Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/1-yX1dVMoKWbgrSOoHudxqB0nNC4.roa
File: 1-yX1dVMoKWbgrSOoHudxqB0nNC4.roa (raw, json)
Hash identifier: Jf1sY79QIX5p798Os0eYxUi0V/SmWWX0YbghB2vpTUY=
Subject key identifier: FB:25:F5:75:53:28:29:66:E0:AD:23:A8:1E:E7:71:A8:1D:27:34:2E
Certificate issuer: /CN=5fb30f54909eff6d2dbe190b77ccd78bead1e9dd
Certificate serial: 01857246B755A51CE7B11C5231D2685606D9
Authority key identifier: 5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7MPVJCe_20tvhkLd8zXi-rR6d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/1-yX1dVMoKWbgrSOoHudxqB0nNC4.roa
Signing time: Mon 02 Jan 2023 11:38:35 +0000
ROA not before: Mon 02 Jan 2023 11:38:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 217.119.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b7:55:a5:1c:e7:b1:1c:52:31:d2:68:56:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb30f54909eff6d2dbe190b77ccd78bead1e9dd
Validity
Not Before: Jan 2 11:38:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb25f57553282966e0ad23a81ee771a81d27342e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:10:da:74:16:51:40:94:c0:ec:92:0f:d7:
e5:46:dc:e8:bf:b6:20:47:82:b3:9a:11:3f:1f:7e:
70:5b:c9:7f:3b:64:3d:27:56:1d:4d:83:91:e3:b0:
42:6d:80:4a:03:60:e3:60:4a:e0:4d:ee:bf:1b:c8:
25:22:5f:81:c8:ef:7c:d6:bc:45:ff:74:f2:20:cd:
12:70:20:08:12:d7:fc:3c:3d:d1:ba:89:28:b5:c7:
c0:1d:77:60:ce:20:e3:75:6d:b0:fa:f6:2d:e7:ec:
4c:63:d4:25:32:a3:6f:53:5f:9e:f9:0c:81:2d:87:
b0:39:4f:cc:d6:56:1e:e5:4c:0e:96:50:e0:fa:8b:
93:d5:99:93:2b:90:77:b5:b0:99:07:fd:14:64:9a:
80:f3:41:c8:00:d8:e1:1a:5b:31:5a:b4:1c:81:b6:
67:b6:39:42:92:7d:3d:77:b7:2f:b7:d7:72:53:9e:
fd:90:ba:9d:9c:c3:08:ed:93:72:a9:4b:a8:f3:7c:
71:60:2d:cb:eb:0b:ae:f4:7b:6c:ad:de:37:ce:ba:
7d:fe:96:ca:08:14:d5:89:23:7d:32:b7:0a:5e:ce:
65:f2:45:51:17:6a:bf:63:b5:ca:d0:25:e6:4e:6d:
fe:1e:bc:c0:ee:ab:f3:6d:a0:39:96:bf:4a:01:ce:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:F5:75:53:28:29:66:E0:AD:23:A8:1E:E7:71:A8:1D:27:34:2E
X509v3 Authority Key Identifier:
keyid:5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7MPVJCe_20tvhkLd8zXi-rR6d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/1-yX1dVMoKWbgrSOoHudxqB0nNC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d7:48:4e:cd:1c:be:0a:e8:59:fd:0b:08:1e:55:d9:35:b7:
28:56:d0:5a:3e:ad:a4:85:73:10:29:91:98:ce:16:e6:25:e5:
d5:94:ce:40:b8:f4:8b:65:1a:84:9e:47:99:69:0d:db:0d:d8:
01:ae:39:b4:e1:51:c6:71:b4:ea:ed:61:74:1a:22:cf:ac:fc:
4e:7c:e5:b5:8b:62:2e:9a:7f:76:54:2f:b3:07:ce:e7:10:d6:
41:aa:05:71:fc:28:c3:64:0c:e2:7e:25:5f:ce:9e:b8:fe:29:
ab:12:08:7e:2e:36:d4:b1:fe:e4:32:b5:5b:a4:ac:38:e4:a3:
71:b7:11:f9:bf:0c:c4:65:f7:e3:45:52:3d:5b:30:cf:b9:11:
3f:12:9d:60:fd:5b:2e:3f:82:09:2f:58:5d:d1:b0:67:95:2a:
3d:ed:1c:75:bd:78:81:7a:a2:3c:f4:4b:b5:ed:86:bb:5d:c5:
33:c1:a0:a0:5c:42:68:78:10:5e:0a:79:4f:71:b0:a3:89:fa:
0a:5c:c2:3d:7e:f9:94:8c:37:d6:49:3d:3c:94:48:c5:c0:2e:
90:14:34:d0:e8:3f:96:3e:ec:b1:a3:f4:e1:79:6e:d4:24:f4:
f0:79:77:51:d4:39:40:53:79:fc:53:b2:83:78:27:29:c1:13:
7f:91:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:09 2025 by rpki-client