Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/wEq7V9gLpdtpocTD-eUoCZO_pXg.roa
File: wEq7V9gLpdtpocTD-eUoCZO_pXg.roa (raw, json)
Hash identifier: ON66VDo8hD73epdeCTxyWqQhn238lD/6duNBD4ZVUrY=
Subject key identifier: C0:4A:BB:57:D8:0B:A5:DB:69:A1:C4:C3:F9:E5:28:09:93:BF:A5:78
Certificate issuer: /CN=10ea95c5313c6c5876fdbe03d37f05d00adc2df1
Certificate serial: 03CDEAEB
Authority key identifier: 10:EA:95:C5:31:3C:6C:58:76:FD:BE:03:D3:7F:05:D0:0A:DC:2D:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOqVxTE8bFh2_b4D038F0ArcLfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/wEq7V9gLpdtpocTD-eUoCZO_pXg.roa
Signing time: Sat 01 Jan 2022 15:03:59 +0000
ROA not before: Sat 01 Jan 2022 15:03:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16262
IP address blocks: 192.162.240.0/21 maxlen: 21
195.211.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63826667 (0x3cdeaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ea95c5313c6c5876fdbe03d37f05d00adc2df1
Validity
Not Before: Jan 1 15:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04abb57d80ba5db69a1c4c3f9e5280993bfa578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:96:fa:e3:88:74:63:6e:96:f9:ee:d6:e6:
e9:21:cc:89:fc:5d:ba:b0:2f:4c:cd:a8:36:4e:f8:
fc:47:07:1f:28:4b:c1:6c:e3:13:f0:84:fd:f3:2c:
f7:f2:64:8d:ad:2d:a2:1e:61:2a:1a:90:ac:be:80:
6c:fe:70:c1:9a:e3:37:56:0c:13:63:85:49:7d:2a:
48:cc:36:30:86:10:c2:ff:98:8c:ae:60:0c:00:82:
84:94:bc:96:37:47:83:34:b7:b3:54:ab:6b:24:6b:
4a:d3:1b:c8:84:88:73:37:2e:28:a7:94:aa:4c:db:
3c:bd:7b:c2:36:37:cb:a5:25:83:80:98:bf:60:f1:
51:6e:5e:4f:9a:71:0a:64:51:1d:06:e4:64:42:ff:
b2:9b:f4:aa:a6:7d:39:de:38:96:34:71:aa:0d:5a:
cd:0c:a8:e8:36:1e:14:de:19:6c:c8:51:f2:14:53:
90:3f:1d:f8:c4:41:30:9c:68:5e:c4:f7:02:e4:3d:
df:01:c1:e4:5b:c3:01:e7:98:9f:06:79:1d:13:ff:
ee:8b:f4:6a:96:2b:cf:92:db:5a:81:20:1d:ca:ed:
98:76:65:1a:8d:67:5c:3c:9d:ee:a5:b6:61:c7:2d:
84:40:0c:ab:52:01:03:36:f5:3b:65:5c:1d:08:4e:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:BB:57:D8:0B:A5:DB:69:A1:C4:C3:F9:E5:28:09:93:BF:A5:78
X509v3 Authority Key Identifier:
keyid:10:EA:95:C5:31:3C:6C:58:76:FD:BE:03:D3:7F:05:D0:0A:DC:2D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOqVxTE8bFh2_b4D038F0ArcLfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/wEq7V9gLpdtpocTD-eUoCZO_pXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/126c44-7186-4af9-ac1d-0b00f0736ffb/1/EOqVxTE8bFh2_b4D038F0ArcLfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.240.0/21
195.211.100.0/22
Signature Algorithm: sha256WithRSAEncryption
04:66:04:88:45:74:fe:98:61:65:55:60:c2:11:97:13:95:00:
18:f9:dc:e6:0d:f2:c3:ad:22:b8:d6:e9:16:36:f5:0a:90:97:
ce:7c:31:4d:de:27:87:b5:f0:77:16:3b:9c:fa:93:9f:fc:97:
19:91:a6:d0:57:1a:c3:37:7b:17:7e:eb:8e:9b:2a:71:39:6b:
f7:01:f6:16:d6:53:2e:da:b0:91:27:81:56:f2:61:7c:c6:a3:
5e:65:b7:dc:5c:c6:8b:92:79:2c:ed:ab:83:d0:da:3a:92:43:
98:b4:e0:fd:6a:84:85:9e:37:b1:c1:02:82:19:7a:87:86:57:
9b:2a:b8:a2:3d:f3:2d:fd:6a:fb:ac:a5:4e:3a:01:a9:0d:d8:
75:3e:00:c0:d7:8a:28:ee:8d:bf:df:d6:04:fb:fe:e9:d7:d6:
66:0e:38:8b:f6:6f:97:94:23:c1:0e:23:55:38:6f:55:58:59:
89:88:de:8b:d6:d4:57:6f:c5:ce:75:8a:ee:80:d5:7b:93:18:
2c:26:5f:f2:1d:b2:2c:61:6c:1b:ba:5d:7c:fa:ff:06:8b:3f:
b1:da:b8:d0:a9:d3:94:63:c8:8c:f4:a4:e2:63:9d:8c:1a:53:
2e:18:a1:2e:6b:c7:ae:ef:5b:20:99:d5:28:6c:71:e4:33:0e:
7e:96:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:38 2023 by rpki-client on console-ams.rpki-client.org