Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/Zs17UJLaKJ1aR6396R8ChVH2vAY.roa
File: Zs17UJLaKJ1aR6396R8ChVH2vAY.roa (raw, json)
Hash identifier: f3EIwoY1VKXeI+KXQGYbAQNWYuv4yhaxzRe/sA/Blvg=
Subject key identifier: 66:CD:7B:50:92:DA:28:9D:5A:47:AD:FD:E9:1F:02:85:51:F6:BC:06
Certificate issuer: /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial: D129A0
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/Zs17UJLaKJ1aR6396R8ChVH2vAY.roa
Signing time: Sat 01 Jan 2022 00:56:58 +0000
ROA not before: Sat 01 Jan 2022 00:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201702
IP address blocks: 217.114.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13707680 (0xd129a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Validity
Not Before: Jan 1 00:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66cd7b5092da289d5a47adfde91f028551f6bc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:55:ee:42:d9:f6:ee:59:70:0c:cb:9d:ca:
2b:28:6f:2b:1b:66:15:a6:92:14:88:19:c9:21:81:
87:bc:3b:90:3e:58:d1:3b:1a:77:be:76:26:d4:78:
5f:ab:d9:d8:c3:3a:70:4c:8b:a0:57:8a:75:07:25:
d3:fd:54:b4:7a:52:9e:4e:5a:68:69:59:ca:88:ce:
d1:bc:db:1e:2d:ac:cd:c9:7a:c3:1a:56:49:8e:e3:
ba:0d:40:64:57:98:27:80:94:cb:2e:0f:5a:06:e0:
52:e2:da:56:f6:fd:c1:b7:10:4a:13:09:76:f8:cf:
82:cb:f7:01:4c:2c:58:94:88:84:a3:d0:42:ae:3b:
99:bb:82:57:ef:6e:42:3d:b1:00:61:9b:58:43:be:
bd:38:d1:46:5b:d5:bb:b8:f4:69:c1:6d:df:97:21:
49:15:17:de:2a:fc:72:46:df:8b:23:ad:34:84:c7:
fa:86:9e:c4:6d:a3:d8:e9:53:f8:0f:61:dd:5a:e1:
15:2e:d1:74:46:92:35:85:89:6b:e0:41:60:51:92:
14:f7:b9:5b:67:4a:2c:2b:9f:55:35:d9:3a:da:62:
04:e3:0f:4a:d5:69:92:2d:12:f9:1e:73:7b:a5:81:
fa:50:31:2c:e9:2a:ae:06:d2:e0:65:6b:2b:78:27:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:7B:50:92:DA:28:9D:5A:47:AD:FD:E9:1F:02:85:51:F6:BC:06
X509v3 Authority Key Identifier:
keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/Zs17UJLaKJ1aR6396R8ChVH2vAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.46.0/24
Signature Algorithm: sha256WithRSAEncryption
74:00:fe:d2:9a:9b:98:3b:73:f0:b5:69:39:54:4a:dd:ff:d8:
b3:27:62:8e:8d:90:cc:38:8e:2c:ee:fa:97:c8:d0:a3:ee:cc:
7c:c7:ca:74:67:e5:e7:1d:ce:14:09:c8:86:f2:0f:5f:38:27:
a6:1b:cc:8e:bc:2c:47:43:d6:86:f4:bc:5f:06:6b:dd:8d:11:
df:ca:6b:4d:d7:1b:92:46:5d:f2:57:39:4d:1d:49:7d:ee:ee:
77:25:59:69:ba:cd:49:91:a6:3c:56:6c:1f:a6:99:ce:d7:c4:
fe:6c:bf:20:d7:9e:38:cb:b3:dc:b1:05:97:d2:48:8f:8d:4a:
57:14:d9:1c:ed:ca:33:ca:2b:46:ce:5e:a4:86:33:72:94:97:
39:47:94:c4:7a:bb:2d:17:83:e6:1a:64:aa:75:0a:46:e0:7a:
7f:b1:82:06:7e:79:5d:4f:a3:08:46:db:44:9c:3a:ca:d0:12:
d0:6e:50:a8:bc:6c:9d:a0:69:e6:21:53:12:61:d2:2c:ea:62:
dc:9c:7e:70:23:87:22:44:6a:d2:91:4c:2c:a5:01:ac:85:22:
4f:fc:4b:cc:11:6a:51:4d:b9:0f:1f:e8:36:82:a6:4e:de:23:
cc:28:08:5b:af:01:53:af:8e:ac:8c:fd:73:47:2f:43:cf:07:
6f:cc:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net