Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/uE0mfiS23pS0eTT99JRz50AiFiY.roa
File: uE0mfiS23pS0eTT99JRz50AiFiY.roa (raw, json)
Hash identifier: nuHvbg9oVjV/HVDLXCPyzGYbAk+5C0VMgtGy/RocShI=
Subject key identifier: B8:4D:26:7E:24:B6:DE:94:B4:79:34:FD:F4:94:73:E7:40:22:16:26
Certificate issuer: /CN=19f726559adb811cef149b7204e2218ba7a8d5bb
Certificate serial: 0187744C4841B0A72EE975222562A8185A61
Authority key identifier: 19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/uE0mfiS23pS0eTT99JRz50AiFiY.roa
Signing time: Wed 12 Apr 2023 07:09:28 +0000
ROA not before: Wed 12 Apr 2023 07:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 217.119.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:4c:48:41:b0:a7:2e:e9:75:22:25:62:a8:18:5a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f726559adb811cef149b7204e2218ba7a8d5bb
Validity
Not Before: Apr 12 07:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b84d267e24b6de94b47934fdf49473e740221626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:25:ea:69:76:8b:3d:73:20:7e:72:49:26:
49:40:dd:19:cc:7c:7c:f0:ae:75:cd:1f:ca:bd:0e:
61:b4:cb:5c:c6:a2:11:3c:c2:9e:d2:50:d0:d1:eb:
8f:4c:79:ad:85:a2:51:9d:3b:73:52:fa:7c:45:26:
02:7b:0f:8c:48:27:ac:00:f3:1f:d1:11:97:cf:bf:
b8:d5:2b:d0:90:42:28:4b:f8:55:2f:be:2b:73:44:
04:08:e7:b9:62:b5:c0:41:4a:68:56:70:05:56:4b:
3b:29:49:fd:b0:bf:5e:c6:17:97:a4:47:6e:b4:a7:
e8:0a:37:eb:a7:c7:40:ed:0a:ad:a0:a2:ea:53:bc:
9f:2c:ec:44:a6:18:24:d0:bf:b9:fa:69:fb:b7:48:
21:a4:f3:6e:5e:a0:53:cd:11:98:9d:bc:f1:d5:8f:
65:20:47:ea:ba:20:32:c2:af:c5:8d:63:dc:c0:5e:
f0:42:03:47:dd:89:28:ee:06:b6:53:f1:6e:ee:2d:
de:6c:b6:dd:a3:ce:7b:36:3f:97:33:06:0e:38:b9:
86:82:50:cb:33:64:37:f5:86:86:24:d6:cf:d5:43:
23:20:72:24:66:66:e9:44:0f:ea:a3:4e:29:49:eb:
14:7a:ed:42:19:5d:aa:04:98:80:44:2b:ba:bb:ea:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4D:26:7E:24:B6:DE:94:B4:79:34:FD:F4:94:73:E7:40:22:16:26
X509v3 Authority Key Identifier:
keyid:19:F7:26:55:9A:DB:81:1C:EF:14:9B:72:04:E2:21:8B:A7:A8:D5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfcmVZrbgRzvFJtyBOIhi6eo1bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/uE0mfiS23pS0eTT99JRz50AiFiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ec0330-2ea8-4c4f-9c59-111453c99b63/1/GfcmVZrbgRzvFJtyBOIhi6eo1bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:11:61:fa:29:2e:b5:a4:28:01:a8:ef:23:1e:59:b2:12:e4:
6e:25:a5:ee:36:bc:3b:22:57:3f:9d:43:49:46:15:3d:18:20:
83:56:aa:49:85:9f:4a:41:2d:08:2c:74:54:ff:c6:11:9f:13:
d9:c1:d9:06:4e:47:b0:f9:5a:58:2f:f5:68:aa:6f:ec:4d:69:
ac:61:73:f9:53:d5:df:35:b0:0b:28:13:59:18:f8:42:d0:74:
82:a0:45:b7:51:4f:82:d4:12:ab:55:64:04:92:1b:8e:2a:5f:
3f:55:3c:e2:db:9b:bf:b0:ab:47:e1:c4:29:58:ea:fb:50:32:
40:56:68:8e:13:ee:bc:91:86:37:f0:7a:e6:ab:5e:51:33:7a:
b6:5e:72:87:08:e7:e7:f0:93:b7:54:64:27:47:b6:f3:49:44:
4a:6f:92:de:fb:64:86:7a:3d:58:a5:c8:0d:c3:22:73:fb:70:
3d:f8:c7:b4:38:71:64:06:9c:a9:ed:09:0e:c5:b9:e4:5e:3f:
cf:1a:d2:0e:51:9a:7b:af:2d:33:85:dd:cf:95:fc:4e:b5:a8:
ed:6f:dd:f2:3c:7b:f1:39:cc:74:0f:d5:6b:e6:cf:89:19:81:
64:e6:c0:ec:c0:55:1f:61:04:52:24:ae:af:54:cf:29:5e:57:
54:c6:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 12:55:41 2023 by rpki-client on console-fra.rpki-client.org