Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/ivoKRanE00kAGoz2dJyF9T6her0.roa
File: ivoKRanE00kAGoz2dJyF9T6her0.roa (raw, json)
Hash identifier: FyhJwZChZjT8vptAqRSDKRK17b51daOaHK3k4BAZnwU=
Subject key identifier: 8A:FA:0A:45:A9:C4:D3:49:00:1A:8C:F6:74:9C:85:F5:3E:A1:7A:BD
Certificate issuer: /CN=8c9b33abf5c3e94d48435792703eed71a4e29995
Certificate serial: 4F6296
Authority key identifier: 8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJszq_XD6U1IQ1eScD7tcaTimZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/ivoKRanE00kAGoz2dJyF9T6her0.roa
Signing time: Sat 01 Jan 2022 03:53:24 +0000
ROA not before: Sat 01 Jan 2022 03:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 217.8.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5202582 (0x4f6296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9b33abf5c3e94d48435792703eed71a4e29995
Validity
Not Before: Jan 1 03:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8afa0a45a9c4d349001a8cf6749c85f53ea17abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:f3:4a:57:5b:76:a4:03:39:2d:58:46:5a:
f0:c7:92:e2:25:14:92:08:c8:b3:58:f1:dc:54:9e:
90:0b:df:05:14:f1:b3:04:63:c5:2e:ae:91:1a:9f:
2b:75:ac:7e:50:97:28:df:f7:8a:4c:25:74:57:4e:
67:cc:77:ef:40:5e:89:e6:11:00:ea:ca:9b:9f:6f:
45:80:8d:23:7a:af:6d:d4:c4:53:72:23:4e:0d:0f:
a6:9c:e0:ec:b8:eb:66:83:df:ff:f9:3f:4d:66:99:
67:ca:3c:ef:49:a8:12:d5:ce:0e:83:42:49:03:32:
a0:47:d0:51:a1:45:21:f8:bf:b3:4a:30:17:6f:76:
63:1b:27:59:4c:e1:48:08:4a:6f:62:2a:36:07:a2:
a8:c5:8b:34:f9:4a:78:a9:df:08:28:c9:e5:ab:40:
10:87:7d:ce:79:61:2f:54:48:85:21:3d:a7:bc:b9:
71:3f:6e:c0:63:0f:4b:a4:8c:bb:7d:9d:71:35:9f:
5a:c9:08:17:cf:d0:8a:0a:94:fe:0f:14:2f:e0:49:
98:ba:87:17:28:0f:87:2c:8f:da:15:5f:c8:22:0b:
98:7d:27:b5:66:18:fe:3c:79:9d:20:55:29:67:12:
3c:44:18:18:08:f6:9c:f2:46:6e:c0:75:b9:33:1b:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:0A:45:A9:C4:D3:49:00:1A:8C:F6:74:9C:85:F5:3E:A1:7A:BD
X509v3 Authority Key Identifier:
keyid:8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJszq_XD6U1IQ1eScD7tcaTimZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/ivoKRanE00kAGoz2dJyF9T6her0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2c:c3:3d:b6:5b:49:ca:48:9f:f1:af:ba:1f:cb:69:bb:af:
7e:57:fa:84:47:3a:4d:22:1c:66:e9:33:a5:f8:8a:59:8e:9c:
11:ba:9a:ce:67:c1:02:68:f9:19:52:25:67:3e:5c:e0:43:ac:
df:02:07:5c:94:e6:c3:45:d1:54:7a:8c:51:f7:fd:17:1b:99:
0a:80:3a:af:37:b5:5a:67:cd:e1:bd:1b:c5:97:38:36:ca:2c:
31:5a:89:30:7b:8e:57:1b:a8:75:71:d2:fc:80:be:46:35:73:
89:0e:71:ae:e9:6f:54:92:fb:31:5e:87:ef:06:d4:9e:48:65:
ed:ef:72:08:b4:9d:68:53:8c:96:81:57:00:80:99:c3:92:cf:
0b:ef:6a:29:cd:51:c8:7a:f0:de:99:6d:ad:06:06:01:96:dc:
8c:67:18:0c:9e:be:20:a8:69:88:55:5c:40:73:2f:b4:09:56:
55:07:6a:38:d3:7a:c7:2d:43:ed:33:f7:62:dc:71:10:8f:1d:
c2:05:96:50:aa:90:50:3f:db:22:61:37:be:42:7c:a3:76:57:
64:8f:ec:b8:19:e1:54:70:2f:df:e6:81:c1:eb:51:93:fa:ae:
b5:80:58:b1:a7:61:67:bd:7f:b3:f2:e7:6c:1b:2e:a1:25:dd:
f8:83:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net