Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pD5SBEC5ydjyG-ln15Z9rCE7JXA.roa
File: pD5SBEC5ydjyG-ln15Z9rCE7JXA.roa (raw, json)
Hash identifier: 7fwx2bYdqRCnRqo/z34sRePw7c5WwRhLQiCCKeWT0aA=
Subject key identifier: A4:3E:52:04:40:B9:C9:D8:F2:1B:E9:67:D7:96:7D:AC:21:3B:25:70
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182F413020B0CA329B3DDB942A77CCD3CD0
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pD5SBEC5ydjyG-ln15Z9rCE7JXA.roa
Signing time: Wed 31 Aug 2022 13:24:22 +0000
ROA not before: Wed 31 Aug 2022 13:24:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 141.98.158.0/23 maxlen: 23
194.147.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:13:02:0b:0c:a3:29:b3:dd:b9:42:a7:7c:cd:3c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 31 13:24:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a43e520440b9c9d8f21be967d7967dac213b2570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:85:cd:2e:53:80:bd:86:14:01:ea:cd:aa:
2a:ce:fe:fb:03:41:5a:71:7a:00:b4:99:03:34:3b:
17:b7:2c:7a:5a:e7:75:8b:42:a7:f2:09:57:bc:41:
bf:83:7d:7a:b6:8b:85:6e:8d:7c:c6:ff:57:4d:e4:
96:b1:d8:5a:10:af:1e:a2:7f:fe:77:8f:2b:70:f1:
09:c3:b1:ce:63:94:7b:71:c4:6c:86:cf:11:f6:7b:
fa:b6:a3:63:da:88:6b:5e:70:0e:ea:75:94:2c:d8:
13:f9:0a:7e:08:99:35:1a:c5:6d:de:ae:1a:cb:5e:
15:5c:12:36:fb:d7:57:e7:f8:a9:aa:98:7a:47:74:
a4:8d:fc:f1:92:ae:4c:10:0a:06:50:05:30:a1:53:
19:06:84:24:5b:e3:27:34:4f:56:2f:19:97:4b:7d:
97:55:d5:5b:97:04:29:fb:a7:09:39:79:66:e3:8f:
ae:84:24:e5:d2:83:9d:35:2e:d5:e8:3c:f3:45:4b:
2a:ab:3e:2f:34:e1:4c:d7:4f:de:93:52:70:fb:1d:
68:cd:0d:2f:cc:38:38:24:05:b8:3f:c9:79:d9:80:
c1:ca:01:58:0f:41:a5:8f:de:96:ec:37:d5:c9:d1:
be:e0:9b:5a:34:9f:5a:9c:ec:bd:b7:bc:63:1a:8d:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:52:04:40:B9:C9:D8:F2:1B:E9:67:D7:96:7D:AC:21:3B:25:70
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pD5SBEC5ydjyG-ln15Z9rCE7JXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.158.0/23
194.147.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:aa:29:54:9a:dc:74:44:a6:46:ea:86:03:8e:bd:2b:54:c5:
89:17:c4:f2:ed:23:f4:49:c0:5f:d1:a5:8b:bc:a9:9a:8a:58:
ad:ec:96:da:48:b4:23:a9:9b:e3:14:a9:f9:4f:f9:2f:c4:df:
d3:75:8b:76:5f:ad:96:b1:1b:39:52:2b:25:15:de:39:2b:b5:
6b:55:4a:20:90:23:d4:92:ae:8f:7d:c4:f4:1a:0e:6d:ba:bf:
0b:0b:69:d8:e4:31:d1:e6:13:31:37:77:31:13:ee:63:5b:92:
8e:0c:d6:fb:bb:b3:ba:47:b2:af:e8:18:9a:83:7e:c5:65:1c:
05:42:8a:58:6b:a1:e7:00:95:65:af:fc:5f:d9:13:2e:fd:80:
fd:c4:e6:a3:d0:84:e8:46:3f:df:71:bb:57:32:1c:c8:35:1a:
ee:21:08:e7:83:85:6c:6e:79:23:3d:83:f9:23:f5:59:47:d3:
b1:69:f0:7e:0c:f9:8f:ed:cb:9d:c6:54:c1:6c:91:ec:25:03:
ac:84:d6:ac:d7:ba:57:4e:49:4e:b5:9b:73:ba:a5:5c:cf:af:
24:dd:81:0e:88:fe:5b:5e:09:85:0a:38:32:cc:df:27:7a:f5:
80:c1:36:70:e4:0e:ca:53:b1:96:fc:a2:32:4c:d2:fa:e5:07:
78:84:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org