Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/i-fwMoMmEiyY9ClwsxebA1zy--A.roa
File: i-fwMoMmEiyY9ClwsxebA1zy--A.roa (raw, json)
Hash identifier: uqQoW7S9D9ruBvU3jDcL6AqHGiqbZB8OPjnUwYJK3n0=
Subject key identifier: 8B:E7:F0:32:83:26:12:2C:98:F4:29:70:B3:17:9B:03:5C:F2:FB:E0
Certificate issuer: /CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Certificate serial: 0997DBF7
Authority key identifier: 75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/i-fwMoMmEiyY9ClwsxebA1zy--A.roa
Signing time: Sat 01 Jan 2022 16:01:13 +0000
ROA not before: Sat 01 Jan 2022 16:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12778
IP address blocks: 212.72.96.0/19 maxlen: 24
77.234.128.0/19 maxlen: 24
2a02:d68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160947191 (0x997dbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75682847f83db828e7f04c2cb5ceb6d8c4237fab
Validity
Not Before: Jan 1 16:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8be7f0328326122c98f42970b3179b035cf2fbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:d2:14:8e:be:87:b4:af:9f:43:4f:9e:07:
27:d4:8e:c8:72:b3:c2:06:f3:a8:78:60:64:9a:43:
6f:d9:4d:e0:5a:70:bf:75:d7:03:88:57:62:37:be:
3b:6b:5a:77:d6:1e:dd:22:29:6c:86:06:c1:ad:d7:
e9:0c:e9:29:ff:f3:b0:01:d1:f3:91:87:62:44:31:
c2:7e:29:3c:94:62:8e:60:4a:c7:68:63:c9:52:7f:
b1:2d:53:d8:b1:20:32:9c:0a:6a:50:6c:dc:c8:c2:
dd:07:e0:a7:5f:67:d0:63:28:59:04:fc:00:76:79:
01:8f:99:67:ae:6d:3f:63:3a:73:f2:a0:56:0c:04:
86:83:12:8f:91:c5:eb:2c:ce:99:7d:15:46:a6:ca:
2c:6c:7b:bf:58:89:25:8b:de:e5:68:e5:3f:d7:9c:
49:c1:12:21:e6:91:e6:34:03:43:e4:f3:82:4c:d3:
07:77:80:f7:4a:88:98:0d:ff:f7:2f:99:bf:3e:1f:
66:8e:61:15:8f:5d:5f:d5:89:d6:7a:2e:3b:f9:7c:
f8:54:70:18:c9:68:a2:d3:fd:bc:9c:68:79:cc:17:
92:ed:f7:cc:88:0c:fa:05:49:f0:3e:89:7a:99:1f:
66:7e:2e:1a:2b:c4:d5:83:4b:c2:5c:88:c4:c2:e4:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:F0:32:83:26:12:2C:98:F4:29:70:B3:17:9B:03:5C:F2:FB:E0
X509v3 Authority Key Identifier:
keyid:75:68:28:47:F8:3D:B8:28:E7:F0:4C:2C:B5:CE:B6:D8:C4:23:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWgoR_g9uCjn8Ewstc622MQjf6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/i-fwMoMmEiyY9ClwsxebA1zy--A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e90c79-fd14-4b5a-8d63-5cc7411c6ada/1/dWgoR_g9uCjn8Ewstc622MQjf6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.234.128.0/19
212.72.96.0/19
IPv6:
2a02:d68::/32
Signature Algorithm: sha256WithRSAEncryption
ac:2d:df:cf:15:a3:5b:6d:81:1d:4a:50:96:6f:c4:4c:77:1b:
b1:b8:c6:20:14:51:60:ef:85:ba:64:44:d0:3c:af:32:f0:2b:
b0:f5:f5:c6:06:f8:51:1b:e3:dd:60:44:f8:95:60:f8:38:ec:
1f:4c:8b:13:62:81:d9:d2:71:73:03:74:5a:3e:5d:68:ea:1d:
25:58:f2:6a:1a:f8:2a:84:e9:71:67:14:83:f2:e4:3e:26:23:
a5:cc:cb:68:e8:e1:64:e8:40:12:44:b5:23:29:95:ac:41:f9:
86:f2:3b:71:eb:8f:d2:9b:62:64:c2:00:a2:2e:a3:e8:3e:56:
29:5a:12:4b:b1:ab:13:3b:aa:c7:71:d5:00:ed:d3:55:74:96:
d1:59:c6:c4:84:db:3d:44:e7:25:d1:6e:ee:64:78:9a:f1:2e:
b4:d0:5f:ec:17:0a:ba:d8:06:61:4b:52:54:dd:61:e0:b0:17:
d6:8c:79:e1:bd:0e:70:67:65:ec:b2:05:0d:8b:7a:28:96:2e:
2b:13:3b:f2:2f:18:90:ad:c7:bd:e6:96:d3:d3:c6:58:c9:4b:
98:2d:a0:db:c8:30:b9:17:ac:d0:07:05:81:0e:87:d8:f0:3c:
90:e9:5b:64:71:fb:bb:12:a0:59:97:f8:ca:58:df:ff:52:d6:
50:b0:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org