Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/gLOVa8hkSVKEUQo3nbBqWX3Fj4o.roa
File: gLOVa8hkSVKEUQo3nbBqWX3Fj4o.roa (raw, json)
Hash identifier: 9cyU4P5b919jMlOrkRMzKSzK7pQWQNGJuTy6RZvmMMc=
Subject key identifier: 80:B3:95:6B:C8:64:49:52:84:51:0A:37:9D:B0:6A:59:7D:C5:8F:8A
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 018284670B52499FB09AFFAC70B59350A4F4
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/gLOVa8hkSVKEUQo3nbBqWX3Fj4o.roa
Signing time: Tue 09 Aug 2022 20:58:41 +0000
ROA not before: Tue 09 Aug 2022 20:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:67:0b:52:49:9f:b0:9a:ff:ac:70:b5:93:50:a4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Aug 9 20:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b3956bc864495284510a379db06a597dc58f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:ac:2b:7c:e8:e4:df:60:12:da:9c:d0:9d:
c2:c1:01:96:1a:88:74:27:5b:14:d3:cb:ca:bc:2e:
bc:72:48:21:d3:f0:60:91:a4:b5:ea:4f:6d:a1:1b:
a2:1a:55:47:04:9f:08:22:35:82:20:25:26:f6:b8:
e8:8d:e5:75:02:85:4a:ae:ae:fd:1f:8f:19:03:a4:
0a:34:19:46:5e:8f:7d:a3:72:41:f3:4a:ae:0e:ea:
d4:31:34:8d:3c:0c:0b:5d:04:ec:d1:d6:74:7f:0c:
bf:c5:19:f2:82:f6:08:44:c1:b7:4d:ac:c5:1c:89:
9a:fb:38:f4:1a:89:8f:34:f3:91:41:1d:86:81:4a:
f2:6a:1c:71:29:df:5b:cb:7e:8e:a0:33:35:c5:aa:
99:12:a2:cf:36:d4:5a:77:09:5d:19:59:1c:f4:9b:
56:8e:3e:91:f9:59:0b:e9:22:3f:40:73:dc:de:bd:
2b:2b:d3:4c:ed:8a:ae:ab:ba:73:d1:b6:ad:95:36:
64:7d:e8:07:06:68:a8:96:a3:21:8f:7c:29:0b:25:
00:67:07:05:e1:5e:f7:22:88:d5:68:34:27:9c:f0:
f8:17:cf:a4:60:41:96:96:02:1f:4d:f4:20:42:01:
6d:38:37:f5:f4:66:f0:e2:06:1f:de:9a:43:6f:0b:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:95:6B:C8:64:49:52:84:51:0A:37:9D:B0:6A:59:7D:C5:8F:8A
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/gLOVa8hkSVKEUQo3nbBqWX3Fj4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9b:e0:ee:54:c6:3e:be:3d:a0:57:de:08:1b:af:54:1e:7f:
73:2d:af:5b:c5:c2:e8:5a:97:db:d0:ce:e3:40:44:b9:8a:ea:
1f:5d:77:66:03:15:b9:80:db:03:f2:eb:bb:0a:0b:5c:30:72:
d4:b0:c0:1d:be:b5:34:99:7e:28:5b:0c:36:59:e2:fd:e1:1e:
f1:4c:2a:1a:fc:dd:9c:36:dd:a4:a3:82:bc:40:c6:45:24:3e:
49:c8:dd:c5:21:85:f8:d5:df:bf:08:5d:a6:38:e3:aa:b2:22:
f8:b5:94:4a:2b:a3:2c:14:97:b0:e4:57:e6:60:61:1f:43:6d:
51:a4:78:93:19:a7:d9:44:cf:e4:1d:05:e4:e2:66:fa:59:f0:
35:d8:cc:a9:66:91:e2:5e:ce:32:22:96:b5:06:49:52:b6:9e:
6a:79:19:2f:61:09:8b:2e:4c:ca:f1:8b:e7:0f:dc:c2:5a:04:
51:c0:14:c8:6a:1e:af:77:5f:e8:57:e2:87:5a:a5:2e:6b:57:
ae:c9:09:89:83:65:be:6c:72:6d:2f:2f:e1:d3:1e:88:b7:8e:
b2:ec:09:79:ab:4f:7f:28:3c:db:78:8f:50:de:56:a4:27:70:
ce:b9:ed:44:ab:52:35:ae:d0:4a:a3:b6:d6:c2:40:33:7c:21:
25:b4:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:23 2025 by rpki-client