Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/5oB0ddVSK7f6nA1dpRe27smb_3c.roa
File: 5oB0ddVSK7f6nA1dpRe27smb_3c.roa (raw, json)
Hash identifier: +qep3q0mIEhnw87Pdv0HaFfK34iWwiFAZPDMUT2otbE=
Subject key identifier: E6:80:74:75:D5:52:2B:B7:FA:9C:0D:5D:A5:17:B6:EE:C9:9B:FF:77
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 54FE09
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/5oB0ddVSK7f6nA1dpRe27smb_3c.roa
Signing time: Thu 17 Mar 2022 09:19:49 +0000
ROA not before: Thu 17 Mar 2022 09:19:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5570057 (0x54fe09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Mar 17 09:19:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6807475d5522bb7fa9c0d5da517b6eec99bff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:6a:0e:a9:c3:0d:70:32:b5:69:84:2e:61:
66:7d:e4:10:96:06:57:f7:a2:4b:b3:f5:07:42:fc:
4d:d9:05:9d:7f:51:7e:d0:68:7e:04:32:06:4a:96:
61:b5:64:65:ed:94:f5:c1:cf:e6:d6:9d:ce:2b:50:
98:76:0e:45:d7:a9:6d:95:b1:46:7b:e0:de:f2:5e:
3d:24:75:1c:64:bd:24:54:88:32:81:21:6e:8d:e8:
b3:f7:9c:71:63:96:a9:30:7f:bb:87:ed:05:c1:97:
8f:be:8d:f8:e9:9c:dc:3f:f5:a9:00:53:e7:f0:25:
31:8f:00:c1:29:26:fc:3b:41:dc:af:01:51:6d:8c:
bd:c6:7e:fe:32:85:d5:fd:06:ba:78:05:d3:c8:72:
c6:ec:bf:7c:86:ac:b0:3e:b1:33:e9:fb:92:0a:e5:
2f:c9:25:dc:53:89:2a:d3:d8:68:09:be:af:c8:73:
fc:ea:df:26:17:44:61:be:d1:b7:d0:fe:52:62:d6:
09:56:9f:a9:69:ac:2e:bb:a4:81:06:f9:7c:f2:9d:
ab:3d:e1:10:41:af:f6:bc:93:ba:5f:4a:0b:c9:73:
ff:e9:3e:f8:5f:a2:1a:e1:49:1f:ca:d8:a4:d7:34:
82:41:ae:1a:84:f6:22:fc:62:4b:96:fa:42:4e:ec:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:74:75:D5:52:2B:B7:FA:9C:0D:5D:A5:17:B6:EE:C9:9B:FF:77
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/5oB0ddVSK7f6nA1dpRe27smb_3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1d:eb:ff:8b:64:d0:ee:a2:72:6f:e5:09:a8:b6:c9:56:75:
15:20:34:3f:f2:47:30:11:a1:fa:5c:0b:28:59:aa:87:f4:6f:
59:d0:f5:f9:2a:8a:9d:c2:7b:78:e0:80:fb:b8:a2:c3:18:7f:
79:d5:7b:a9:e7:4e:cb:a8:9e:57:21:f2:e7:f2:ae:c0:63:c1:
0a:7e:cd:a5:56:07:41:c8:a0:4c:11:64:00:dd:d7:cd:4c:4a:
51:02:c9:e8:ff:e3:e4:4b:bf:ec:08:38:75:21:9c:ce:65:5e:
aa:73:a9:c9:61:26:9a:4b:74:76:bb:74:59:af:35:f6:77:43:
74:30:04:9d:01:bb:6e:d1:d6:55:76:11:de:14:b7:c1:69:fe:
ae:7b:28:8a:30:e4:68:11:36:c3:31:1b:fb:f1:47:42:e7:5b:
c9:2b:4d:65:c2:d8:d7:53:e4:20:34:dc:3e:e2:e0:ee:77:00:
15:80:85:de:c3:87:16:de:5e:e7:e3:7d:65:74:d2:16:8b:6d:
c1:e5:25:04:6d:bb:c6:9f:dd:69:ba:f6:5a:2a:58:eb:cd:41:
24:5f:42:31:fd:b1:03:8e:cc:34:d7:72:17:e4:c4:35:0c:4b:
26:c7:aa:e6:c5:c1:58:38:b4:a9:30:3c:1a:72:bb:d7:45:d6:
84:ca:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org