Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/PofkYeSSLterunoX90x7uqUi_9o.roa
File: PofkYeSSLterunoX90x7uqUi_9o.roa (raw, json)
Hash identifier: 180me/NqfRx69rdDdWkonSBfbrxDAk7AB3sxoLVhAiM=
Subject key identifier: 3E:87:E4:61:E4:92:2E:D7:AB:BA:7A:17:F7:4C:7B:BA:A5:22:FF:DA
Certificate issuer: /CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Certificate serial: 018D8432C21D35B1461DE6568C755EEA19CD
Authority key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/PofkYeSSLterunoX90x7uqUi_9o.roa
Signing time: Wed 07 Feb 2024 15:32:15 +0000
ROA not before: Wed 07 Feb 2024 15:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 217.114.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:32:c2:1d:35:b1:46:1d:e6:56:8c:75:5e:ea:19:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Validity
Not Before: Feb 7 15:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e87e461e4922ed7abba7a17f74c7bbaa522ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:b7:ea:98:9f:69:8b:5a:9e:49:95:91:da:
de:35:60:56:6b:af:ba:f1:84:c1:e0:5b:4e:a0:bf:
7c:7c:be:f0:4f:28:c0:c9:e5:70:ff:79:c1:f6:b2:
c9:87:98:c0:b7:b2:28:cf:87:31:df:02:88:05:7d:
07:2c:bb:a0:c5:c6:33:83:12:e6:5f:fa:b6:01:82:
e3:df:db:9c:b3:a9:9b:90:03:4d:4a:07:d8:13:78:
e2:ec:c3:25:ac:b6:da:d0:6f:c2:46:01:a8:f0:68:
ae:2a:cd:87:75:14:f5:a6:eb:51:04:fa:87:78:2e:
c9:37:91:a6:d0:38:87:2e:93:16:69:28:7b:ad:70:
21:e0:27:3c:ea:4f:7a:b4:6d:0a:0e:b1:fb:ed:4d:
30:50:1c:17:05:0a:9d:6c:1b:dd:3b:fe:75:5d:95:
d6:0f:6a:2c:5b:20:c1:11:c8:d6:69:48:f0:f4:2f:
3e:35:ca:61:30:a7:e7:b0:15:e7:b6:a1:e6:a5:70:
5a:73:cf:61:77:82:4c:44:12:12:19:ef:fa:3e:75:
a7:98:09:39:6b:1b:d1:af:94:93:5e:9c:f9:f0:a3:
a4:c7:09:36:69:c3:e5:2e:47:a2:67:51:28:99:fc:
7b:9c:ea:d7:e6:18:fd:ca:19:47:2d:ac:18:57:cb:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:E4:61:E4:92:2E:D7:AB:BA:7A:17:F7:4C:7B:BA:A5:22:FF:DA
X509v3 Authority Key Identifier:
keyid:19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/PofkYeSSLterunoX90x7uqUi_9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.41.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b0:f4:6a:ee:16:cc:73:d7:06:d4:6e:8c:87:05:ad:1b:45:
81:af:01:c5:e7:58:b2:0d:f0:d7:ff:b3:e5:d6:a1:45:c9:3a:
e0:12:bd:b2:de:3c:98:a0:cd:f7:36:b9:49:0a:fc:b2:9f:95:
06:7b:3f:a5:32:64:66:35:fd:cd:92:3f:38:81:cc:1b:d0:f6:
07:98:a9:2b:e5:fc:e8:1f:52:6b:26:92:f6:0e:b4:d1:26:c5:
c9:ac:9a:ab:40:c0:67:a1:fa:70:85:32:45:57:6c:28:18:11:
8c:26:61:07:d2:f2:10:be:50:a3:63:30:63:4d:bf:fc:cf:93:
c6:66:bf:6d:93:15:d8:a4:4c:7d:b3:bf:0f:d1:95:6c:d9:fa:
55:c7:d6:7d:e9:a9:29:d9:b7:4c:2a:0b:85:9f:34:f3:44:90:
08:18:64:9f:68:10:d0:04:a9:ba:ce:66:c3:24:4b:2f:5b:4d:
de:1a:f7:d2:83:d8:78:0e:4c:f2:76:21:df:81:ad:0f:35:b5:
35:44:5a:ff:d2:e1:70:4a:35:03:c6:4f:ab:f1:4a:7c:0b:3e:
ce:47:da:9d:26:4d:87:d4:99:12:ee:0e:c4:4a:bd:a8:34:c3:
9b:88:0c:77:d9:ed:5d:9c:e0:5e:69:8f:f6:f9:57:8a:a9:cf:
d9:5d:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:15 2024 by rpki-client on console-ams.rpki-client.org