Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/F39Rrgz7S7FbqVZfIA1gMThfNT4.roa
File: F39Rrgz7S7FbqVZfIA1gMThfNT4.roa (raw, json)
Hash identifier: eMqqH0BsfD6O3WSFc1QBSMkFMDdeqMEBbL2WPS2yBI8=
Subject key identifier: 17:7F:51:AE:0C:FB:4B:B1:5B:A9:56:5F:20:0D:60:31:38:5F:35:3E
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018C26F6DC4D744FAE573167BD54513EC3F0
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/F39Rrgz7S7FbqVZfIA1gMThfNT4.roa
Signing time: Fri 01 Dec 2023 19:59:21 +0000
ROA not before: Fri 01 Dec 2023 19:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210761
IP address blocks: 64.187.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:f6:dc:4d:74:4f:ae:57:31:67:bd:54:51:3e:c3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Dec 1 19:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=177f51ae0cfb4bb15ba9565f200d6031385f353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a7:15:2b:42:f2:c1:18:c9:6d:7c:d5:6d:e3:
0e:37:5a:ad:26:c1:b6:67:bb:2f:b8:a2:ec:55:22:
8e:ab:ba:83:b2:a9:82:27:d5:db:da:6f:15:ea:3e:
50:0f:a0:64:5b:ab:5b:dc:a7:c7:97:bc:db:c6:7c:
82:d5:38:be:e8:0d:5f:e6:79:dc:5b:0c:83:a6:96:
06:b5:2d:26:8c:f6:56:5e:e5:a5:c6:51:c1:f3:96:
dd:17:7e:4b:25:6b:06:09:5d:cd:6c:92:6a:39:d9:
a6:6a:95:ed:39:c8:91:98:4e:76:94:f8:28:b2:e0:
09:59:cf:a9:89:75:5e:d6:5f:0f:10:87:68:de:fa:
a8:15:71:55:8f:95:54:ba:af:36:36:de:11:77:ec:
fc:8c:9e:6f:2e:ff:7a:6c:80:01:3c:47:39:e5:b1:
08:63:7d:da:ac:3d:90:10:48:ea:e8:19:5e:68:60:
d7:56:47:8c:3a:4e:33:4f:1a:e6:3b:c5:79:04:55:
37:44:f2:fa:4a:ee:f6:4b:a0:ea:5f:9e:69:15:22:
fe:7d:a7:0d:05:bb:a9:b7:d4:8b:56:1d:52:f9:b3:
19:bc:2d:0a:22:7d:ee:13:54:e3:da:47:a7:5a:19:
1b:6a:90:16:a6:1e:ba:96:6d:56:6f:c7:b0:ba:95:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7F:51:AE:0C:FB:4B:B1:5B:A9:56:5F:20:0D:60:31:38:5F:35:3E
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/F39Rrgz7S7FbqVZfIA1gMThfNT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
Signature Algorithm: sha256WithRSAEncryption
08:ee:c7:65:87:50:ed:13:4d:43:80:0d:46:c9:af:07:8f:61:
d9:79:09:f7:a4:db:d5:47:80:5a:82:94:64:fa:91:9c:33:66:
ee:cf:d2:a2:3c:bc:ec:00:3c:1f:e1:52:9d:6f:ca:6d:ad:4c:
ac:2c:d6:65:97:84:b0:a5:db:bc:f5:64:4e:6a:1c:5c:ff:79:
6a:02:6f:46:c6:37:28:7e:e9:f6:34:34:5d:b9:ea:fb:6d:c4:
b4:16:75:08:79:f6:f9:27:f1:cd:2c:63:e8:38:6a:c5:39:d8:
f2:17:9c:aa:15:09:5a:34:65:99:be:df:3c:19:28:b2:4a:62:
67:49:77:52:96:0a:2a:8a:cc:89:8d:ce:56:42:5d:4a:1b:a4:
fc:07:59:3e:9f:b2:c4:d0:2a:eb:e3:eb:5e:87:12:93:01:07:
b4:13:f6:e4:09:79:31:ac:8b:af:10:a2:6b:54:a8:f7:ce:02:
f5:04:3c:0d:30:7a:d8:6b:77:4f:94:72:5e:3c:b7:a2:29:79:
35:11:c2:f0:94:a6:56:7f:9d:f5:0c:c1:84:60:eb:26:5b:22:
42:cf:95:ed:71:6e:20:52:a7:33:99:e0:c9:28:7d:95:97:1c:
b9:84:cf:dd:19:b4:ba:f8:22:29:3e:fc:a9:22:d5:21:20:bd:
ec:48:bb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:09 2024 by rpki-client on console-fra.rpki-client.org