Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/XDNtkQfveHBwG3SsttWp3WkDNIU.roa
File: XDNtkQfveHBwG3SsttWp3WkDNIU.roa (raw, json)
Hash identifier: eLS8AW9D9FTZpyPjrggqqNRzfqtWZ1jglQcI22qsaFM=
Subject key identifier: 5C:33:6D:91:07:EF:78:70:70:1B:74:AC:B6:D5:A9:DD:69:03:34:85
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 018465BB4836E8249D52A51E79C1F5D2D3E3
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/XDNtkQfveHBwG3SsttWp3WkDNIU.roa
Signing time: Fri 11 Nov 2022 08:08:03 +0000
ROA not before: Fri 11 Nov 2022 08:08:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:bb:48:36:e8:24:9d:52:a5:1e:79:c1:f5:d2:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Nov 11 08:08:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c336d9107ef7870701b74acb6d5a9dd69033485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:47:a1:a3:bb:05:50:cd:ac:09:8b:fb:39:
d8:2c:7c:2c:d5:63:0a:9b:0c:4b:b9:23:da:ba:af:
53:dd:15:b0:d1:8d:79:6f:50:61:46:ff:82:17:46:
05:e7:ce:9e:d7:7e:01:b3:4e:6f:f4:08:57:d9:90:
8e:48:62:6e:02:4e:b9:ec:20:f2:42:3f:84:d1:5b:
d5:dc:d2:33:1f:62:55:ea:39:eb:5c:b7:48:2d:83:
94:b6:c9:25:81:49:f5:c9:cb:63:32:b4:30:5e:aa:
f4:59:c2:24:da:ed:8a:ac:1e:fe:af:c1:0e:56:b0:
4c:50:f6:93:a8:bb:26:8e:a3:ba:6e:77:bb:c7:a2:
b4:99:8a:74:8e:45:91:75:b5:09:fc:3b:4f:8d:1a:
51:ad:db:37:17:e9:06:57:6c:b1:97:c7:cc:e1:f2:
12:92:52:0d:a1:85:05:58:24:70:02:82:48:a3:3e:
75:3a:ce:26:2c:0b:26:35:43:f2:42:68:52:db:27:
bb:c1:e5:23:57:10:5c:97:73:6a:27:6b:ef:b9:6e:
0d:f1:c6:ef:c6:fc:34:34:d6:33:b8:36:6e:39:37:
6a:46:5a:35:0e:9b:cc:6b:72:07:97:b7:3f:e2:9a:
1f:ab:85:15:ab:99:ae:99:db:ea:64:83:18:82:d2:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:33:6D:91:07:EF:78:70:70:1B:74:AC:B6:D5:A9:DD:69:03:34:85
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/XDNtkQfveHBwG3SsttWp3WkDNIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:cf:80:e6:bb:4e:78:0c:e1:ea:cc:66:e1:ec:b0:c9:21:db:
c6:91:71:bb:4e:11:78:a7:a0:f7:09:dd:2e:2a:72:41:47:94:
e3:d3:e3:a5:02:c4:ec:c1:db:c0:9f:f9:d2:69:dc:4c:98:1a:
18:53:e0:59:e6:dc:7b:41:2d:17:f8:98:6c:01:c3:30:fd:64:
36:11:85:51:c2:9e:ee:58:fa:d9:ce:1a:05:19:d5:6a:af:cb:
40:64:8c:f5:bc:f4:5a:b4:8e:77:b6:c2:d7:5b:0d:46:dc:2e:
64:b3:5d:b6:7e:ed:c3:ad:6d:1a:2c:6a:ba:aa:14:4e:6c:44:
e3:92:1c:7c:0a:76:b0:7e:94:8a:08:59:b0:c5:6f:f2:57:8a:
6c:24:ed:8e:0d:fd:69:c2:57:85:07:f5:68:07:b4:d0:ef:b6:
4b:44:5d:45:25:f4:2f:a7:e7:b0:fc:ae:0f:97:15:80:93:ab:
e7:3f:5d:53:e8:97:cd:dc:3d:c4:06:21:b5:29:06:3b:a9:9c:
78:02:f4:5c:b8:31:83:7e:90:c8:9f:c0:21:69:1f:d4:27:91:
3a:ec:0a:34:81:81:f8:00:1c:59:8f:b5:fe:bb:48:b0:5b:c5:
9a:89:31:41:37:3c:61:5a:f1:22:96:b6:d7:1a:55:c6:e8:a0:
68:bf:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org