Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/4v2fFuhZRwneDywjKw3BPuS0n6o.roa
File: 4v2fFuhZRwneDywjKw3BPuS0n6o.roa (raw, json)
Hash identifier: C9CX8OMQ6okfzl/lbFMYZiDCt2OtVleCH5Z8KsLb/p8=
Subject key identifier: E2:FD:9F:16:E8:59:47:09:DE:0F:2C:23:2B:0D:C1:3E:E4:B4:9F:AA
Certificate issuer: /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial: 01843EFE187E784538CCE6AB7E6177B1D7B0
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/4v2fFuhZRwneDywjKw3BPuS0n6o.roa
Signing time: Thu 03 Nov 2022 19:35:50 +0000
ROA not before: Thu 03 Nov 2022 19:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 213.109.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:fe:18:7e:78:45:38:cc:e6:ab:7e:61:77:b1:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Validity
Not Before: Nov 3 19:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2fd9f16e8594709de0f2c232b0dc13ee4b49faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:9a:f2:9f:3f:4a:0c:17:de:39:fe:43:70:
c0:c0:bf:04:24:b6:5d:fa:01:41:53:f5:0e:6e:d4:
7b:88:31:8f:24:05:79:8e:2b:2a:40:f5:58:fd:87:
3e:cc:5a:ae:4d:b9:fd:47:9f:6b:33:6b:a4:6f:1f:
20:2a:f5:6d:2e:61:95:cc:e2:83:76:23:fa:75:4c:
fa:b8:ec:3a:96:02:8a:c2:4b:c6:36:cb:93:b1:46:
fa:ae:1c:14:f7:bb:01:55:cb:02:b5:8e:2e:ab:1c:
83:ee:0d:7d:89:4d:d7:a2:21:b1:83:fb:bd:f0:d1:
99:a3:79:bb:e9:ff:88:e7:74:11:ef:c0:8a:73:71:
15:52:ec:ed:d6:1e:89:09:7b:e5:92:4e:4f:1c:e1:
68:69:ff:99:fe:e6:5b:7f:e5:b2:d0:58:ab:85:dc:
81:2a:4c:12:33:f4:cb:a6:fa:57:24:91:c7:1f:31:
6f:7b:18:11:c8:12:dd:ad:94:a3:b3:bf:83:93:4f:
29:20:76:96:72:72:dc:51:67:dc:aa:e1:f0:a1:96:
8e:94:6d:fe:f3:6e:5e:06:24:89:78:7c:13:0a:0e:
0a:a6:ef:ec:3d:44:a7:e5:14:8e:0f:0d:9b:05:2f:
ae:96:f5:18:cc:b3:82:d6:a6:f1:d9:8b:2f:5a:16:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:9F:16:E8:59:47:09:DE:0F:2C:23:2B:0D:C1:3E:E4:B4:9F:AA
X509v3 Authority Key Identifier:
keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/4v2fFuhZRwneDywjKw3BPuS0n6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5b:75:37:b4:54:26:dd:b0:17:88:df:5c:f7:1d:4f:48:91:
77:f5:a0:65:cc:10:51:ee:40:fe:9b:ba:36:76:bf:6d:f7:db:
21:72:bd:68:4d:8c:b2:19:50:98:0c:87:99:ad:00:7d:de:8b:
47:b1:7e:0d:ab:b0:14:0e:53:0d:3d:df:e5:71:18:03:f0:80:
ad:55:38:68:07:c2:0a:a2:e4:dc:13:a9:37:97:b7:aa:fd:10:
45:de:f7:6e:cd:73:49:4a:ac:d2:f4:0d:a4:3e:26:e2:1e:a2:
44:fd:47:f8:77:ca:ad:37:fa:04:f0:0e:03:a8:d9:77:9b:8c:
3c:fa:a6:e9:24:1d:2e:8f:69:ee:f7:25:a0:b5:46:b8:18:d1:
06:cc:a7:d8:32:b5:7c:94:d2:af:bd:61:77:12:a5:10:6a:e5:
80:b7:3c:06:b6:38:a6:e1:3c:73:a3:f6:6e:3a:da:33:e5:bc:
89:9a:f6:4a:64:9c:36:21:8e:60:d3:3e:51:86:c9:c9:ce:5c:
15:ed:ba:8a:f0:93:db:5a:aa:21:64:f0:a7:55:1d:25:e8:49:
0a:27:5d:76:3b:a5:ca:36:50:e8:aa:a0:86:61:5a:4c:a3:92:
ef:cb:51:56:01:f1:7a:dd:a6:db:5e:20:26:81:b0:bf:e9:6a:
8c:fb:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org