Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/8oGMP3KS8iAtyL2v-d33WatKN5g.roa
File: 8oGMP3KS8iAtyL2v-d33WatKN5g.roa (raw, json)
Hash identifier: v6jrO0FBvfNFO/tB2fcALZpB+NR07tD7+htfqHHe8oQ=
Subject key identifier: F2:81:8C:3F:72:92:F2:20:2D:C8:BD:AF:F9:DD:F7:59:AB:4A:37:98
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01852B5DCEB66C601FD1ECBA749D3446B20B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/8oGMP3KS8iAtyL2v-d33WatKN5g.roa
Signing time: Mon 19 Dec 2022 17:10:46 +0000
ROA not before: Mon 19 Dec 2022 17:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 147.78.120.0/24 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:5d:ce:b6:6c:60:1f:d1:ec:ba:74:9d:34:46:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 19 17:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2818c3f7292f2202dc8bdaff9ddf759ab4a3798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:32:87:df:21:cd:ab:b5:e5:fe:b0:c0:b2:
1d:aa:a6:89:d6:a1:63:55:7f:62:8e:e6:d9:82:20:
c3:be:d4:5f:88:43:37:e0:32:b1:dd:e5:66:d0:29:
75:76:b0:24:55:64:a6:b4:04:7e:e0:34:61:6a:80:
e8:b4:9d:c9:86:b1:0b:92:58:c0:6d:d9:90:f1:d8:
6b:3e:c5:30:d5:ba:c5:69:c6:10:8c:21:52:93:7f:
8b:50:19:30:5d:90:e6:90:78:dc:4a:9e:8b:2d:04:
cc:ad:78:c0:77:47:f7:86:eb:3e:a7:d0:69:c8:ca:
4e:45:b4:f7:f6:ae:eb:96:1b:cf:95:b5:5c:17:d7:
15:39:01:80:68:b8:b9:20:22:78:d1:41:43:be:6a:
c8:0a:3b:34:bd:cd:36:f8:12:b2:a9:1d:32:b9:0f:
fa:38:6e:a0:ad:d7:07:af:de:e1:3a:8a:3b:c9:a2:
53:51:8f:b5:2b:5d:c2:f4:ed:93:12:9f:2b:9d:a8:
61:9d:18:8b:8c:ef:88:2f:18:ff:65:e7:f5:47:40:
bf:d2:f1:cb:99:8b:12:fa:6a:69:a6:8d:27:bf:6b:
90:a0:59:74:c7:61:c8:e3:76:40:aa:36:f8:b1:0d:
6e:74:32:34:32:5b:a7:81:84:6f:12:bc:7b:9e:00:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:81:8C:3F:72:92:F2:20:2D:C8:BD:AF:F9:DD:F7:59:AB:4A:37:98
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/8oGMP3KS8iAtyL2v-d33WatKN5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.120.0/24
193.142.22.0/24
Signature Algorithm: sha256WithRSAEncryption
19:33:54:a9:f5:c2:ef:59:8b:94:4c:92:d4:51:9c:83:eb:a9:
81:0d:b3:bf:98:50:f2:8b:76:52:ea:56:30:41:0b:1c:b0:c9:
42:6e:4d:f1:c0:17:5f:8d:5c:e0:72:b3:46:3a:3e:6b:9e:22:
bd:0c:ff:a9:b6:6e:05:ad:35:31:58:86:f7:c7:93:9f:ac:3e:
6a:82:a8:bb:8b:6a:56:03:73:f9:c3:3a:e0:80:21:d1:b5:4c:
b4:35:f4:af:a0:16:5f:2e:a6:ae:c6:1c:ba:75:e3:d2:3d:23:
3d:b8:80:50:76:bb:ab:0a:a2:0f:7a:6e:05:ea:45:c0:21:d8:
08:83:8d:fa:5d:4d:cb:09:5d:ef:f2:fa:ca:4d:dd:ba:55:91:
79:c6:71:ce:25:23:a5:82:6e:f4:77:7d:15:ee:85:7c:fb:1b:
d9:c7:3c:03:36:9e:c2:e1:ee:d7:3a:6c:d0:9a:42:08:0b:b6:
4d:72:33:a3:6d:03:d3:40:29:cd:fe:1a:41:19:ef:e7:02:df:
de:d3:ed:e2:21:7c:9b:5c:a2:1d:ea:85:b3:9a:b2:d2:85:db:
89:c5:b6:f3:4e:2f:d0:ac:c7:42:c6:ff:4b:2d:9c:7e:81:be:
34:c2:85:ec:c0:c7:da:e9:76:74:e2:68:ad:a1:89:6c:b2:3b:
be:79:67:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org