Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/dBz_ww5GD2B9NytAz7YVKNoN98U.roa
File: dBz_ww5GD2B9NytAz7YVKNoN98U.roa (raw, json)
Hash identifier: jYOqvqPrSk4ty4WlLG8Aku95XuyIBoVhLW1Hq1DjjUU=
Subject key identifier: 74:1C:FF:C3:0E:46:0F:60:7D:37:2B:40:CF:B6:15:28:DA:0D:F7:C5
Certificate issuer: /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial: 01839A372479DE852533767375D4FAB6A785
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/dBz_ww5GD2B9NytAz7YVKNoN98U.roa
Signing time: Sun 02 Oct 2022 19:40:48 +0000
ROA not before: Sun 02 Oct 2022 19:40:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 213.109.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9a:37:24:79:de:85:25:33:76:73:75:d4:fa:b6:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Validity
Not Before: Oct 2 19:40:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=741cffc30e460f607d372b40cfb61528da0df7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:9c:1e:16:62:06:95:89:a9:79:7f:9c:44:
ab:b5:a2:2c:2f:bd:a3:44:76:61:7e:41:a9:bc:6d:
12:fa:31:1b:3d:54:e2:a8:51:c3:97:b6:1a:ce:38:
bb:db:e5:51:cf:36:f6:34:b1:ff:8d:59:81:ef:96:
fb:57:b3:82:0a:01:92:a3:47:93:fc:79:65:74:d8:
d3:33:59:d3:25:8c:e4:d7:c3:46:47:d4:19:fa:9a:
54:e1:22:b4:f3:c3:70:a8:6c:c4:0e:97:70:1c:4f:
fb:09:d9:6c:be:3b:34:0e:8c:89:6a:14:bf:1a:38:
a4:06:db:e1:63:2c:8c:04:6b:22:32:e4:36:c1:68:
b9:51:8f:03:04:c6:97:96:e9:ec:e8:ae:98:29:5e:
7d:99:3e:51:aa:ac:ff:6b:40:4d:24:41:77:9d:76:
e6:3e:ef:98:09:31:64:a3:74:48:bd:aa:21:d9:7f:
71:68:b4:41:ab:d1:9d:d3:a2:6b:ea:5a:c5:a2:4d:
f9:a5:2b:01:33:a1:93:76:81:0d:6d:90:66:91:5a:
a9:df:fc:38:37:2d:5b:9b:5a:50:cc:d6:be:7d:c2:
6d:37:ac:3e:2c:01:18:e4:45:c5:22:91:b2:18:4a:
a1:bc:01:85:a8:b7:4a:8b:6a:c5:3c:f0:5f:9e:a0:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1C:FF:C3:0E:46:0F:60:7D:37:2B:40:CF:B6:15:28:DA:0D:F7:C5
X509v3 Authority Key Identifier:
keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/dBz_ww5GD2B9NytAz7YVKNoN98U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
39:58:6f:7a:35:bd:95:df:32:35:7f:75:c9:6f:4f:a3:a0:ee:
a6:4e:9b:76:14:58:2a:fb:f2:f2:df:f3:a2:0b:59:ae:fc:e8:
ea:7b:32:69:7b:cb:df:bb:5b:1b:e8:1a:01:05:bf:d3:ae:a0:
29:b3:32:0a:96:b7:8e:6d:b8:6b:a3:0b:9a:e2:2e:16:63:99:
3c:79:30:d5:94:08:2b:b9:53:e0:8e:4f:9b:0e:02:7a:22:b3:
b8:2e:fc:ee:3e:7a:98:86:32:8a:41:cd:7b:76:e9:e0:66:24:
ad:d8:03:19:91:00:73:81:e7:14:59:2c:55:2c:ff:c8:b5:c2:
cd:4d:0f:4c:87:8b:48:94:91:bf:fc:c4:10:27:8b:2d:fc:32:
da:8d:5a:e3:e3:68:93:ba:4f:e9:01:49:82:10:04:86:ba:03:
94:f2:79:2f:19:a4:2b:f1:d2:59:67:63:e3:c0:88:ea:22:75:
f0:72:fb:a4:36:78:d7:63:ff:54:7b:a0:b6:2d:d6:66:9b:fa:
00:87:a3:d6:9b:c9:96:02:60:72:96:3b:c8:72:e4:58:26:2a:
05:bf:95:70:1e:47:07:02:04:60:85:98:f2:f2:05:33:3e:cf:
c4:30:f1:46:ea:0a:f8:54:ed:c1:35:19:d5:56:35:a8:ab:af:
f8:21:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org