Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/V3FgOi24tl35kA1Gt-IVNYJ0P7s.roa
File: V3FgOi24tl35kA1Gt-IVNYJ0P7s.roa (raw, json)
Hash identifier: cnyJucw66z0gG5KJGd4dSlq6EPJP2rUmkLhi8CsM+jw=
Subject key identifier: 57:71:60:3A:2D:B8:B6:5D:F9:90:0D:46:B7:E2:15:35:82:74:3F:BB
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 02CD85
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/V3FgOi24tl35kA1Gt-IVNYJ0P7s.roa
Signing time: Thu 10 Feb 2022 14:40:20 +0000
ROA not before: Thu 10 Feb 2022 14:40:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183685 (0x2cd85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Feb 10 14:40:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5771603a2db8b65df9900d46b7e2153582743fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:73:21:f3:cc:e5:00:1c:0a:e5:fc:82:47:
a9:8e:47:ee:72:2e:3f:17:04:94:44:ae:4f:a4:02:
ea:84:e1:9f:04:02:5e:9c:f6:cc:0e:cf:d4:d5:7c:
d9:16:cf:d0:a2:d7:0d:fa:c7:3e:9a:aa:45:32:30:
31:9d:b5:61:1e:e4:a8:d0:4f:4f:0c:66:a5:eb:3d:
ba:c9:a5:66:1e:66:2a:97:b5:30:a9:9e:e5:b9:29:
43:25:9c:e6:a9:09:42:8c:fb:06:bb:ab:e3:04:35:
27:cc:e3:ad:2d:84:f3:a7:53:8a:8e:f9:06:9f:d8:
c9:30:94:10:a0:1d:5f:de:bf:0d:5e:88:e1:71:cc:
fb:fc:34:1d:98:ed:35:ce:1a:09:04:30:87:f9:b5:
06:ef:69:fb:95:22:6e:77:b7:91:a9:6f:99:c3:96:
4f:84:75:76:0e:39:cc:b7:66:59:b5:a0:a8:0c:ff:
78:fb:59:c9:f4:ca:8f:29:6e:55:c7:bb:ec:1c:17:
49:4a:1f:a4:07:93:ae:3a:10:de:55:6e:86:db:04:
0d:67:b2:ab:54:88:d3:22:7c:a1:0a:c4:c0:8b:13:
ee:dd:98:ef:78:c6:fe:bf:aa:fc:7d:d5:24:a0:7b:
e0:31:6b:07:b5:2e:51:0a:9d:6c:d8:c0:6f:fb:1c:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:60:3A:2D:B8:B6:5D:F9:90:0D:46:B7:E2:15:35:82:74:3F:BB
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/V3FgOi24tl35kA1Gt-IVNYJ0P7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:22:82:87:87:28:e6:c8:18:77:62:cb:2b:81:29:6a:2b:61:
25:da:35:fe:5f:e8:91:7a:cf:34:0f:36:1c:48:8a:e3:b9:31:
29:15:65:f7:5f:b8:31:06:8c:ae:f6:e9:47:1f:15:a0:de:0f:
76:fa:e3:87:00:90:58:87:6c:b5:1e:95:d6:3c:86:61:0c:d7:
64:1b:18:24:26:f7:f4:99:59:a6:19:da:d4:d4:94:68:35:38:
f2:1d:93:fd:41:67:ef:87:df:ca:7e:7e:60:ea:cc:92:1c:0e:
4f:0f:7e:2f:a4:e6:c4:66:9d:8c:97:5a:5f:fd:a0:54:f0:5c:
65:ce:29:15:b4:97:ff:2b:ed:02:cd:0b:1f:db:b1:64:36:26:
60:52:af:0d:18:50:4c:f2:37:9a:74:8f:a5:3c:4e:8d:c9:44:
34:61:b9:07:8b:a5:97:a3:f1:c7:de:81:10:3c:e9:ff:cc:67:
55:69:6a:a5:6e:5b:45:c9:77:fc:28:4c:6d:5b:5f:5e:40:8f:
e3:ff:86:52:9d:2e:fa:34:20:31:1e:c9:bb:4f:b6:f2:24:c2:
69:93:c4:b8:9c:f2:11:79:ea:62:2a:82:4b:82:99:92:00:0e:
a8:7c:33:18:7a:e4:57:bd:d5:7e:c4:02:d3:e5:0b:e1:96:68:
f6:7a:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:06 2025 by rpki-client