CN=65a854a9bbff13914d051648c11d667c6438b133
Certificate serial: 01329B
Authority key identifier: 65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/sRE7HTSrQG-XVqqoKsePry-1naY.roa
Signing time: Thu 03 Feb 2022 16:54:23 +0000
ROA not before: Thu 03 Feb 2022 16:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 217.119.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78491 (0x1329b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a854a9bbff13914d051648c11d667c6438b133
Validity
Not Before: Feb 3 16:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1113b1d34ab406f9756aaa82ac78faf2fb59da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:63:e4:5d:b7:f9:8c:2f:9b:ff:bc:a5:12:
b4:a4:5c:a1:c1:75:1c:81:7e:8c:c3:ba:b8:54:05:
69:1c:47:22:5b:fc:90:f5:92:8f:a8:07:02:af:58:
54:cf:48:81:43:6e:b9:7d:8c:74:6f:31:3d:e0:6d:
02:9b:1a:2f:3e:97:04:ce:de:7a:83:d8:7b:5d:68:
ea:18:9a:37:77:26:de:c4:00:ac:e0:5e:f0:ed:bc:
a2:6e:1d:bf:b1:cd:d5:a8:66:ba:ff:fa:0f:39:e6:
dd:6e:b7:14:a4:42:d7:17:b9:aa:9c:a0:eb:b4:e1:
70:2b:52:5e:81:b4:1b:d1:67:33:c6:3e:99:2e:c9:
ca:aa:c7:5d:27:3f:da:61:3f:da:b3:73:8d:0f:81:
d6:de:11:0b:1b:2b:dd:ee:12:6e:52:20:16:dc:dd:
a8:f8:eb:3f:99:87:fd:74:74:94:46:27:0a:21:4a:
e7:40:5e:c1:06:49:cf:41:d5:57:4a:4f:56:1f:21:
15:14:56:56:ad:09:ea:6f:32:3d:54:93:7a:92:ed:
22:17:e5:bb:4a:24:3d:5b:88:48:5f:7b:4c:bb:b0:
82:25:d3:20:d8:74:0a:e7:53:b3:8a:b0:32:03:c6:
96:9c:64:e0:f7:04:0f:6b:6a:a9:98:ab:d9:b6:78:
72:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:3B:1D:34:AB:40:6F:97:56:AA:A8:2A:C7:8F:AF:2F:B5:9D:A6
X509v3 Authority Key Identifier:
keyid:65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/sRE7HTSrQG-XVqqoKsePry-1naY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9b:76:0c:e9:64:f0:ac:d3:c5:d3:05:c0:0e:37:bd:bf:21:
67:33:db:51:53:dd:34:00:db:fa:91:95:9f:df:10:47:03:34:
a9:20:e3:f2:64:5d:5f:52:60:22:71:4b:20:0d:7e:01:ac:e4:
16:f6:23:4e:8d:38:6a:c0:27:22:ad:58:80:3a:05:a7:d1:0f:
9d:e1:c1:10:e8:5e:6f:11:e0:a8:56:50:df:99:86:ac:97:7d:
4a:a6:37:c5:5b:38:c3:4a:bf:d4:66:f9:59:f6:78:8f:6f:e3:
12:12:19:ae:61:fa:fa:4b:77:d6:b5:b7:08:32:e9:60:77:7b:
10:95:3b:2f:01:6d:37:9e:d3:cf:7a:9f:6d:71:43:1e:34:8b:
0f:a6:9f:05:c3:88:5c:d5:e6:09:e4:a3:f8:f3:6d:5c:54:5e:
8b:5b:f6:b7:d8:d8:d7:9d:73:76:84:14:40:e8:eb:03:50:65:
dc:7d:34:e5:dc:20:2e:74:3d:88:33:30:98:90:71:0b:f7:89:
11:b4:a7:cb:80:fd:cb:06:15:e4:15:34:2d:f2:ef:b0:e7:d9:
20:42:dc:4c:43:99:79:c3:fd:34:1c:34:0a:4c:47:fc:d5:b8:
0d:9a:ec:ad:13:6b:5b:47:ac:49:f4:86:bc:5c:4e:b3:7f:ad:
95:dd:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:56 2025 by rpki-client