Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/f-7yjtEN0pxf9AerH76aPV7RA9A.roa
File: f-7yjtEN0pxf9AerH76aPV7RA9A.roa (raw, json)
Hash identifier: ZyM/nRfqPV14TTKsEjYaKlVwG1FHIyLzMp0EBoWwCME=
Subject key identifier: 7F:EE:F2:8E:D1:0D:D2:9C:5F:F4:07:AB:1F:BE:9A:3D:5E:D1:03:D0
Certificate issuer: /CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Certificate serial: B90C3F
Authority key identifier: 9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/f-7yjtEN0pxf9AerH76aPV7RA9A.roa
Signing time: Sat 01 Jan 2022 01:58:53 +0000
ROA not before: Sat 01 Jan 2022 01:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12127295 (0xb90c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Validity
Not Before: Jan 1 01:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7feef28ed10dd29c5ff407ab1fbe9a3d5ed103d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:29:b5:9f:fb:6e:60:5a:02:5b:11:2b:7a:
cb:f8:f8:cd:e8:b1:70:bf:0a:69:76:1a:51:a4:64:
3a:97:c7:6a:16:3f:bc:e4:46:05:fb:ba:00:5f:2c:
5d:27:47:6b:59:cd:30:4f:e9:cb:7c:ce:b7:96:72:
32:49:c5:5a:8a:3f:83:8f:04:fa:80:aa:c7:d2:d7:
28:2a:65:2a:f6:f1:b6:30:1d:d3:10:a6:12:20:a0:
25:42:ca:49:e3:12:9a:82:73:3e:5b:a3:ad:0d:44:
ee:59:1b:2c:0a:93:e2:ed:04:79:02:dc:99:ce:a2:
d0:81:34:d0:6b:2a:80:d9:31:bd:13:2b:4c:91:97:
65:82:22:78:65:8c:9e:a3:bd:bb:e4:e7:c9:c5:7d:
cd:95:8a:80:c2:f6:3e:fd:df:0c:85:8e:c7:52:11:
a8:1c:7f:fc:e4:a6:a6:71:43:bb:62:92:c7:75:44:
3c:e8:f6:c2:95:a6:3a:4d:d4:1d:20:09:38:a8:7f:
95:4a:9e:88:07:15:92:33:d6:82:02:cc:3d:32:f6:
dd:24:b8:ae:62:8a:de:e5:6a:ac:c9:7c:62:69:a0:
c9:30:6e:c5:81:ed:6b:8a:80:ab:98:22:31:28:ae:
4b:cb:51:3f:be:e2:71:52:8d:6c:d6:1d:86:7e:a1:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:F2:8E:D1:0D:D2:9C:5F:F4:07:AB:1F:BE:9A:3D:5E:D1:03:D0
X509v3 Authority Key Identifier:
keyid:9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/f-7yjtEN0pxf9AerH76aPV7RA9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4a:1c:fc:32:1f:a8:59:4f:c2:7d:1b:6e:8c:cc:e6:35:ad:
8a:17:a0:3f:a4:16:e3:d5:46:09:58:a4:4d:08:a2:0c:20:54:
1d:26:26:08:82:a1:7f:c0:81:c0:97:54:41:73:0a:9f:cf:05:
de:8b:7b:89:b2:3d:19:71:f8:87:a7:d1:28:1f:10:6f:52:c2:
f9:98:92:f6:5b:38:98:9b:c0:44:ed:27:3e:00:8a:5b:f2:4b:
25:3c:3d:89:90:30:87:5c:9c:17:de:ef:fe:87:ba:8d:4b:ae:
74:c1:b3:60:ba:99:e8:a5:da:25:1f:84:89:8f:37:47:7b:64:
a2:d3:75:08:47:fd:5b:e8:25:5b:16:64:66:92:56:e1:0e:a6:
eb:3a:2d:2d:84:39:e1:9b:a9:04:59:16:6b:0f:b8:2a:b4:49:
0c:c3:b5:38:92:8b:fd:0f:22:49:cb:29:48:03:25:d5:fe:a4:
33:00:17:62:78:8a:ba:6f:6f:ff:18:49:6c:d7:4c:cf:2b:27:
f2:7a:f0:51:9b:63:dc:22:95:5f:68:64:72:d2:7a:23:69:78:
45:d8:5d:cd:35:f6:06:5d:45:a3:ff:65:51:d2:ec:74:ad:dd:
8c:4a:1f:7d:ed:ab:14:8f:af:41:94:cc:13:7b:24:2a:be:26:
54:88:c2:26
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALkMPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZGZjYTc5OGY5ZjY1OGNjZjExZjhjZTUxNTVmNDQxZGFlZmUzMWFjMB4XDTIyMDEw
MTAxNTg1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ZlZWYyOGVkMTBk
ZDI5YzVmZjQwN2FiMWZiZTlhM2Q1ZWQxMDNkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKq9KbWf+25gWgJbESt6y/j4zeixcL8KaXYaUaRkOpfHahY/
vORGBfu6AF8sXSdHa1nNME/py3zOt5ZyMknFWoo/g48E+oCqx9LXKCplKvbxtjAd
0xCmEiCgJULKSeMSmoJzPlujrQ1E7lkbLAqT4u0EeQLcmc6i0IE00GsqgNkxvRMr
TJGXZYIieGWMnqO9u+TnycV9zZWKgML2Pv3fDIWOx1IRqBx//OSmpnFDu2KSx3VE
POj2wpWmOk3UHSAJOKh/lUqeiAcVkjPWggLMPTL23SS4rmKK3uVqrMl8YmmgyTBu
xYHta4qAq5giMSiuS8tRP77icVKNbNYdhn6hHfECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR/7vKO0Q3SnF/0B6sfvpo9XtED0DAfBgNVHSMEGDAWgBSd/KeY+fZYzPEf
jOUVX0Qdrv4xrDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25meW5tUG4yV016eEg0emxGVjlFSGE3LU1hdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvZjZkZWM3LTU3M2YtNDZkZS1hYzExLTc4Nzc4N2E3NTA5MS8x
L2YtN3lqdEVOMHB4ZjlBZXJINzZhUFY3UkE5QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
ZjZkZWM3LTU3M2YtNDZkZS1hYzExLTc4Nzc4N2E3NTA5MS8xL25meW5tUG4yV016
eEg0emxGVjlFSGE3LU1hdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANl3izANBgkqhkiG9w0BAQsFAAOC
AQEAbkoc/DIfqFlPwn0bbozM5jWtihegP6QW49VGCVikTQiiDCBUHSYmCIKhf8CB
wJdUQXMKn88F3ot7ibI9GXH4h6fRKB8Qb1LC+ZiS9ls4mJvARO0nPgCKW/JLJTw9
iZAwh1ycF97v/oe6jUuudMGzYLqZ6KXaJR+EiY83R3tkotN1CEf9W+glWxZkZpJW
4Q6m6zotLYQ54ZupBFkWaw+4KrRJDMO1OJKL/Q8iScspSAMl1f6kMwAXYniKum9v
/xhJbNdMzysn8nrwUZtj3CKVX2hkctJ6I2l4RdhdzTX2Bl1Fo/9lUdLsdK3djEof
fe2rFI+vQZTME3skKr4mVIjCJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:22 2024 by rpki-client on console-ams.rpki-client.org