Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m9X0VmMYSji8pCclIQzuKCI64jQ.roa
File: m9X0VmMYSji8pCclIQzuKCI64jQ.roa (raw, json)
Hash identifier: UN6cTLBsqtn8vr3jmvyjNekbGIEBqVwTYtXB/TPnllc=
Subject key identifier: 9B:D5:F4:56:63:18:4A:38:BC:A4:27:25:21:0C:EE:28:22:3A:E2:34
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04535BB9
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m9X0VmMYSji8pCclIQzuKCI64jQ.roa
Signing time: Sun 24 Apr 2022 16:09:33 +0000
ROA not before: Sun 24 Apr 2022 16:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.105.21.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72571833 (0x4535bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Apr 24 16:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bd5f45663184a38bca42725210cee28223ae234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:00:1b:31:79:14:60:61:5f:d2:af:9f:ef:
4a:f4:8e:e5:6a:c9:0a:19:60:89:77:eb:ef:83:26:
5f:5e:68:4a:68:c4:a9:c0:ba:4a:57:f3:ba:36:bd:
76:01:6e:f0:39:51:9b:91:27:c9:b7:6d:09:3b:e2:
b1:6b:7f:c0:0e:dc:34:80:a3:e7:6f:66:54:44:91:
8f:52:17:88:8e:44:e7:c3:c6:69:e6:3a:9f:80:ab:
64:23:ef:99:95:70:83:14:4b:73:30:e1:98:77:92:
b1:a7:14:14:02:b3:71:c2:20:0b:89:e6:6b:40:5d:
63:6e:37:f4:73:b7:7c:50:90:91:11:6f:04:ea:90:
11:0f:8d:64:9d:2b:08:1f:9a:44:d0:a7:aa:63:d4:
09:d1:3d:ba:93:e9:ab:71:4d:ff:75:b1:6d:ba:a4:
ee:04:2f:d9:a0:ba:2f:ea:b9:10:86:06:ce:38:3c:
bc:1d:53:5c:34:f0:68:7a:19:48:65:70:68:31:d6:
29:6b:15:f0:56:63:63:8d:3d:8b:5c:5d:de:e1:07:
37:7f:3c:1e:01:3b:59:c8:e0:92:81:5f:2f:e7:56:
32:90:f2:42:70:7c:ca:89:89:04:cd:00:28:bd:48:
a5:38:8d:6e:51:af:5e:d6:bb:77:e0:a6:68:f8:6d:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:F4:56:63:18:4A:38:BC:A4:27:25:21:0C:EE:28:22:3A:E2:34
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m9X0VmMYSji8pCclIQzuKCI64jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.168.0/24
147.78.120.0/22
194.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
03:65:51:e9:dc:aa:9b:f1:24:72:b4:34:ea:d4:28:1f:16:20:
ac:ad:83:dd:ed:05:bb:7a:9e:75:6c:df:4b:96:20:96:62:4d:
44:67:f1:22:cb:c1:7d:63:c1:31:91:ca:c9:c7:77:8b:6f:03:
17:ac:a1:f9:d5:7e:06:3b:9a:2e:09:1a:0f:c0:3c:55:f3:37:
fb:cc:1a:68:c8:16:ae:f6:8b:37:23:79:5b:32:94:67:11:90:
37:0e:a0:f4:ef:6d:02:c4:aa:91:57:c8:3b:25:16:de:b0:26:
06:00:f4:73:2a:a8:71:94:d6:c5:fd:72:4e:a5:01:1e:aa:40:
ec:0b:69:53:32:97:6d:e0:16:82:12:74:53:0f:a4:59:be:cd:
56:a3:6a:66:81:3b:d5:e4:99:8c:bd:71:9b:70:9e:99:7b:61:
3d:c6:42:35:fa:57:04:82:cc:33:9d:b0:91:0b:d5:56:9f:dc:
f9:fc:0f:ca:d6:cd:d1:9c:e1:66:e2:5f:db:f8:a2:5d:ec:1c:
bc:78:ed:6a:45:90:ad:8b:80:11:e3:c9:17:66:b1:de:ee:7c:
44:bf:e3:52:c7:3b:99:91:03:19:be:05:ec:c4:5d:38:05:29:
13:66:d8:67:f0:ad:6c:ee:3d:d6:7e:f7:91:bb:6c:10:2d:55:
ef:4d:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org