Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IUKCghSwyaSnAn9wzjvzkNPczaY.roa
File: IUKCghSwyaSnAn9wzjvzkNPczaY.roa (raw, json)
Hash identifier: HsaeyyDw4siHc60yA4jURO3ZT+SqaK+Cvndvs2toIKg=
Subject key identifier: 21:42:82:82:14:B0:C9:A4:A7:02:7F:70:CE:3B:F3:90:D3:DC:CD:A6
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0187AAC13545ED3A2636A4085D1E0033062E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IUKCghSwyaSnAn9wzjvzkNPczaY.roa
Signing time: Sat 22 Apr 2023 20:56:41 +0000
ROA not before: Sat 22 Apr 2023 20:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30081
IP address blocks: 92.114.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:aa:c1:35:45:ed:3a:26:36:a4:08:5d:1e:00:33:06:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 22 20:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2142828214b0c9a4a7027f70ce3bf390d3dccda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:3d:05:ef:c3:ac:59:bb:23:05:88:b7:25:
7c:4a:2d:d0:69:a8:83:d2:ca:d3:c1:b6:df:41:d2:
3b:16:c1:c3:6e:72:f0:34:83:26:00:2d:51:31:9b:
fa:30:40:a4:ea:21:c2:a2:34:4f:6d:bc:73:bd:1f:
5d:09:11:b0:a7:df:bd:81:48:d9:36:d2:f0:9e:5c:
56:5c:97:d7:eb:f2:b0:f4:2a:62:fa:bc:7c:2a:82:
88:c9:37:bf:6d:13:7e:56:7e:4e:d7:7c:52:d0:61:
50:25:10:15:e4:c6:d3:94:0e:07:ad:ae:76:cd:83:
6b:06:00:64:1a:a5:38:a1:8d:8f:6e:ab:9a:75:e9:
69:79:6c:64:61:68:72:e6:59:2e:ee:27:b7:5d:a1:
04:8b:6e:19:39:15:e2:47:ef:17:06:33:cf:86:e3:
14:a7:e4:cf:63:44:77:70:b7:b1:2a:2a:e6:d4:35:
37:a3:da:07:71:33:5c:e4:cd:04:37:e4:f3:a0:7a:
a2:4a:34:03:8b:62:51:09:9c:b6:fc:67:7d:e3:e6:
e7:b0:3a:eb:73:09:86:95:04:fd:88:da:e2:fd:95:
d5:04:f1:3f:4e:a1:b4:28:f8:fd:ae:e2:3a:e2:ce:
8e:77:a2:1b:c7:5b:95:ba:b0:b3:b2:03:43:94:f9:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:82:82:14:B0:C9:A4:A7:02:7F:70:CE:3B:F3:90:D3:DC:CD:A6
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IUKCghSwyaSnAn9wzjvzkNPczaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0a:e1:f5:85:1d:55:66:ad:95:4a:37:59:ae:95:07:e9:56:
16:84:1f:ad:1d:c5:56:3c:57:47:40:1d:a5:67:b8:3d:b6:f9:
02:b9:ee:0c:06:7e:7b:03:05:c4:ba:e6:0e:4a:69:f7:32:8c:
07:5a:12:c4:a6:e1:c0:aa:ae:96:53:d3:93:7c:36:d6:e2:02:
96:6f:15:18:39:90:c9:7f:98:99:bb:0d:df:74:fd:6b:fb:4c:
2e:23:b8:59:87:b7:87:9d:a0:65:57:29:9d:62:e4:a2:8c:ed:
d1:58:a8:da:9b:3c:bd:73:a0:84:2e:84:c8:4d:98:98:b6:8e:
52:9c:b3:bf:31:32:c6:2a:2c:00:72:76:e4:39:71:ff:82:3e:
22:59:1d:9e:2c:35:20:fc:97:f9:48:23:c1:c4:f6:ca:cf:46:
e5:b8:03:76:cc:5e:ba:7d:70:bf:af:52:4f:cf:47:79:49:cd:
c9:96:b3:6e:54:67:60:a8:e8:52:43:74:2f:f0:85:ba:b2:21:
ad:d6:1d:80:81:90:37:3a:97:a9:34:63:d5:e8:a7:c2:2a:80:
86:2d:64:0a:14:04:11:41:09:8b:ab:f7:c7:7e:17:88:ca:0f:
0a:89:68:d9:cd:b4:dc:9b:a5:06:ea:0e:f1:78:d4:ef:bc:c9:
13:9d:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org