Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/T4KTo_jvf_l0_g-4U6GWVGVPJYg.roa
File: T4KTo_jvf_l0_g-4U6GWVGVPJYg.roa (raw, json)
Hash identifier: DWBuvcgKapn5nhd60ZrlHcSv2UeREulwYszaPOIr8KA=
Subject key identifier: 4F:82:93:A3:F8:EF:7F:F9:74:FE:0F:B8:53:A1:96:54:65:4F:25:88
Certificate issuer: /CN=425e3038f75e70fecf8d2347f0464c88d3161af7
Certificate serial: 01856AF7D810E95C8CB7CB490F7E19945212
Authority key identifier: 42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/T4KTo_jvf_l0_g-4U6GWVGVPJYg.roa
Signing time: Sun 01 Jan 2023 01:35:05 +0000
ROA not before: Sun 01 Jan 2023 01:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f7:d8:10:e9:5c:8c:b7:cb:49:0f:7e:19:94:52:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e3038f75e70fecf8d2347f0464c88d3161af7
Validity
Not Before: Jan 1 01:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f8293a3f8ef7ff974fe0fb853a19654654f2588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:87:06:14:9a:35:d9:c3:26:43:b9:83:94:
58:20:8e:2f:19:70:a1:f4:2b:22:e6:94:8a:52:97:
ca:97:f8:b7:bb:eb:59:36:44:5f:b9:a5:71:00:7c:
88:03:4e:55:98:db:8d:2d:99:f3:78:54:ac:37:33:
4b:eb:3b:0c:07:73:b6:51:ed:79:72:a9:bf:7f:dd:
41:1c:4c:96:b9:9c:f0:c5:29:5f:fb:9d:0e:56:17:
fe:50:fc:ae:13:7b:24:a7:7d:0d:e7:e8:de:34:36:
a8:2c:ab:c0:68:8f:d4:a5:c1:14:3b:85:43:57:12:
8b:d0:9f:46:86:f3:e3:2e:b9:12:0a:19:2c:64:c0:
52:03:7e:0a:33:6b:96:65:18:12:a2:6f:5a:ca:0d:
b3:df:c2:b0:b4:5c:87:02:d0:2d:c7:27:cf:27:ca:
8b:d6:c7:57:6b:8b:6d:58:1a:7e:37:8c:a4:82:a4:
eb:ee:ac:a0:16:ea:99:58:2c:bd:14:c9:e2:ff:a5:
99:e9:9f:9a:c4:14:72:af:29:d1:85:e5:5f:7f:6a:
6e:4b:54:71:55:c6:25:a3:4c:d3:05:90:7c:d0:21:
cf:19:ac:49:1e:e1:4f:85:39:3f:02:a5:df:2d:ed:
f9:41:a8:7d:a0:99:08:55:7d:3d:1e:88:fa:35:56:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:93:A3:F8:EF:7F:F9:74:FE:0F:B8:53:A1:96:54:65:4F:25:88
X509v3 Authority Key Identifier:
keyid:42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/T4KTo_jvf_l0_g-4U6GWVGVPJYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.180.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5c:06:06:88:96:f0:e8:6d:42:65:7e:6d:8a:56:67:fa:b3:
64:f0:0b:86:06:63:a8:2a:02:85:ff:e0:da:af:f3:41:ae:ee:
65:89:f9:62:40:55:e9:78:36:21:2f:8a:67:0d:f7:9b:d3:91:
58:ab:e9:60:92:68:9f:b3:b4:62:97:d0:d9:17:97:1f:04:ba:
5d:b7:ab:08:bf:01:d0:16:b7:72:8e:4c:e0:7f:f6:fc:e1:80:
c2:fc:7b:e5:95:6d:90:0a:55:3d:f1:8d:90:ed:ef:ca:6a:45:
0e:f1:78:f2:34:b5:2b:47:51:df:de:80:70:35:59:48:1b:07:
7e:df:ed:ca:87:2e:91:95:b4:ff:d1:ae:e2:ed:23:8b:89:cf:
fc:a7:d4:8b:d3:42:d6:0a:25:af:57:87:20:11:00:f5:c3:02:
b4:30:a8:8d:26:94:0c:29:24:c9:e4:b0:6c:37:2c:0c:64:64:
41:72:b4:25:2f:a7:4a:cc:7d:c1:52:6c:e2:63:89:b1:89:32:
8f:ff:78:c4:fc:52:ea:71:5c:bf:d8:b4:8e:4d:59:e4:52:6f:
7b:f5:bc:40:bd:80:c5:ec:70:fd:f3:b6:7b:02:59:74:bc:5c:
da:5c:3f:aa:47:2b:f5:32:7e:82:4d:65:ab:de:f4:8a:97:be:
05:65:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:27 2024 by rpki-client on console-ams.rpki-client.org