Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/O1VLRUMg8CG4Q0_oBFQFC6w40-E.roa
File: O1VLRUMg8CG4Q0_oBFQFC6w40-E.roa (raw, json)
Hash identifier: wJTl84WWi5zWgkaXCBmIIKPklEzavvAOlV+vYXcvLVk=
Subject key identifier: 3B:55:4B:45:43:20:F0:21:B8:43:4F:E8:04:54:05:0B:AC:38:D3:E1
Certificate issuer: /CN=ca9a85c552fcc60839059feadb0519c65c1bdf54
Certificate serial: 27348A
Authority key identifier: CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/O1VLRUMg8CG4Q0_oBFQFC6w40-E.roa
Signing time: Sat 01 Jan 2022 00:50:16 +0000
ROA not before: Sat 01 Jan 2022 00:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 217.114.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569354 (0x27348a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9a85c552fcc60839059feadb0519c65c1bdf54
Validity
Not Before: Jan 1 00:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b554b454320f021b8434fe80454050bac38d3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:c2:0e:d1:ce:24:69:94:fb:38:d1:3a:a7:
a4:e3:92:18:a5:19:fb:77:3e:47:95:f4:bd:8f:50:
2e:59:7d:e9:09:bc:7e:18:27:80:1b:36:c5:6c:cb:
80:4b:3b:b3:09:c4:7b:65:e5:75:5a:fc:50:c3:99:
1a:f2:5b:00:a1:b8:86:0d:52:a4:ac:3c:14:b4:48:
01:fb:31:7c:6f:c8:d6:5f:0b:63:b9:5a:70:29:8a:
93:03:50:9e:80:20:f3:5a:32:bc:5d:72:52:96:c4:
b2:19:1b:55:b6:db:78:d9:0d:3b:24:56:a6:ec:a1:
3d:a0:46:d8:b5:cc:ca:3e:8f:6d:d6:de:3f:e9:31:
90:e5:39:fb:34:d7:21:44:ec:55:ee:21:ba:1a:91:
00:0c:95:d5:84:14:2f:e1:11:d6:4d:59:70:be:99:
30:ca:61:87:ac:68:ee:88:19:9f:50:70:a3:5f:1a:
b4:53:1c:4c:99:6f:10:da:c4:df:7d:b7:87:98:7d:
58:db:45:0f:19:0e:6b:a0:40:8f:6b:ab:4f:d8:df:
91:19:34:b6:29:6a:a9:97:05:22:73:e7:13:66:82:
78:f6:37:5f:0c:df:e5:72:48:e7:27:43:3a:45:65:
41:bd:2f:cf:44:dc:e1:cd:54:ef:f0:37:7f:d5:0e:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:55:4B:45:43:20:F0:21:B8:43:4F:E8:04:54:05:0B:AC:38:D3:E1
X509v3 Authority Key Identifier:
keyid:CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/O1VLRUMg8CG4Q0_oBFQFC6w40-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.43.0/24
Signature Algorithm: sha256WithRSAEncryption
60:93:78:8a:0a:e9:2e:19:95:92:75:b0:ef:c9:91:65:e2:71:
88:e7:05:3a:4d:94:0a:a4:c1:ac:9c:e5:80:74:35:b1:61:92:
33:99:65:b3:66:88:f1:52:66:86:0f:a0:47:88:17:af:c4:d2:
0d:74:3a:de:e0:65:60:7d:33:af:c1:d2:a5:37:4f:94:b7:4a:
3c:39:cb:f5:42:79:4f:f0:17:17:b1:66:44:e5:80:6a:d8:ee:
1a:f9:51:5d:f5:dc:cb:a1:04:cc:ef:6f:bf:83:c3:75:06:cc:
f8:26:df:40:34:bd:6a:5f:67:10:19:08:be:e4:1b:2c:85:3f:
3a:ba:ff:0b:47:28:65:1f:fb:b8:25:fb:f6:f5:b2:26:39:99:
b3:cb:49:35:b9:b6:b1:00:11:dc:31:54:74:c8:c4:96:1c:a4:
d6:51:e3:ea:53:92:e8:b8:fe:cf:79:67:95:a5:9e:82:29:c8:
dc:d0:b7:b5:3a:3f:13:54:8f:b6:15:bc:37:9d:bd:5f:56:1e:
6f:a2:36:8b:d0:ed:36:1f:99:30:b5:da:2c:73:1b:19:c6:cb:
8e:d4:c1:6f:1e:8d:51:47:f3:cb:49:4e:de:c6:0f:9d:ec:39:
21:eb:2d:e9:4a:1b:37:d2:a1:7e:88:bd:4c:9d:34:63:d1:db:
0a:7b:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org