Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/8ntjbL76NSSew7SIv0iKNwMn3CQ.roa
File: 8ntjbL76NSSew7SIv0iKNwMn3CQ.roa (raw, json)
Hash identifier: bm/wkW3Mx82bBQXHNXPLp65iRJUeAgp3rRWQtolIpbA=
Subject key identifier: F2:7B:63:6C:BE:FA:35:24:9E:C3:B4:88:BF:48:8A:37:03:27:DC:24
Certificate issuer: /CN=15b1d17f83fe842745c4cd23e1f1a1ecb9cd3392
Certificate serial: 01857042A369FE12AA61EABDD81AD09EEB42
Authority key identifier: 15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/8ntjbL76NSSew7SIv0iKNwMn3CQ.roa
Signing time: Mon 02 Jan 2023 02:14:53 +0000
ROA not before: Mon 02 Jan 2023 02:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 217.8.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a3:69:fe:12:aa:61:ea:bd:d8:1a:d0:9e:eb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b1d17f83fe842745c4cd23e1f1a1ecb9cd3392
Validity
Not Before: Jan 2 02:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27b636cbefa35249ec3b488bf488a370327dc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:29:12:98:86:b8:57:3d:23:02:5a:f7:c2:
f2:d0:3b:38:3a:e6:7e:8b:f4:cf:97:30:7d:a8:3b:
6a:c1:48:ea:58:f3:f9:5a:a0:2c:09:45:5b:77:93:
20:2e:8c:39:93:6a:9a:c6:9b:04:51:6b:a1:2e:56:
b2:ac:69:14:a9:45:b6:3e:a1:9a:59:1a:ba:d7:2b:
27:49:47:98:bb:90:fe:c3:66:b4:42:b9:5f:c1:e1:
af:2f:67:c9:d8:c2:c9:e1:bd:0a:72:08:3d:1b:bc:
c1:49:09:40:3e:69:32:7d:c1:da:c7:8b:23:32:20:
71:f8:4f:a3:77:22:a3:52:da:43:09:51:ed:1c:2b:
77:b6:6f:43:e5:34:45:9a:93:72:dc:75:9b:20:44:
45:a1:1c:c3:da:48:4c:ad:13:d5:36:53:a5:7e:e5:
5e:63:07:f2:35:fc:f1:07:9e:1f:4b:19:4f:e5:b4:
6a:16:dc:40:3b:f4:c7:22:15:4a:df:7e:57:8a:06:
05:13:9c:44:33:8f:c2:5f:0e:5e:48:da:14:94:64:
05:90:67:cf:a7:b7:b5:87:a6:dd:3d:e4:54:c0:6b:
9e:48:28:9a:6c:da:98:86:48:fd:0f:dd:1c:b6:47:
91:4e:4d:a3:1e:86:7a:25:da:09:52:37:36:5f:d5:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:63:6C:BE:FA:35:24:9E:C3:B4:88:BF:48:8A:37:03:27:DC:24
X509v3 Authority Key Identifier:
keyid:15:B1:D1:7F:83:FE:84:27:45:C4:CD:23:E1:F1:A1:EC:B9:CD:33:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbHRf4P-hCdFxM0j4fGh7LnNM5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/8ntjbL76NSSew7SIv0iKNwMn3CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e9cb7a-2461-4f65-a994-a9086f74dd8f/1/FbHRf4P-hCdFxM0j4fGh7LnNM5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d2:3c:b5:92:de:cc:4f:48:f2:95:23:c7:2b:97:57:31:06:
0a:3f:0c:06:98:0f:ae:93:9f:f8:93:7c:36:cc:cd:84:0c:0e:
cb:87:ab:5a:4c:67:46:e2:66:6a:22:af:e8:7f:e7:51:ae:b2:
cc:ac:a9:c7:be:0d:c7:bc:67:c0:8f:48:09:a8:f4:d5:7d:b5:
02:2e:e3:0a:42:5d:af:1d:e7:eb:ed:28:97:a5:42:3e:2e:c9:
b2:98:a1:15:19:1e:e5:55:d1:5d:b8:0c:89:69:67:e3:e2:17:
33:ff:4a:9c:a2:05:e5:78:c7:32:62:c4:61:bc:86:17:1e:3b:
e0:c7:c9:33:88:32:07:1e:45:42:12:85:47:9a:3d:69:7e:76:
5c:1f:5e:23:a4:2b:88:eb:2e:3f:7a:b9:3e:53:5a:ca:5d:f3:
03:96:30:11:f2:6e:9f:27:40:87:00:10:60:e8:d6:c0:62:f8:
b4:85:07:44:d3:4b:06:84:c1:6f:b3:51:50:17:37:fc:66:4d:
27:25:63:ec:41:d5:dd:97:1c:3c:f9:07:36:07:da:7b:f8:24:
4b:35:75:7e:28:3c:62:5e:62:59:a6:3b:a4:6a:db:6d:a3:b7:
cb:b8:62:e8:c6:ea:eb:d0:04:d8:50:6d:1a:f2:b8:7a:d2:ad:
58:cc:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 13:54:26 2023 by rpki-client on console-fra.rpki-client.org