Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/7-Bb7fp_VHOBpLVtRZ3FUVhRthk.roa
File: 7-Bb7fp_VHOBpLVtRZ3FUVhRthk.roa (raw, json)
Hash identifier: aLx6z1I+r1pNnIRCKshfg1AMrMCnAM4wr9M1FoSZ1pw=
Subject key identifier: EF:E0:5B:ED:FA:7F:54:73:81:A4:B5:6D:45:9D:C5:51:58:51:B6:19
Certificate issuer: /CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Certificate serial: 01850C2B7B1A58DD33F22E75F04B1FD54FAA
Authority key identifier: 9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/7-Bb7fp_VHOBpLVtRZ3FUVhRthk.roa
Signing time: Tue 13 Dec 2022 15:47:34 +0000
ROA not before: Tue 13 Dec 2022 15:47:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43606
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:2b:7b:1a:58:dd:33:f2:2e:75:f0:4b:1f:d5:4f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Validity
Not Before: Dec 13 15:47:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efe05bedfa7f547381a4b56d459dc5515851b619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:39:e4:22:ab:52:6e:a3:34:45:0e:89:00:3e:
fb:8a:a4:d7:ff:0d:df:1e:30:d6:3f:a0:4d:6b:dc:
74:3f:1e:a4:ab:59:04:97:16:78:43:b3:43:44:8b:
1a:52:be:ea:df:b4:5f:82:c3:19:85:80:52:b2:b6:
a3:a1:c9:cf:44:38:d3:23:d2:62:39:d6:45:73:d2:
b5:35:84:09:a5:30:04:1f:f1:ca:36:2f:bc:f1:bf:
22:c9:64:06:f7:bc:24:f0:09:15:7a:9b:a3:32:b9:
89:45:5e:cc:42:2b:ca:68:03:1f:2a:b6:97:b5:b0:
56:fc:98:5d:43:69:b6:05:50:48:a1:21:ab:5c:40:
6e:7b:15:8a:c9:00:c6:37:ac:dc:28:e6:1d:48:f5:
74:86:94:7d:34:b3:15:5d:66:b1:72:bc:96:f1:5c:
7e:da:5a:ff:4a:18:ae:3b:ed:d0:29:e2:d4:2b:85:
db:a0:be:65:eb:0b:a6:3f:2d:56:3d:d6:43:27:a0:
b7:30:9e:37:27:9f:f4:a7:97:01:42:37:96:69:a0:
04:ef:3b:5e:be:10:32:30:75:9b:cd:9d:a9:a8:f4:
99:26:92:a4:3e:d3:c4:e9:ca:81:fc:cd:9c:ee:c9:
25:fa:d0:ea:b7:c6:43:be:c9:74:12:cf:4f:69:f4:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:5B:ED:FA:7F:54:73:81:A4:B5:6D:45:9D:C5:51:58:51:B6:19
X509v3 Authority Key Identifier:
keyid:9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/7-Bb7fp_VHOBpLVtRZ3FUVhRthk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c9:7e:99:38:e5:bf:10:aa:36:99:d5:09:70:2a:0d:a6:c5:
71:82:3f:5d:d8:34:12:a2:d4:90:10:25:4e:88:36:70:1a:64:
bf:9b:80:8f:fa:1c:52:a0:09:76:6a:57:d6:20:99:be:07:6a:
ac:2c:d9:7d:2a:4a:f6:bd:32:58:c0:25:d0:6c:b4:65:ed:0e:
2f:f6:aa:b3:1e:74:c9:25:4a:44:95:22:34:f2:aa:9d:4b:10:
d4:16:75:01:0e:b9:ad:36:2b:f5:17:89:b5:c0:a6:7a:e2:68:
bd:40:97:04:8b:bb:f9:14:53:ba:93:af:e2:01:9b:4e:5f:00:
5c:d7:d8:45:98:55:e4:6e:d1:58:fe:00:2a:ce:e6:e7:64:4b:
05:20:21:93:67:fd:94:35:f7:d4:94:b7:b2:bc:3e:27:6f:f5:
79:2c:2c:89:0b:4f:46:ad:43:76:c0:ab:62:25:34:cf:00:1a:
13:a3:a9:99:29:40:ec:45:86:7f:24:83:8d:7a:0c:88:2a:cc:
8c:7d:57:a9:af:e1:90:dc:94:d1:ed:b6:ef:0e:0d:a5:d7:f6:
b8:a6:e2:06:c7:47:e9:7c:17:a5:66:2a:77:dd:ea:b1:20:0e:
75:de:00:0b:4c:2a:0f:ee:10:79:e3:c0:a5:0f:8e:e4:fa:bc:
4f:42:32:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:22 2024 by rpki-client on console-ams.rpki-client.org