Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9CVJc8D_gOhKhjHGrRtNJjG6UTY.roa
File: 9CVJc8D_gOhKhjHGrRtNJjG6UTY.roa (raw, json)
Hash identifier: iFVB898mPoRsdUTA5T08wT33c29shcoHN2wieDlUgvk=
Subject key identifier: F4:25:49:73:C0:FF:80:E8:4A:86:31:C6:AD:1B:4D:26:31:BA:51:36
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182119CE14827EEF52F7CD3A5668724514D
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9CVJc8D_gOhKhjHGrRtNJjG6UTY.roa
Signing time: Mon 18 Jul 2022 14:01:10 +0000
ROA not before: Mon 18 Jul 2022 14:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 147.78.121.0/24 maxlen: 24
195.20.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:9c:e1:48:27:ee:f5:2f:7c:d3:a5:66:87:24:51:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 18 14:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4254973c0ff80e84a8631c6ad1b4d2631ba5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:98:52:4c:9d:a4:d7:e0:8f:7e:8b:5a:f2:
ce:b9:60:c6:98:f7:e0:ea:41:71:c2:6a:fe:d5:50:
3e:76:95:ba:6b:33:4f:5b:d0:b8:f3:5b:fd:a5:bb:
21:78:a9:69:87:71:bd:eb:58:83:56:ac:20:29:44:
f3:9c:16:f5:df:6c:b9:68:89:b1:6e:d1:7b:99:f9:
de:aa:e1:e9:a0:0d:9b:be:1b:23:d6:24:18:48:9e:
46:67:1d:7b:a2:cc:5c:96:24:f0:ef:71:25:ee:f2:
fb:72:17:6d:db:ee:42:1a:8f:6b:38:01:ae:2f:63:
bb:7a:e3:14:e9:59:85:42:5d:95:3c:f0:7a:3c:f1:
76:0e:35:c4:52:98:6a:5c:b8:1b:91:88:41:01:d8:
1a:ec:7b:e2:28:4f:60:07:7a:12:8b:1a:03:d0:d2:
5d:75:f3:d3:4a:b4:a7:96:0a:b5:33:74:13:ff:9f:
53:08:f8:8d:f7:4f:08:b4:53:70:94:57:41:9f:09:
65:7f:f5:92:bf:dc:c2:43:c4:40:f1:a4:ff:02:34:
de:2a:c5:ee:3a:f3:b7:fd:3e:2f:62:f0:72:be:7d:
9d:29:ec:79:a2:c5:ed:bb:f1:05:a8:f9:3e:5d:ad:
07:10:ba:4f:bd:98:3f:f0:5c:6a:e6:3c:8f:40:3e:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:49:73:C0:FF:80:E8:4A:86:31:C6:AD:1B:4D:26:31:BA:51:36
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9CVJc8D_gOhKhjHGrRtNJjG6UTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
195.20.104.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6d:3e:cc:b0:35:06:34:4a:bd:6c:1c:c8:4a:d2:60:51:48:
6e:d3:c0:d1:b0:bc:dd:bc:f2:f6:59:93:bf:e4:45:0a:73:1c:
ee:b9:43:61:39:e9:93:44:4b:1b:8f:3d:ea:16:fb:dc:54:46:
ff:8e:5a:64:a1:5a:49:ff:82:51:c9:bd:d6:73:59:d9:1c:11:
8a:56:95:30:9b:19:1a:24:af:09:12:e6:98:28:b3:f7:03:46:
d6:0c:76:55:45:06:19:28:5e:7a:8f:84:32:20:53:bc:7e:68:
fa:30:26:7a:79:c4:85:01:58:df:fd:d8:b7:eb:c8:ca:46:6f:
4d:d5:e1:d9:e4:a6:38:d9:99:b0:58:b9:8f:56:08:57:15:12:
2d:83:f8:22:4f:e9:51:37:bd:d0:fa:3f:55:87:bb:2d:70:98:
e0:94:fd:25:86:40:f4:95:14:f0:69:59:68:75:5b:f1:97:7a:
3f:ab:5d:fd:12:eb:5d:b6:c3:a9:59:d5:f6:08:b3:6a:f4:b5:
54:14:c3:85:22:97:e7:08:d5:2c:6b:e2:25:7a:6d:aa:f9:b5:
a2:a1:db:61:0d:15:54:d8:c4:bd:ec:41:65:ea:c7:4e:a0:99:
5a:78:98:a6:ce:2c:e9:f7:99:f3:a0:06:8a:f7:8e:83:e4:f3:
90:a3:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org