Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/pCFI5U80czZs3ywclIize22bNgc.roa
File: pCFI5U80czZs3ywclIize22bNgc.roa (raw, json)
Hash identifier: 5hoE284ncMHi2e4TaQAKxny8AGrFKJ6rk0i5UZBYx7c=
Subject key identifier: A4:21:48:E5:4F:34:73:36:6C:DF:2C:1C:94:88:B3:7B:6D:9B:36:07
Certificate issuer: /CN=d598f4b23d3a9937b4434a42fede002dfc4817f2
Certificate serial: 01884C8E2843A6AFD6EBC37BE41C8B2D36D0
Authority key identifier: D5:98:F4:B2:3D:3A:99:37:B4:43:4A:42:FE:DE:00:2D:FC:48:17:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/pCFI5U80czZs3ywclIize22bNgc.roa
Signing time: Wed 24 May 2023 06:59:24 +0000
ROA not before: Wed 24 May 2023 06:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.119.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:8e:28:43:a6:af:d6:eb:c3:7b:e4:1c:8b:2d:36:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d598f4b23d3a9937b4434a42fede002dfc4817f2
Validity
Not Before: May 24 06:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a42148e54f3473366cdf2c1c9488b37b6d9b3607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:89:c7:fc:03:98:c1:88:c0:11:5b:d0:4f:
db:ff:47:8d:ee:24:36:27:f2:86:d6:02:a7:a5:27:
13:72:5d:22:d6:bb:d8:22:1e:85:07:68:83:53:f1:
fd:f4:3a:47:e9:7b:bb:b8:55:01:c0:47:ab:e8:6c:
11:3f:91:20:c6:f3:e1:ce:31:fc:36:79:87:36:74:
6f:7d:0e:94:fe:72:3f:3f:6a:8c:d2:9a:9e:5f:4f:
29:13:6e:12:a3:62:c0:b3:5e:40:bc:3f:78:44:57:
ad:ed:14:13:20:bd:f2:eb:42:6d:b0:a6:7a:b7:fe:
2b:ca:cf:4e:27:62:e8:71:53:41:a5:c3:0e:53:fd:
41:76:b6:16:37:47:c1:c3:09:93:3a:d8:97:32:b2:
0d:35:8c:ac:64:4e:c0:d0:59:2f:ef:71:12:e7:e8:
b2:18:6b:72:8e:75:a9:5f:fe:a1:8c:2e:47:94:50:
f6:64:8d:e0:49:e1:04:5f:59:72:77:d7:9f:9c:22:
b9:38:b8:e0:e0:46:d5:62:0c:b4:97:9a:07:95:6c:
21:20:2d:a9:79:87:11:b9:bd:a1:b2:25:60:b2:6e:
cc:24:7d:57:aa:57:5a:2a:84:1b:fc:34:f4:f0:90:
db:a8:82:9e:fa:54:35:9c:63:c3:9b:2d:98:2d:d2:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:48:E5:4F:34:73:36:6C:DF:2C:1C:94:88:B3:7B:6D:9B:36:07
X509v3 Authority Key Identifier:
keyid:D5:98:F4:B2:3D:3A:99:37:B4:43:4A:42:FE:DE:00:2D:FC:48:17:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/pCFI5U80czZs3ywclIize22bNgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0b:20:5b:c7:45:b4:9b:42:0f:b7:a1:15:16:33:fd:ea:78:
4b:9b:09:f9:ef:78:f7:d7:db:61:9e:6b:7f:1a:dd:d2:8c:b2:
7d:fd:2d:f5:5a:fe:e8:ea:37:9e:50:c8:8f:5e:28:b5:49:37:
52:47:1c:c9:77:79:99:60:31:89:c6:f2:4e:07:35:4e:c2:8b:
1c:56:eb:e1:65:6b:68:26:77:9f:14:10:64:05:8a:be:47:44:
06:8b:4e:0e:74:96:7b:61:81:53:50:81:3e:52:89:54:a3:38:
bf:4b:ae:39:c6:bf:0a:98:e9:2e:7f:70:2e:97:5a:6e:94:60:
e9:32:a3:ef:6e:db:84:2d:30:8c:da:06:42:55:55:5e:ed:39:
59:32:ba:ab:33:82:99:af:85:18:8e:09:e1:48:5b:62:5e:ba:
d6:d9:58:59:4a:85:12:51:24:ee:51:fd:82:69:ce:85:96:5c:
42:62:fb:08:f6:81:f6:1d:d9:b9:0f:c8:75:dd:3f:cf:ce:ba:
a9:da:a7:46:9d:49:a8:65:0e:ee:aa:6a:77:fa:6a:b7:d2:49:
da:40:d1:f2:63:39:be:f2:e4:de:0d:ff:d3:91:5c:7e:d1:20:
a3:45:8a:60:12:f0:cf:3f:ba:1e:d7:2d:15:65:fe:db:7f:07:
08:16:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:00 2025 by rpki-client