Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/kIrbpKAai_lOY8TQMohDCLGhcqE.roa
File: kIrbpKAai_lOY8TQMohDCLGhcqE.roa (raw, json)
Hash identifier: 6YkIaiB3qv1TGmR2ttKHgIxzG46O+T2WW/seCTNtrtw=
Subject key identifier: 90:8A:DB:A4:A0:1A:8B:F9:4E:63:C4:D0:32:88:43:08:B1:A1:72:A1
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018CC8010BAFB3CFE71C0F2765E2BA6DC41D
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/kIrbpKAai_lOY8TQMohDCLGhcqE.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209976
IP address blocks: 217.28.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0b:af:b3:cf:e7:1c:0f:27:65:e2:ba:6d:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=908adba4a01a8bf94e63c4d032884308b1a172a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:d4:cf:8e:f4:5d:07:28:83:77:2b:a8:38:
1a:34:23:ab:e3:7f:14:64:48:7a:8f:2e:9b:dd:a6:
fd:27:97:5e:ef:de:31:c4:79:4a:1a:32:3f:f6:0b:
58:98:e1:83:a8:d1:14:bd:83:e9:90:58:18:74:19:
9f:be:84:b9:d9:f4:04:0a:60:b8:f1:f8:69:7e:23:
b7:f7:80:a5:42:ba:0b:34:3f:b5:8a:64:fc:da:95:
17:11:50:65:ec:29:81:12:4a:98:e0:4f:22:b6:64:
fc:cc:99:fb:9d:bc:12:3d:f5:9a:2f:4f:ae:42:10:
6f:0e:21:62:13:d8:32:83:37:25:b9:51:c7:b7:41:
59:9e:9a:16:70:00:33:fb:89:97:ac:0f:c8:ac:6b:
7a:13:6b:c9:31:08:e8:6f:8d:c8:75:cb:a4:de:40:
d4:c2:a4:76:3c:7f:6a:a8:3d:bf:f1:c1:d1:19:44:
0a:a0:04:99:67:80:83:72:61:65:8c:a7:12:66:e1:
b4:e6:d3:0f:52:a2:01:98:16:ba:3d:29:24:bd:0f:
f8:8a:f5:7e:b1:c7:c1:e5:88:74:f4:d1:a9:5d:04:
91:59:2f:85:74:91:b0:e9:64:99:40:66:4a:bb:04:
0c:f2:c9:23:9c:e3:49:31:11:cb:b7:c5:9d:69:8b:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:DB:A4:A0:1A:8B:F9:4E:63:C4:D0:32:88:43:08:B1:A1:72:A1
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/kIrbpKAai_lOY8TQMohDCLGhcqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6e:84:b2:8b:0c:b4:b2:64:2d:ce:0e:6c:7e:39:f7:9c:9e:
04:c0:92:ea:b2:8e:89:e9:a6:24:c3:a8:74:c5:b3:d2:35:4e:
c8:45:05:ad:28:be:b1:d6:b9:04:6d:02:52:d9:e2:29:c8:9e:
7d:59:f2:0e:14:f3:e8:1b:9f:e5:e0:d4:8a:98:27:65:a8:1d:
bb:92:b3:50:b3:de:b0:23:bd:5f:44:61:8f:22:e4:c1:45:c0:
b6:6a:fb:88:1b:e8:4b:41:cc:cd:ab:f5:61:7c:3a:00:42:b7:
4d:c1:55:3f:13:9e:0b:74:4e:47:af:63:aa:41:a5:2e:ae:fc:
eb:ce:39:a6:5e:e9:04:28:45:7e:f8:94:09:e1:0e:6d:a1:f7:
da:4f:fa:85:e5:11:7f:66:63:a4:74:c6:50:dd:e8:4e:09:5d:
9b:11:cf:03:07:5f:07:1f:13:79:44:73:93:a9:d1:fa:f0:d4:
ac:1a:48:21:89:57:f4:4a:58:43:cb:46:ac:73:8c:24:3c:60:
cc:40:d7:cb:da:29:03:b4:c0:96:ad:76:de:7a:be:e3:ff:cb:
e0:69:42:73:fb:3f:53:d0:64:4e:fd:13:92:06:a0:79:d4:23:
a5:cf:ed:a2:37:87:1b:b2:b3:fc:86:b8:0d:f1:b8:8f:25:e3:
56:b3:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 16:40:16 2024 by rpki-client on console-ams.rpki-client.org