Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OyMBEuGI4DgD6u9Qnz1qQQdff68.roa
File: OyMBEuGI4DgD6u9Qnz1qQQdff68.roa (raw, json)
Hash identifier: Xr67U8hef+vNdyshFsNAflhaDVaK1dpERHCVv9bXeEo=
Subject key identifier: 3B:23:01:12:E1:88:E0:38:03:EA:EF:50:9F:3D:6A:41:07:5F:7F:AF
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03ED8730
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OyMBEuGI4DgD6u9Qnz1qQQdff68.roa
Signing time: Wed 16 Mar 2022 09:15:44 +0000
ROA not before: Wed 16 Mar 2022 09:15:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208068
IP address blocks: 192.166.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65898288 (0x3ed8730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 16 09:15:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b230112e188e03803eaef509f3d6a41075f7faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:e0:33:41:81:ea:2d:91:d6:37:0d:6a:de:
3b:84:62:1a:3d:91:45:d5:22:35:84:8b:05:50:db:
56:8e:47:bc:1e:1f:cc:2e:b4:f6:f8:ff:b6:c5:c9:
12:6c:7f:54:1b:f7:f7:17:6f:2b:a2:b9:42:7d:0d:
d0:d7:8c:50:b9:c5:c7:af:94:f0:20:95:46:1c:58:
33:be:e1:05:b7:37:ae:54:01:a3:44:92:70:57:46:
56:d0:f4:ea:1b:93:af:28:27:37:48:b4:c5:64:1f:
4e:11:0a:a6:22:11:aa:d0:59:5d:9d:d8:35:da:9c:
b9:f3:af:ef:10:2a:b3:83:44:c7:57:e9:b5:5f:08:
3d:fd:4a:7a:1c:d0:b7:d1:3d:20:ad:a6:75:03:64:
ea:53:5a:09:16:ae:95:b8:e3:7e:9a:1f:89:af:0b:
d4:0f:88:fc:fe:18:40:43:a1:d3:51:d1:3e:6e:da:
cd:46:3e:06:f7:79:54:a9:26:59:c1:ff:78:2c:db:
f0:4a:81:55:fa:5e:9f:b2:aa:eb:3f:bd:bb:51:26:
c0:2b:28:a3:c4:97:73:6f:75:82:57:fb:ed:6c:40:
6a:b2:84:df:87:bd:57:f9:9a:67:6a:36:73:7a:8e:
0b:9f:b0:b3:90:97:99:05:22:7e:66:83:10:07:8e:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:23:01:12:E1:88:E0:38:03:EA:EF:50:9F:3D:6A:41:07:5F:7F:AF
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/OyMBEuGI4DgD6u9Qnz1qQQdff68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b6:09:9c:96:2a:90:9a:98:44:b7:4a:e6:10:4a:74:da:37:
fc:a6:34:68:b8:38:e0:86:3c:2a:7d:44:d0:e6:1d:26:e7:cf:
28:04:41:89:f5:b9:20:82:f1:57:72:bc:65:65:93:a6:6c:26:
45:9f:2c:c4:88:8a:7f:aa:48:8a:aa:fc:4c:65:17:8d:96:86:
bf:0f:1e:de:c2:cb:f3:8f:d2:1b:e1:11:9f:b5:d4:15:de:c2:
36:66:13:de:8d:08:2d:d4:40:27:7e:b8:c9:e9:0f:51:26:c3:
00:67:4a:96:13:97:55:ad:cb:89:4f:b9:ac:be:d6:91:ea:d7:
10:4e:eb:cc:44:ed:1c:e6:15:5a:a8:76:7e:45:8b:fc:c6:88:
c6:67:ba:47:87:32:51:f6:5f:11:f9:b6:40:f4:76:13:43:17:
dd:72:cd:eb:6a:35:7d:1c:70:09:b2:a3:d4:f3:ca:e5:91:78:
f8:64:66:5b:d7:81:9b:fd:62:a9:14:7d:a8:61:9d:93:35:3f:
59:8e:da:92:7f:f8:c7:eb:e5:f3:c4:3b:3c:a5:21:37:3e:1d:
4e:d5:f9:6c:13:94:7b:63:8c:cf:76:95:77:0a:09:15:fd:ca:
a5:ae:c5:ac:54:ba:12:11:f8:a9:be:b0:ab:e1:b5:5c:eb:56:
2e:6e:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org