Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/DetetAnz6ipu_zuP6297ns6y1hQ.roa
File: DetetAnz6ipu_zuP6297ns6y1hQ.roa (raw, json)
Hash identifier: Ji4FKNbaeKsOpVWgHfRXso0dg7XZ8upYGuuw5sZm1qE=
Subject key identifier: 0D:EB:5E:B4:09:F3:EA:2A:6E:FF:3B:8F:EB:6F:7B:9E:CE:B2:D6:14
Certificate issuer: /CN=ca9a85c552fcc60839059feadb0519c65c1bdf54
Certificate serial: 01856E14378B699F2A95B07705C23CC5B57E
Authority key identifier: CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/DetetAnz6ipu_zuP6297ns6y1hQ.roa
Signing time: Sun 01 Jan 2023 16:04:56 +0000
ROA not before: Sun 01 Jan 2023 16:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 217.114.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:37:8b:69:9f:2a:95:b0:77:05:c2:3c:c5:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9a85c552fcc60839059feadb0519c65c1bdf54
Validity
Not Before: Jan 1 16:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0deb5eb409f3ea2a6eff3b8feb6f7b9eceb2d614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:cf:44:34:f3:2a:9c:c8:8f:42:07:3c:16:
2a:04:58:23:51:e4:13:51:99:eb:52:1f:d5:6a:98:
94:6b:fd:38:77:05:6d:19:2f:d9:17:aa:7e:e1:01:
41:08:5f:b7:b7:61:37:28:d0:4b:56:bb:44:79:4f:
a6:25:1f:04:65:4d:e0:2b:e1:50:66:3c:e0:9e:44:
93:50:b2:45:97:48:17:a3:97:14:54:34:c6:66:be:
38:85:a8:c9:36:19:29:89:ea:1b:3c:59:08:e2:7c:
58:0e:ac:d9:fd:fd:ca:ad:cc:07:e4:00:22:f4:91:
f3:91:03:a8:40:aa:6c:6a:32:36:25:ed:bf:3a:c7:
ab:7c:9a:8a:81:1e:0a:5e:21:6e:0e:22:ee:d8:3f:
d1:60:4b:b9:7d:92:ad:a1:65:cc:b1:43:d0:e6:e7:
d0:17:f3:a1:23:70:55:b9:c9:1c:d0:36:ab:5a:11:
d2:b7:02:14:e3:1a:1b:da:a9:ec:47:72:46:44:41:
86:48:c6:27:1d:9b:c5:1f:cd:6c:29:a7:9b:61:50:
70:8d:bd:4b:39:09:3a:96:86:d0:b2:9a:7f:bd:de:
24:fa:07:c4:1c:9a:9c:45:f0:61:e6:07:fd:a5:ad:
d1:d7:13:aa:b3:37:9a:dc:75:f3:32:5c:a1:2c:74:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:5E:B4:09:F3:EA:2A:6E:FF:3B:8F:EB:6F:7B:9E:CE:B2:D6:14
X509v3 Authority Key Identifier:
keyid:CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/DetetAnz6ipu_zuP6297ns6y1hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.43.0/24
Signature Algorithm: sha256WithRSAEncryption
83:22:25:78:9b:31:64:20:bd:26:5c:bd:46:23:db:69:e7:51:
3f:f3:5f:91:5f:11:21:46:76:13:24:66:f6:91:f7:ee:8d:3b:
72:86:5a:65:10:21:05:d4:6a:05:77:f7:f7:b6:ab:64:8a:0a:
6f:0d:2d:ea:41:b1:46:bc:e0:8f:dc:28:7b:92:00:d9:15:0f:
f2:54:1f:94:30:0e:bc:cf:33:ad:f6:0a:10:b9:9c:9c:ca:0b:
10:50:67:aa:96:6a:2b:21:a8:4e:b1:03:f6:d0:a4:54:81:63:
2f:06:6f:48:a0:a1:d4:48:d0:78:53:4d:ce:d1:53:30:ca:ae:
0f:48:d5:90:41:a0:72:1e:1f:35:7e:7f:2d:42:88:36:1e:d8:
ac:d6:76:5f:cc:03:d8:44:0e:72:ae:ed:75:39:2c:58:ee:41:
a7:a8:12:2e:18:fe:28:46:cb:a0:f5:e7:29:aa:2c:a6:73:5a:
c6:ea:2c:9c:c9:95:36:4e:ec:1b:a2:f4:0e:d4:c4:42:06:e7:
40:fa:a8:05:bb:8b:04:c3:ea:c6:ca:aa:82:d8:b0:e8:a6:8b:
cd:70:a5:35:0b:a6:90:b0:4a:af:25:46:ca:27:0d:02:ec:b7:
1b:f3:36:fe:73:24:d8:4c:b9:74:a3:c9:37:62:8e:1b:06:d8:
1e:3b:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org