Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/AmFDAoOG2sHVKVuvFpF4oyduZ90.roa
File: AmFDAoOG2sHVKVuvFpF4oyduZ90.roa (raw, json)
Hash identifier: OIOkgf5GeQ4r4wQMryPccI0AzvMLx4Wzlu2kkS1Prc0=
Subject key identifier: 02:61:43:02:83:86:DA:C1:D5:29:5B:AF:16:91:78:A3:27:6E:67:DD
Certificate issuer: /CN=5c9cf1e26175fffa6126798eca43812312c4414b
Certificate serial: 0185715E932BED7CEDE1D26A9869C04C8F91
Authority key identifier: 5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/AmFDAoOG2sHVKVuvFpF4oyduZ90.roa
Signing time: Mon 02 Jan 2023 07:25:01 +0000
ROA not before: Mon 02 Jan 2023 07:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47414
IP address blocks: 217.19.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:93:2b:ed:7c:ed:e1:d2:6a:98:69:c0:4c:8f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9cf1e26175fffa6126798eca43812312c4414b
Validity
Not Before: Jan 2 07:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=026143028386dac1d5295baf169178a3276e67dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:81:2e:ee:bc:02:4e:b3:47:0e:78:da:d2:
3a:a1:93:ff:ac:b4:b0:90:38:59:12:f9:28:80:54:
24:ff:48:e9:20:d0:eb:8c:d6:43:e2:35:43:ab:01:
f9:ac:c2:28:1d:03:0f:26:0a:8b:41:4e:8b:32:c3:
db:92:84:42:62:ae:23:f0:5d:25:6a:ea:41:be:f8:
ac:16:0d:2b:31:e7:03:a9:1f:45:14:33:32:9a:8c:
49:d4:69:5c:7f:d7:43:1f:f0:ac:59:3b:2e:0f:f7:
01:23:eb:df:79:3b:87:f4:77:39:55:81:35:a1:37:
1f:59:73:29:05:53:83:06:fe:ea:66:e5:49:9f:2a:
f2:be:a9:15:89:9a:27:71:de:6e:f4:a9:f7:c2:bc:
76:c6:c2:82:40:0e:64:f2:67:b5:1e:f2:2c:ce:60:
d7:66:71:0f:77:f9:eb:2c:dd:f5:35:51:bc:f7:f5:
17:02:38:69:52:1c:bb:51:29:ec:a8:13:ba:ea:38:
dc:20:52:df:b5:00:b5:b7:1b:7f:65:17:7a:a3:ce:
b1:0b:ac:43:cf:09:ef:0a:45:3e:81:91:40:1f:d9:
29:5e:9f:ae:e2:70:0d:41:6c:86:b8:78:38:2b:b4:
00:fb:ca:94:75:ef:0b:f5:de:1a:ec:39:5c:d9:c1:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:43:02:83:86:DA:C1:D5:29:5B:AF:16:91:78:A3:27:6E:67:DD
X509v3 Authority Key Identifier:
keyid:5C:9C:F1:E2:61:75:FF:FA:61:26:79:8E:CA:43:81:23:12:C4:41:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJzx4mF1__phJnmOykOBIxLEQUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/AmFDAoOG2sHVKVuvFpF4oyduZ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c8c0f5-042a-47eb-bb08-b7d30dae7172/1/XJzx4mF1__phJnmOykOBIxLEQUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.19.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:73:c8:8e:d5:ad:82:67:0a:1e:fc:a0:ee:24:ed:c3:91:c9:
ad:80:22:c6:36:50:ea:83:3d:d6:e9:7e:e8:ca:ba:da:0b:38:
26:4f:8b:59:bc:57:87:f5:a4:e9:ac:6b:88:68:82:e5:81:fb:
db:52:8b:d2:f8:ea:66:01:7c:e6:27:0a:c6:30:28:4a:dc:44:
f4:d9:86:3c:1f:fd:19:e7:7d:27:d7:c0:43:ad:ae:01:0d:86:
9a:cf:e8:f5:df:49:6b:5c:46:b0:15:59:b5:4f:60:83:85:56:
98:69:77:6d:c4:e7:97:a5:1b:bc:8a:9d:3a:50:4e:53:99:06:
92:2b:76:da:ce:68:b5:e4:f0:09:e0:61:d1:40:b2:7c:d1:79:
33:e1:71:e0:27:74:33:b9:bd:88:51:e6:d2:ee:cf:ed:ea:06:
9c:c1:34:c2:54:e2:8d:0f:a4:33:7f:4c:24:c2:46:57:52:e0:
3c:dd:00:94:3d:e3:f0:4d:f9:0e:ad:7a:50:74:3b:c3:52:46:
78:28:8a:de:9f:aa:9b:3b:9c:f2:34:d7:20:58:19:6d:21:39:
27:4f:25:a7:66:31:aa:50:98:a1:bd:ca:44:26:62:95:7b:7d:
0b:e1:42:37:68:b9:8e:9b:89:aa:37:91:7b:33:b1:ab:ab:62:
ed:0a:01:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:41 2025 by rpki-client