Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/jCIA3m_GsXFl8MxChk9As2mU5w0.roa
File: jCIA3m_GsXFl8MxChk9As2mU5w0.roa (raw, json)
Hash identifier: vp0AhfL0PN1kiyQhzzrPTW0neQ837Q7iBE209rMdg8A=
Subject key identifier: 8C:22:00:DE:6F:C6:B1:71:65:F0:CC:42:86:4F:40:B3:69:94:E7:0D
Certificate issuer: /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial: 01856DDD5F2F1867B520C1339EE56D474CDD
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/jCIA3m_GsXFl8MxChk9As2mU5w0.roa
Signing time: Sun 01 Jan 2023 15:05:02 +0000
ROA not before: Sun 01 Jan 2023 15:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 213.109.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:5f:2f:18:67:b5:20:c1:33:9e:e5:6d:47:4c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Validity
Not Before: Jan 1 15:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c2200de6fc6b17165f0cc42864f40b36994e70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:78:65:f4:40:38:a3:19:6c:32:13:48:f5:
bf:b9:b5:65:28:aa:00:93:ab:18:41:cf:79:2d:14:
6c:30:72:fb:51:4c:b5:c7:13:31:4f:71:cc:70:49:
76:16:6a:45:57:24:8e:b7:b6:bc:e5:b9:2b:c0:c2:
62:7d:9e:e7:00:f5:5d:8b:2a:0e:b7:2c:e2:2f:99:
8d:fe:68:a8:85:f2:b7:11:ee:42:3d:6d:8a:9b:b6:
93:59:c6:de:b6:c5:bb:17:31:67:88:80:d6:55:96:
6c:97:ce:80:88:02:ac:67:14:68:0f:98:25:d2:b2:
9e:7b:72:97:9c:e3:5f:5e:b7:9e:dc:bf:0a:47:4c:
cc:86:27:ae:1a:dd:14:fd:b8:d1:83:c5:50:69:99:
61:4c:aa:31:60:b3:7e:8c:e4:c3:50:bf:d0:07:d2:
ad:5a:2a:10:12:52:ca:13:6f:7b:05:46:25:aa:71:
a3:71:37:9d:f0:c5:f6:ec:66:c3:09:ab:62:39:d0:
61:1c:12:00:25:eb:c4:ba:89:cf:49:59:4a:dc:76:
54:d1:a0:04:52:65:c1:25:74:21:ba:93:62:c2:eb:
36:aa:fa:0d:f1:0b:7f:24:30:4c:a8:3d:58:4a:8f:
03:92:d1:10:fb:2f:04:8b:6c:04:72:36:8b:20:ca:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:22:00:DE:6F:C6:B1:71:65:F0:CC:42:86:4F:40:B3:69:94:E7:0D
X509v3 Authority Key Identifier:
keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/jCIA3m_GsXFl8MxChk9As2mU5w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e6:af:fe:23:64:1b:9f:28:41:2e:3c:5a:69:87:41:b9:81:
9e:3b:d3:97:94:87:54:fe:83:6a:bb:59:e6:d6:20:8b:b0:c0:
c0:e0:3d:a8:54:92:ad:49:4e:20:23:f0:11:1d:2f:20:1f:e7:
96:cd:86:08:e7:97:e4:8d:85:29:d8:a0:7b:65:62:54:9b:5d:
76:99:08:f1:c9:8c:fd:c3:b3:2f:b0:2f:4f:11:e0:14:29:ed:
5a:26:4e:67:d5:6e:11:a7:1f:72:cf:93:b0:e9:e1:d1:e2:fd:
fe:40:4b:5d:b9:2c:08:6f:22:af:0e:67:30:8f:41:3c:b3:0a:
85:14:75:2e:12:ca:c6:73:ea:13:49:77:1e:fa:3d:93:30:c6:
6d:0c:d6:bb:82:56:85:80:90:ab:6b:a1:33:8c:e4:cb:0d:4a:
87:fa:cd:45:05:b9:7f:4d:cb:a7:3e:37:a3:d1:a9:7d:2b:c8:
78:ef:27:ad:05:22:00:76:d0:61:d0:c1:b4:c5:20:fc:e2:b3:
0b:36:e8:f5:5b:44:ce:4f:a0:5a:37:04:61:d8:13:bd:c7:5f:
e8:c2:7f:76:fb:94:70:d9:58:47:05:8b:8f:5b:5d:e2:88:1c:
5c:9b:0e:11:6f:79:3e:7f:28:f1:dc:85:3f:09:71:4f:6e:fa:
cf:58:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org