Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/ayEy7dFAQZ8xJJFUaaYqDxxLgS8.roa
File: ayEy7dFAQZ8xJJFUaaYqDxxLgS8.roa (raw, json)
Hash identifier: 5Zr9FUQE3SSt63mJPxR/rWCbm4O71wz38aLmtng/AIc=
Subject key identifier: 6B:21:32:ED:D1:40:41:9F:31:24:91:54:69:A6:2A:0F:1C:4B:81:2F
Certificate issuer: /CN=68a839cc8159fc5d3d75dedf62aadb81c40eabed
Certificate serial: 018DEC10011E6255CEE2A3D5E2957B7350F4
Authority key identifier: 68:A8:39:CC:81:59:FC:5D:3D:75:DE:DF:62:AA:DB:81:C4:0E:AB:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKg5zIFZ_F09dd7fYqrbgcQOq-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/ayEy7dFAQZ8xJJFUaaYqDxxLgS8.roa
Signing time: Tue 27 Feb 2024 19:34:48 +0000
ROA not before: Tue 27 Feb 2024 19:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 217.28.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:10:01:1e:62:55:ce:e2:a3:d5:e2:95:7b:73:50:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a839cc8159fc5d3d75dedf62aadb81c40eabed
Validity
Not Before: Feb 27 19:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b2132edd140419f3124915469a62a0f1c4b812f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:a1:c2:0b:28:bc:3b:6d:30:a9:dc:41:c5:
5f:95:83:49:e5:a4:43:7a:6e:94:d7:ef:23:81:a3:
41:78:68:c3:39:57:26:63:b5:a1:17:ff:a0:9f:25:
86:e2:e6:35:f3:cf:28:be:cf:a1:5c:ed:27:23:ae:
12:06:91:28:9a:ca:db:e5:98:d0:1d:b7:a2:84:21:
08:2a:a0:7e:97:67:47:0a:ef:ae:e2:60:f6:7c:c9:
b9:0d:f7:3c:41:63:47:95:0e:7c:02:9b:7d:ae:c2:
6f:dc:55:62:4a:d3:e5:d1:78:ee:f6:4f:00:11:51:
70:77:93:78:5f:4d:fa:52:b4:90:16:3a:a2:28:bd:
a6:3a:1e:4f:6a:6c:99:8f:ce:35:19:aa:22:1d:37:
65:69:c9:e2:c7:9a:85:e3:56:4a:bb:df:fd:97:ed:
66:85:13:77:9e:9e:37:af:81:83:2c:99:d3:2a:96:
17:53:12:30:5f:12:35:74:a1:3f:37:7e:2e:a1:24:
9d:d4:07:43:1e:93:bf:0a:11:52:9e:65:9f:46:bf:
6c:f0:9e:11:95:2c:0a:8c:09:0e:8f:94:5d:a4:e6:
04:43:e5:ac:7f:a2:cb:3e:06:c6:71:6a:62:a1:56:
76:6c:20:db:86:82:08:ac:28:aa:e2:75:5e:87:b6:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:32:ED:D1:40:41:9F:31:24:91:54:69:A6:2A:0F:1C:4B:81:2F
X509v3 Authority Key Identifier:
keyid:68:A8:39:CC:81:59:FC:5D:3D:75:DE:DF:62:AA:DB:81:C4:0E:AB:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKg5zIFZ_F09dd7fYqrbgcQOq-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/ayEy7dFAQZ8xJJFUaaYqDxxLgS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/aKg5zIFZ_F09dd7fYqrbgcQOq-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ed:af:69:09:60:0e:19:ef:e0:b3:9b:20:3b:b9:6a:54:92:
f7:59:2b:f8:3a:ab:76:e8:f9:c6:f7:a9:3b:ff:ee:39:88:f7:
8a:d4:a2:af:f8:78:7f:f3:e3:4c:61:7f:ed:5f:f2:25:9a:15:
8e:eb:7a:42:8c:8c:f7:bb:91:81:bf:4f:df:11:16:c8:f9:59:
a8:b6:6d:fd:37:b2:d8:e5:d0:e1:32:7f:97:9f:00:38:35:16:
ba:49:5f:8b:6c:58:03:0e:d5:c9:b2:b7:57:7c:48:0c:67:af:
3d:15:c9:09:63:69:94:86:de:c2:38:4f:52:84:cf:a8:03:46:
71:01:89:ae:1d:4f:4f:9a:fe:e1:bf:2a:ff:e8:a6:1a:42:b0:
71:d5:5f:78:52:d6:44:5f:4c:f8:3b:4f:1b:5b:15:50:cd:c5:
b5:bf:40:56:23:4f:a9:7b:65:ff:d8:31:9c:89:06:ff:6f:14:
1b:bd:9f:50:53:ed:20:3c:d1:d6:88:09:5d:d9:48:b0:82:8c:
b1:c8:fb:7e:39:05:76:0d:85:71:80:9b:50:c7:d2:1e:a8:c0:
a5:8b:d9:ef:bd:f1:52:12:c8:1f:5a:2a:68:36:cd:a8:56:a8:
8b:43:2f:f9:87:e4:3d:07:53:d6:96:aa:bb:8e:08:d5:8f:91:
19:06:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:07:56 2024 by rpki-client on console-fra.rpki-client.org