Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/JAMsMF53rSsa1OVuvtgK4RQCllk.roa
File: JAMsMF53rSsa1OVuvtgK4RQCllk.roa (raw, json)
Hash identifier: h6CbRKsAvB6hKw3AXQCMv26vsddnFNf/1jSfrK2QUHg=
Subject key identifier: 24:03:2C:30:5E:77:AD:2B:1A:D4:E5:6E:BE:D8:0A:E1:14:02:96:59
Certificate issuer: /CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Certificate serial: 0184AB85001AAD2D31ADC35486EC70B2081A
Authority key identifier: 9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/JAMsMF53rSsa1OVuvtgK4RQCllk.roa
Signing time: Thu 24 Nov 2022 21:22:10 +0000
ROA not before: Thu 24 Nov 2022 21:22:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43606
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:85:00:1a:ad:2d:31:ad:c3:54:86:ec:70:b2:08:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Validity
Not Before: Nov 24 21:22:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24032c305e77ad2b1ad4e56ebed80ae114029659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:88:b8:83:2b:05:9a:4d:5d:33:02:86:ed:
11:d2:73:f1:b6:91:85:ab:bc:ff:3a:db:72:ee:22:
f7:dc:9d:9b:c9:dc:02:78:bd:95:29:9f:5c:2c:da:
0d:34:9b:eb:a6:4e:f7:2c:b5:d5:27:5b:83:92:cc:
e7:48:65:33:96:13:9e:ec:6b:ae:cb:14:12:47:e2:
a9:d0:94:6f:5f:95:d8:14:a8:c6:fd:ec:f2:5d:54:
ca:fc:87:e7:e9:08:56:71:12:52:33:05:9f:e8:50:
e8:ed:65:9e:c5:5d:8e:c9:48:a1:9b:82:e2:26:dd:
69:0a:fd:eb:61:80:a2:54:d0:cf:70:2b:7e:62:4d:
9c:65:f2:79:7e:09:30:6d:0d:98:ff:37:db:55:9b:
ea:20:46:61:ca:10:f2:8d:16:03:00:e5:9a:73:4f:
ce:72:39:b7:3d:7a:af:63:3c:6f:d4:aa:92:8e:9d:
11:5a:23:eb:d2:26:8b:b2:ce:8e:22:00:3c:35:37:
b0:10:ae:6a:06:4b:84:63:a3:b9:80:39:0a:b3:51:
e4:9e:ba:e1:c9:26:36:94:95:03:41:db:d3:4b:9c:
e4:55:57:fc:68:cd:a1:6b:31:fa:5b:d3:29:73:46:
48:3e:7a:fd:5e:06:19:2c:fc:94:70:7c:b5:7e:05:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:03:2C:30:5E:77:AD:2B:1A:D4:E5:6E:BE:D8:0A:E1:14:02:96:59
X509v3 Authority Key Identifier:
keyid:9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/JAMsMF53rSsa1OVuvtgK4RQCllk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bb:49:3c:ed:0a:3b:3c:c8:e4:14:2f:bc:21:0a:20:16:0b:
6f:67:c8:9a:ed:4c:4f:a0:17:de:49:76:72:4a:35:2d:98:c7:
a7:ea:32:c3:7c:42:a4:66:00:47:53:62:f9:29:25:4a:d3:60:
8e:35:f6:a0:61:f0:f2:86:28:02:4f:f6:d9:4d:b0:fc:da:ae:
95:a1:52:a6:31:17:bd:a6:7c:68:fb:7a:db:09:34:5d:d7:35:
44:64:56:d8:e1:e7:19:0a:d6:74:c3:6a:88:57:b8:be:3f:aa:
78:ee:13:59:97:ac:bc:4e:b4:95:85:04:77:8a:32:7b:96:1f:
2e:a6:e4:bf:3b:6c:87:90:59:10:f2:cf:16:db:3e:d5:a9:eb:
d8:5e:c2:24:bf:75:33:54:87:b1:7f:70:36:bc:6a:2c:0a:0c:
e5:20:94:40:f6:bd:33:a6:5f:f6:41:58:9e:b8:e9:fc:f6:86:
dc:e3:ba:db:6a:c3:a3:92:9b:64:64:08:f0:1e:c6:a4:15:13:
b8:4f:f7:a6:1b:0e:d8:05:51:dc:ab:53:a5:cf:e9:a9:80:b6:
43:fd:91:62:41:f9:0e:9c:06:d8:df:5f:95:62:be:9c:a2:03:
c6:d9:fc:71:c9:91:c9:dd:2f:59:63:59:9d:a8:d0:4e:35:15:
32:97:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org