Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/l0yYmCmZ3apNU18BkS6u0cNGHiQ.roa
File: l0yYmCmZ3apNU18BkS6u0cNGHiQ.roa (raw, json)
Hash identifier: GelrPI9t+9Z7PMzXweM3tP8zmnTCqcGps7We072AOps=
Subject key identifier: 97:4C:98:98:29:99:DD:AA:4D:53:5F:01:91:2E:AE:D1:C3:46:1E:24
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 9D597E
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/l0yYmCmZ3apNU18BkS6u0cNGHiQ.roa
Signing time: Mon 18 Apr 2022 07:55:22 +0000
ROA not before: Mon 18 Apr 2022 07:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10312062 (0x9d597e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Apr 18 07:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=974c98982999ddaa4d535f01912eaed1c3461e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:eb:bb:c8:84:2d:88:71:3d:28:c8:f8:70:
52:73:fa:3f:31:5d:54:bf:f9:79:f5:ef:98:92:bf:
46:8e:94:e9:f1:f6:24:34:50:78:8b:95:9f:50:49:
79:a2:45:c5:92:c5:fc:59:f0:55:c5:14:9e:5e:3c:
77:2c:43:d4:33:e8:56:09:76:15:a5:b4:0b:df:02:
4e:ca:62:eb:cb:46:33:d0:6b:57:69:de:5a:25:22:
85:85:e1:78:b8:65:1f:bd:90:46:04:61:7e:72:06:
08:6e:73:6b:bf:5b:83:ed:55:36:d1:1d:73:82:a6:
84:a5:82:4d:8a:84:b8:3d:95:65:ae:cf:c4:50:ce:
61:6c:2c:c3:55:3c:28:ed:39:7a:1a:f2:2f:03:a8:
d3:03:d0:a6:c2:75:76:b0:af:ed:f1:e0:84:96:30:
aa:bc:88:1c:1c:5c:65:58:cc:9f:97:80:d4:e1:03:
3e:fa:f7:af:a7:95:4e:f7:c7:2a:1d:db:51:e9:58:
c8:ba:7d:2d:a6:9f:71:da:49:40:e6:ca:8c:f3:3a:
ca:a9:f5:ce:00:73:e4:41:9e:eb:a7:6e:79:75:7e:
bb:e8:3e:a8:65:39:f3:43:b6:3d:95:b7:f2:b9:1c:
d4:aa:64:78:34:5d:f9:bf:51:f7:fc:e0:04:17:5a:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4C:98:98:29:99:DD:AA:4D:53:5F:01:91:2E:AE:D1:C3:46:1E:24
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/l0yYmCmZ3apNU18BkS6u0cNGHiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:9b:2e:a8:52:a2:1e:72:00:e9:e1:74:44:81:9c:53:ea:3e:
91:eb:51:6b:40:19:34:4b:5d:7b:2d:2f:31:c2:c3:05:ed:bf:
ff:7e:56:e9:ee:4a:bb:86:aa:fe:da:a4:58:af:c7:70:3e:de:
83:73:4e:de:31:a2:08:06:09:88:2c:b3:0f:b1:6a:6b:fa:1d:
6a:64:21:f0:40:85:60:bc:08:27:e1:0e:0a:b1:29:51:50:35:
bc:84:da:fd:bc:d8:cb:75:ef:6b:6b:60:82:3d:23:6f:8e:bb:
9d:4d:19:ce:b7:56:c1:85:80:93:ba:7d:0e:8b:c5:76:64:92:
0d:1d:b2:c2:4b:5a:4d:29:df:fa:15:d2:98:47:ba:b4:14:9d:
33:da:82:9a:95:05:8a:90:24:32:57:ae:56:17:71:81:9d:38:
06:22:b1:24:a2:29:12:67:a0:0f:12:f5:3d:88:5d:0d:4c:3a:
e3:12:ed:5b:16:88:9b:05:ac:b5:53:8f:3a:81:68:6f:f3:62:
08:79:16:28:61:0c:d8:dd:2c:7c:f1:90:97:03:cd:73:ca:4f:
19:d5:46:95:76:d9:8f:d9:ac:06:fc:20:81:8d:5d:6e:5f:51:
b2:d5:af:b4:97:6a:f4:48:3c:75:22:0d:05:31:30:2e:28:8f:
ea:1d:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org