Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/bx4pg0iuZBUzveFBhhZRQB5TLGs.roa
File: bx4pg0iuZBUzveFBhhZRQB5TLGs.roa (raw, json)
Hash identifier: v1DlrUdVcivRQppuUAvVX3BN1/GUvAry3DeuGIICHxs=
Subject key identifier: 6F:1E:29:83:48:AE:64:15:33:BD:E1:41:86:16:51:40:1E:53:2C:6B
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 0188D21B2AAEE30D5EAFF423063E8E6D124A
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/bx4pg0iuZBUzveFBhhZRQB5TLGs.roa
Signing time: Mon 19 Jun 2023 05:22:55 +0000
ROA not before: Mon 19 Jun 2023 05:22:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:1b:2a:ae:e3:0d:5e:af:f4:23:06:3e:8e:6d:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Jun 19 05:22:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f1e298348ae641533bde141861651401e532c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:02:d1:9b:37:0a:79:64:e9:1d:73:8c:6d:
b6:6b:14:a8:1c:65:51:f4:70:62:19:90:90:8f:af:
ba:46:08:ac:f2:00:da:9d:90:fd:4a:f6:c1:3c:2f:
0e:d9:61:5b:c8:c5:1d:86:00:cd:8d:83:cc:ed:63:
61:8d:17:fa:d6:ba:18:32:ff:c8:f1:e0:b5:25:7f:
17:ec:59:bb:a6:6c:56:23:c7:a7:db:9e:d4:7f:4d:
9a:72:d1:be:f1:d5:5c:36:f4:5e:77:4b:05:43:03:
68:37:30:b0:90:b7:f5:63:87:c9:77:f3:7a:de:d3:
72:6c:67:67:15:19:91:46:15:e0:11:a5:81:de:b4:
8a:90:ec:29:28:f1:61:3a:7d:de:d6:71:9f:f3:4c:
7a:5d:f8:7c:a5:8a:ea:28:41:c6:cf:cb:3d:ef:55:
c3:dd:ba:12:42:ba:85:0d:25:ad:09:52:22:80:e5:
3a:bf:00:4f:da:86:48:d1:5f:f9:23:59:d3:01:60:
7b:c2:b3:7f:16:95:b4:4d:f7:8d:7a:a0:86:cc:82:
5e:38:19:bc:d5:d5:20:8e:7a:57:5d:77:9a:10:19:
5d:74:b2:f1:f3:c6:62:6a:6a:e2:5b:d8:0b:33:40:
52:68:5e:62:dc:b8:a7:1e:56:9b:f4:21:cd:b8:f3:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1E:29:83:48:AE:64:15:33:BD:E1:41:86:16:51:40:1E:53:2C:6B
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/bx4pg0iuZBUzveFBhhZRQB5TLGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
53:09:d4:d3:e7:67:b4:f4:ad:93:27:b2:35:fd:1d:5e:3d:c2:
84:c7:63:91:d5:17:f3:89:50:5b:b3:47:72:85:ea:f5:57:5f:
4f:b4:94:01:d4:63:0b:a7:c8:1c:5d:b5:6b:aa:cd:37:74:35:
e4:7e:1d:2e:34:c5:95:78:db:d1:2f:11:37:26:fd:1a:bb:c1:
58:b3:c1:9b:93:f2:f4:eb:86:ea:e8:7a:b2:e4:be:5d:66:1f:
c5:0e:ff:5f:76:40:d7:90:e8:8b:5a:89:d7:c6:4a:2c:14:04:
f1:d6:eb:6f:58:cb:f7:1b:3f:dd:90:97:a4:8e:ff:24:87:97:
e3:0d:dc:b5:c1:35:7d:3c:fa:e0:e0:1b:7c:9d:4e:d6:a9:ab:
75:e7:67:be:ff:a6:49:f9:c4:9c:8b:c5:0c:48:5d:ee:01:3c:
bc:24:77:2d:d4:96:7b:cf:36:8c:47:dd:b4:46:89:29:cc:17:
ee:d7:b1:1b:bf:db:d9:93:ea:cd:09:7b:09:fa:ae:92:be:11:
22:89:9e:fc:60:00:d6:e5:e1:a7:aa:61:2f:6c:c8:e8:08:79:
1d:ac:2d:6e:ea:cb:17:ae:bd:2d:59:27:d3:97:81:e0:55:94:
6a:0e:1f:3f:7d:60:5b:61:24:80:28:fb:70:18:0e:8a:eb:53:
8e:c9:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:09 2024 by rpki-client on console-fra.rpki-client.org