Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/5OoXoEQ9thJRHDDpYBlHsE1fWLI.roa
File: 5OoXoEQ9thJRHDDpYBlHsE1fWLI.roa (raw, json)
Hash identifier: NPhQ1yYv5TiPSqPLAwOEEvOwRdbTzG82poPNc6t3CIg=
Subject key identifier: E4:EA:17:A0:44:3D:B6:12:51:1C:30:E9:60:19:47:B0:4D:5F:58:B2
Certificate issuer: /CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Certificate serial: 0184ADEE101C95F331361A13577239D73BCB
Authority key identifier: 9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/5OoXoEQ9thJRHDDpYBlHsE1fWLI.roa
Signing time: Fri 25 Nov 2022 08:36:10 +0000
ROA not before: Fri 25 Nov 2022 08:36:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58172
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:ee:10:1c:95:f3:31:36:1a:13:57:72:39:d7:3b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Validity
Not Before: Nov 25 08:36:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4ea17a0443db612511c30e9601947b04d5f58b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:36:b1:7b:78:59:c5:3f:3b:bb:b9:b9:be:
c8:a6:a7:20:4e:b9:62:25:cc:a5:1e:ac:70:88:d2:
6d:66:1c:00:91:15:b7:cf:5a:ba:63:ed:46:b4:b0:
3f:36:89:ce:2f:db:8e:d8:7c:42:3d:27:11:56:56:
36:8b:7b:56:be:b2:89:72:b1:a0:ec:2a:a8:03:80:
20:67:eb:c0:a1:2d:a4:7d:49:40:97:65:20:51:06:
0d:ca:4e:9a:3e:29:c1:0f:d8:aa:77:d3:f5:bb:aa:
b8:fc:af:32:7c:6a:ae:f8:8e:17:02:43:66:63:48:
91:25:1c:8c:a3:ac:ba:ea:56:83:c7:86:20:9e:c1:
8f:b5:04:4e:02:6d:0f:41:e2:64:fc:b9:6e:ec:e7:
c0:a3:c7:45:2a:9b:af:44:71:31:5e:c0:44:83:e5:
31:67:e1:94:82:f0:77:dd:2f:f6:77:67:9b:4f:e8:
f7:88:85:45:01:ea:a5:6e:04:89:a4:a8:8e:83:f3:
b2:fa:2b:07:c4:06:ab:c7:5a:97:1b:ff:bd:4b:b0:
eb:74:b5:8d:66:99:d2:1a:80:53:8b:9c:5b:e3:18:
6f:b3:db:28:e2:4f:e0:2c:b5:f4:4e:d4:04:00:12:
47:bb:6e:9f:1b:96:e2:f9:7b:e9:b5:26:43:a8:b8:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:17:A0:44:3D:B6:12:51:1C:30:E9:60:19:47:B0:4D:5F:58:B2
X509v3 Authority Key Identifier:
keyid:9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/5OoXoEQ9thJRHDDpYBlHsE1fWLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f2:ad:3e:59:83:9d:8d:2d:06:ad:53:78:eb:51:ea:03:0e:
96:26:f5:64:5b:be:2a:0c:06:15:80:17:8a:0c:22:c3:2f:88:
8e:20:79:d2:32:c4:b4:ad:12:bd:0d:68:69:8c:bb:35:49:d4:
b5:d6:56:03:e0:96:57:66:4d:fd:0f:25:1b:61:77:64:85:3e:
8c:a7:07:d5:aa:92:05:7c:49:75:6e:d2:14:68:8f:87:43:c5:
5c:bb:37:1f:d2:df:f2:9d:7d:75:79:7a:28:f3:44:8d:06:01:
0b:f9:f6:09:4d:c6:82:17:18:2f:7c:63:70:17:42:4b:2c:c8:
6a:7a:79:65:2f:db:7b:da:91:34:c6:fc:f1:57:14:f0:98:d6:
7d:11:11:d5:58:1c:34:75:25:62:8b:c7:d0:b3:52:76:bc:e5:
d7:c5:4d:26:ad:55:a0:b4:33:ff:9a:9e:73:2a:15:0b:79:cd:
0b:c4:a2:20:9e:1b:56:dd:a2:9e:41:48:7a:4a:09:2c:18:b0:
0e:46:8f:3c:43:cb:6b:cb:ed:f0:19:6d:1b:09:eb:98:10:a2:
52:14:4b:c5:e3:02:39:ca:3a:9b:a7:87:56:6c:fe:27:14:90:
bd:12:8d:6d:78:1a:b9:7d:9e:9a:3c:1f:35:36:76:43:d9:35:
a5:f1:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org