Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/1-RaJfIyPa4i2KChD2H3MUvkeM00.roa
File: 1-RaJfIyPa4i2KChD2H3MUvkeM00.roa (raw, json)
Hash identifier: +YNj+E8p5EPi1dAGJkOhXTt1QIj5aTxycNQWk4zSWH8=
Subject key identifier: F9:16:89:7C:8C:8F:6B:88:B6:28:28:43:D8:7D:CC:52:F9:1E:33:4D
Certificate issuer: /CN=44e29bc671f99dd59bda945577139150631b1d71
Certificate serial: 018570CBE7D47C8BFCCD2BBA6A73A998F9C1
Authority key identifier: 44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/1-RaJfIyPa4i2KChD2H3MUvkeM00.roa
Signing time: Mon 02 Jan 2023 04:44:49 +0000
ROA not before: Mon 02 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44285
IP address blocks: 213.109.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e7:d4:7c:8b:fc:cd:2b:ba:6a:73:a9:98:f9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e29bc671f99dd59bda945577139150631b1d71
Validity
Not Before: Jan 2 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f916897c8c8f6b88b6282843d87dcc52f91e334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:45:0e:f3:fa:85:a8:e8:1d:6c:7d:91:e4:
f8:b8:14:6f:53:82:76:0d:c7:01:06:bf:91:6f:d0:
66:88:54:79:19:58:17:6f:ec:58:a2:67:66:d5:d9:
28:82:b8:dc:37:e6:77:67:77:00:a7:c0:b4:a1:64:
06:40:69:83:d7:26:99:52:ab:58:d2:f8:c5:c8:b3:
ae:53:17:47:0a:e2:b1:1a:9e:cc:ab:3a:e5:21:99:
5f:76:8f:80:1e:33:1d:40:13:38:65:d3:3e:9b:34:
f9:2f:aa:b5:c0:6f:17:70:8b:e6:64:8a:3c:0b:86:
92:46:63:8e:ff:2c:39:a9:c3:bf:85:21:0e:6a:2c:
47:90:ac:4e:ca:06:a4:61:76:40:21:ac:b2:76:91:
60:40:14:0d:7c:2c:a7:79:c0:3d:d6:cb:72:07:7f:
35:eb:24:83:5e:2c:04:75:6f:65:50:ae:f7:b7:6e:
3b:c6:ca:18:33:c5:93:1b:e8:c2:4a:ca:6a:04:85:
37:b2:05:6e:2c:43:10:db:39:ff:f8:4f:95:7b:34:
c0:36:53:19:cd:ed:bd:1f:77:a8:ac:f7:b4:e2:05:
e7:4f:f9:69:7f:ff:69:23:d4:38:16:1f:e8:a3:75:
84:47:f9:7f:9f:3d:9a:65:d6:54:c2:a5:ac:9a:08:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:89:7C:8C:8F:6B:88:B6:28:28:43:D8:7D:CC:52:F9:1E:33:4D
X509v3 Authority Key Identifier:
keyid:44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/1-RaJfIyPa4i2KChD2H3MUvkeM00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:50:76:ba:0c:d7:d5:e8:f6:21:54:bf:27:10:1d:f8:ed:2a:
d3:74:07:5d:05:cf:4d:5c:f7:fb:cb:4d:01:01:7c:30:4c:4d:
ea:a5:cc:e5:cf:aa:d7:99:90:33:41:03:d0:7f:86:1c:a4:a4:
ec:f3:9c:af:8e:95:99:7a:62:85:67:78:e5:5a:2c:ef:d5:f9:
62:71:dd:6e:2c:26:04:0f:e1:0d:e9:d5:31:4a:dd:b6:4d:3e:
65:ca:2a:0f:64:25:25:7f:46:54:9c:de:c1:c8:5b:e2:71:65:
81:c2:6c:42:97:b9:b5:d8:9d:2a:9a:0e:c1:37:22:70:d2:dc:
c1:3e:98:56:81:2e:82:72:94:ce:ee:c1:f6:ad:fd:cd:2f:fb:
b3:e2:a1:ef:4c:73:45:14:08:ac:be:4e:6e:64:29:f3:4b:28:
5b:37:d7:b7:91:4a:2c:3a:49:5c:1a:ec:0d:7b:91:0e:58:f3:
9c:8e:bc:62:28:3b:0f:23:1e:26:c1:c4:3d:e8:4d:e1:2d:ac:
4f:d6:05:0f:f7:a9:00:60:82:5f:3d:3e:ac:90:25:2b:74:76:
d1:67:74:52:fe:26:d9:e3:35:7e:28:30:cf:20:0d:ba:c1:1a:
46:0a:a8:5a:a4:fc:45:62:7e:64:46:35:1d:d6:87:d6:62:e4:
fb:09:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:43 2024 by rpki-client on console-ams.rpki-client.org