Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/bDiZe-WvLdMxEsavA2JPINyupcg.roa
File: bDiZe-WvLdMxEsavA2JPINyupcg.roa (raw, json)
Hash identifier: x+ay2d9IS8SL2uGAoNAx5U9DnUDyIK/CBC7QyU3GrLI=
Subject key identifier: 6C:38:99:7B:E5:AF:2D:D3:31:12:C6:AF:03:62:4F:20:DC:AE:A5:C8
Certificate issuer: /CN=425e3038f75e70fecf8d2347f0464c88d3161af7
Certificate serial: 018CC7949C541981C00C1B944971C973FAC7
Authority key identifier: 42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/bDiZe-WvLdMxEsavA2JPINyupcg.roa
Signing time: Tue 02 Jan 2024 00:30:54 +0000
ROA not before: Tue 02 Jan 2024 00:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:9c:54:19:81:c0:0c:1b:94:49:71:c9:73:fa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e3038f75e70fecf8d2347f0464c88d3161af7
Validity
Not Before: Jan 2 00:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c38997be5af2dd33112c6af03624f20dcaea5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:f9:1e:a8:c6:f8:ff:18:e5:88:13:35:d5:
09:fb:9e:34:7f:22:13:1d:73:0e:b4:16:b6:38:d4:
e8:b4:9c:a9:f5:b4:db:26:3e:06:9c:58:8d:04:1b:
e4:ed:60:96:04:ae:5c:73:5b:6a:d6:76:0d:4c:d8:
56:21:09:ba:88:60:89:be:b5:36:a6:76:54:76:bb:
8f:15:92:ce:67:8b:9c:db:29:e6:3b:dc:8c:7d:d4:
4f:57:eb:e5:e4:95:bc:89:9c:e7:65:c7:4e:d3:27:
69:79:7e:da:89:d6:af:22:80:fc:05:0a:24:0c:b8:
b5:8f:ec:c4:96:59:d5:a3:51:08:a9:d2:aa:9c:c7:
b7:9a:e3:7c:d2:9a:21:8a:e1:f6:d5:a7:81:18:e1:
61:1a:bc:5a:2f:72:a3:ad:36:c3:1b:dc:27:3a:d7:
2e:15:62:1b:89:2f:c1:5d:36:2c:ad:c3:b4:10:d7:
d5:06:06:89:9a:f6:85:49:b0:a6:36:23:16:ab:d3:
92:04:83:8d:7c:1f:58:80:c1:3f:64:ad:f9:36:82:
5f:47:2e:95:d0:14:b9:8a:4a:e7:32:73:3e:3b:5f:
03:96:d5:8b:52:53:99:af:34:57:e1:7e:34:52:f0:
41:f1:23:cb:4d:4c:ba:9f:ef:0b:4c:c7:32:27:10:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:99:7B:E5:AF:2D:D3:31:12:C6:AF:03:62:4F:20:DC:AE:A5:C8
X509v3 Authority Key Identifier:
keyid:42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/bDiZe-WvLdMxEsavA2JPINyupcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.180.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:0f:f1:5b:f7:17:ef:c8:2c:3a:2b:b8:a7:2d:01:81:6f:3d:
75:f3:5b:92:37:e8:1c:7c:d0:3f:9a:b0:f5:d8:17:04:57:1c:
e0:57:d9:9f:5d:02:e2:bf:7c:9e:f4:18:0a:97:7d:91:ac:d5:
82:05:aa:e0:1f:dc:36:b7:33:de:d6:f1:01:6d:90:d6:e1:8e:
fe:f7:58:20:8f:80:37:00:fc:09:06:a8:d0:51:30:7e:a9:66:
5e:46:93:95:69:5b:de:de:9a:e3:57:05:df:5c:06:d8:07:73:
95:a7:1d:61:f0:4d:b4:2b:81:2a:18:ba:16:12:cd:5e:96:22:
b5:2f:ca:31:e0:d0:26:cb:8c:94:07:c9:03:1f:5d:79:41:db:
f5:77:08:3d:be:c5:b6:64:ff:b9:3d:45:79:7d:83:6d:c6:98:
8b:67:b4:7a:ea:85:13:7e:50:9e:69:b3:59:d3:ae:b6:e1:e4:
0d:fd:36:6f:a2:72:01:a4:09:ca:20:f0:91:5d:55:40:8e:c6:
95:ab:2c:5b:d3:48:1c:dd:47:d2:98:ef:6b:ec:4b:c8:5c:fe:
a5:e0:ad:76:40:29:80:3c:c9:c0:e8:9f:f5:fe:ac:0c:e5:f6:
6b:29:66:74:e1:ed:7e:48:6a:64:57:ff:1c:ab:b7:b2:d6:23:
35:11:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org