Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/jLdRwEV5JkfykCtyu3-hWfwapNY.roa
File: jLdRwEV5JkfykCtyu3-hWfwapNY.roa (raw, json)
Hash identifier: sPCzlhCFj5HsRXHv4XCpnXcP3GaQREXLxNxqZg6t5+Y=
Subject key identifier: 8C:B7:51:C0:45:79:26:47:F2:90:2B:72:BB:7F:A1:59:FC:1A:A4:D6
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 0183D786C34B03D0D12351292A7A4EB16682
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/jLdRwEV5JkfykCtyu3-hWfwapNY.roa
Signing time: Fri 14 Oct 2022 17:24:36 +0000
ROA not before: Fri 14 Oct 2022 17:24:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d7:86:c3:4b:03:d0:d1:23:51:29:2a:7a:4e:b1:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Oct 14 17:24:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cb751c045792647f2902b72bb7fa159fc1aa4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:d4:55:56:0b:c7:eb:13:44:de:ea:b3:fc:
f6:08:6a:67:ad:5c:78:2d:34:62:0f:05:71:d1:b1:
67:f9:ad:37:46:55:33:a1:17:a5:7d:d4:fb:d0:95:
72:2e:40:1c:02:8a:6a:ab:ab:17:5c:be:bb:20:31:
8a:f5:cd:f0:8f:11:17:fc:39:99:1d:0f:0e:d3:4a:
35:51:0f:82:97:e3:8f:a8:42:6d:34:ac:2c:f5:a9:
62:12:bd:89:28:85:f6:6e:c8:5e:ff:d3:cf:7e:f9:
01:aa:d8:73:74:53:6b:12:5c:cd:36:b3:9d:1b:ab:
67:8c:1c:d2:e2:df:a0:44:f1:88:13:ff:c5:5a:f5:
f8:8a:04:e3:93:b8:77:e8:37:00:b8:97:35:6c:60:
4f:05:7d:59:cf:52:b7:88:d6:dc:21:6c:0d:5b:50:
25:28:88:c2:77:76:aa:cf:15:c4:c5:65:0f:fe:65:
09:68:fa:d2:16:7d:f2:e1:7a:80:fe:0c:ce:36:29:
2f:62:dc:4f:cd:14:45:ce:99:b7:68:6f:3e:79:63:
51:c7:e6:36:97:a4:3d:42:a3:67:4f:be:d7:b6:ab:
28:72:76:f8:9d:9e:ea:53:e2:39:2d:4f:1d:6c:78:
30:dc:92:33:9c:5b:06:20:8a:a8:33:23:7a:88:c3:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:51:C0:45:79:26:47:F2:90:2B:72:BB:7F:A1:59:FC:1A:A4:D6
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/jLdRwEV5JkfykCtyu3-hWfwapNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7a:e7:0d:da:25:be:50:c3:1b:cc:a3:80:0a:dd:bb:46:63:
2c:2f:22:ba:29:d0:a9:b8:c6:cd:ff:6f:a2:dc:91:48:6b:55:
01:96:3b:99:39:47:3c:1e:3d:e4:67:0f:a7:de:5e:c4:d2:25:
3f:6e:9b:a0:ff:4d:36:f2:88:65:51:1d:2f:84:55:3b:e6:50:
01:58:2e:39:80:7a:e0:0e:1f:16:f4:4e:cc:52:c5:47:31:8b:
bc:b9:2f:ce:aa:c6:60:d1:02:6f:9c:44:c5:4d:3b:73:76:98:
9e:74:c1:b8:b4:2c:0b:9b:35:0c:90:81:44:af:d0:cd:ba:e7:
1b:e2:9a:52:c0:f1:e3:92:87:2c:46:3d:b1:ea:83:10:13:b2:
3e:e8:33:8f:72:41:f9:37:01:63:60:98:1f:21:a9:ac:f5:e6:
53:cc:ad:5b:cc:ff:64:49:f9:bc:30:be:90:dc:42:c7:62:74:
6b:73:c6:0c:9c:5d:ce:4f:71:e5:f3:10:73:83:72:17:96:61:
54:c0:3c:1b:21:70:0e:d2:45:af:c3:eb:e1:10:c4:66:e8:e5:
8a:ca:83:6a:6d:b1:74:77:a3:83:76:0d:8f:63:fa:20:d0:3b:
e7:b8:ca:ed:23:ae:1f:79:7b:19:59:d6:50:09:f0:3c:54:3c:
b5:cf:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:12 2025 by rpki-client