Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/IpJL17f_JuJQxTcstGUBbTSv7gM.roa
File: IpJL17f_JuJQxTcstGUBbTSv7gM.roa (raw, json)
Hash identifier: QGo4RkcWUoo/bZNK2hViAJHbMXD0Wy7et/aKT6u7EuY=
Subject key identifier: 22:92:4B:D7:B7:FF:26:E2:50:C5:37:2C:B4:65:01:6D:34:AF:EE:03
Certificate issuer: /CN=fd6f5c0b8a7339ad3d597421e9f00877e3f4b6f7
Certificate serial: 0185704BD688F567B48734E4DDECD8AA71AC
Authority key identifier: FD:6F:5C:0B:8A:73:39:AD:3D:59:74:21:E9:F0:08:77:E3:F4:B6:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_W9cC4pzOa09WXQh6fAId-P0tvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/IpJL17f_JuJQxTcstGUBbTSv7gM.roa
Signing time: Mon 02 Jan 2023 02:24:56 +0000
ROA not before: Mon 02 Jan 2023 02:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56655
IP address blocks: 185.14.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:d6:88:f5:67:b4:87:34:e4:dd:ec:d8:aa:71:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6f5c0b8a7339ad3d597421e9f00877e3f4b6f7
Validity
Not Before: Jan 2 02:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22924bd7b7ff26e250c5372cb465016d34afee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:ab:88:88:a2:77:60:f7:89:bc:84:a2:03:
fe:ac:ae:e4:be:64:54:58:2a:e0:ee:56:a2:e9:41:
21:de:ea:f9:52:12:65:f1:c1:49:48:91:da:48:bb:
a7:82:fd:02:a1:12:a9:9b:24:ae:cb:4f:49:ff:da:
b5:58:39:8b:eb:d4:27:1a:13:12:1b:ee:90:83:2b:
c3:7a:d9:ec:fe:95:77:ce:e7:fe:1b:a1:9a:22:9e:
d5:b2:49:3f:ac:b5:ec:db:cd:e5:e9:a3:04:29:e6:
2c:b8:f5:01:26:86:15:0d:37:c6:17:af:bd:8f:99:
65:21:2c:8b:aa:04:60:c8:0d:08:20:78:7f:33:78:
69:20:90:d7:aa:d3:02:8e:98:19:6d:8a:eb:a1:6b:
2f:2d:4b:b7:80:0a:d6:ef:ec:a4:d9:94:b5:6a:a8:
8e:fa:39:c6:6a:0d:14:4e:61:00:00:4a:01:27:23:
cf:ca:9a:80:df:b8:0e:a5:09:bd:16:7b:37:7c:86:
f2:43:b2:a9:f8:6f:6a:59:ca:82:9c:68:5c:56:35:
dd:c4:f9:40:45:08:2a:df:73:cf:70:cd:f5:21:da:
17:d1:10:14:57:9e:1c:2e:66:d5:73:1b:8a:43:7a:
7c:2e:61:14:56:8f:78:9c:bc:3e:48:90:da:e8:85:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:4B:D7:B7:FF:26:E2:50:C5:37:2C:B4:65:01:6D:34:AF:EE:03
X509v3 Authority Key Identifier:
keyid:FD:6F:5C:0B:8A:73:39:AD:3D:59:74:21:E9:F0:08:77:E3:F4:B6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_W9cC4pzOa09WXQh6fAId-P0tvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/IpJL17f_JuJQxTcstGUBbTSv7gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/f44e2e-2610-4997-bb12-aee9a4bea3aa/1/_W9cC4pzOa09WXQh6fAId-P0tvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.97.0/24
Signature Algorithm: sha256WithRSAEncryption
70:25:cf:0f:33:a9:a3:26:cc:72:f5:b5:af:12:59:fd:b5:42:
2d:78:69:fe:51:e5:86:fd:e8:0e:4c:05:52:c3:ce:04:e4:ec:
a6:2f:73:cc:1f:ed:22:a7:0b:da:28:b9:9d:b7:6f:da:2c:21:
90:ae:3a:70:f5:10:6f:61:fb:5e:d0:76:4c:8b:af:7b:bb:6f:
70:b7:e6:bf:af:62:4f:5b:f7:33:45:ee:5f:8e:74:97:56:6d:
19:06:76:1f:23:e6:22:c7:fa:b9:41:8b:7c:fc:3a:29:0b:8e:
62:58:ec:43:af:43:5e:9a:80:45:5a:8e:42:34:15:27:c9:27:
91:51:df:01:c1:4e:f4:0c:7f:e8:72:f0:6c:42:4b:af:79:71:
2b:dd:5b:b4:9b:e4:73:d1:9a:d7:0c:84:62:db:d1:e5:74:43:
eb:fb:f2:b8:c9:5a:da:5d:c4:d3:4d:a6:b6:92:ac:04:f1:86:
28:0b:b6:44:85:72:2e:c7:b1:31:d6:9d:02:5e:52:95:3e:21:
b6:87:37:e7:7b:44:c0:6e:09:86:b1:36:5c:bc:c1:33:8d:06:
72:56:10:d4:7e:b0:c6:66:3e:c9:ef:6d:5b:61:80:68:3e:72:
fa:cc:4c:9c:4b:ce:7e:0e:fb:98:9e:a7:46:19:c5:2d:2a:29:
16:dc:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:22 2024 by rpki-client on console-ams.rpki-client.org