Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/sobCA6PYXb8JWUUofvUdstD1XEQ.roa
File: sobCA6PYXb8JWUUofvUdstD1XEQ.roa (raw, json)
Hash identifier: meC46pUuopHHNPqqL0Akju7pVSY22huhtS7S4NRs9aQ=
Subject key identifier: B2:86:C2:03:A3:D8:5D:BF:09:59:45:28:7E:F5:1D:B2:D0:F5:5C:44
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182720D30AE9A4BC7EE7053DE400588B466
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/sobCA6PYXb8JWUUofvUdstD1XEQ.roa
Signing time: Sat 06 Aug 2022 07:27:23 +0000
ROA not before: Sat 06 Aug 2022 07:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 152.89.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:72:0d:30:ae:9a:4b:c7:ee:70:53:de:40:05:88:b4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 6 07:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b286c203a3d85dbf095945287ef51db2d0f55c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:aa:70:b9:83:bd:b4:3e:8e:1b:ff:f9:7e:
a2:18:d2:1b:30:54:4b:08:69:36:84:2d:24:25:5d:
b4:21:64:d8:c6:5c:38:7a:e3:fc:7d:0e:cc:7e:3c:
15:3a:fc:92:4e:d6:59:7a:92:56:8e:90:b5:35:3e:
c7:4b:cb:4b:1f:af:cf:76:88:bd:eb:78:13:6b:72:
c2:3b:af:3a:4d:75:5f:7f:d3:d4:f4:b8:3e:63:bc:
dc:28:cd:be:c2:14:29:b1:88:f1:af:56:41:b2:a6:
3d:b1:89:89:6b:4d:ea:41:cb:79:4a:f9:24:b6:bc:
fc:24:1b:3c:3a:67:81:b2:7a:25:1d:d6:ab:5d:1e:
03:e5:db:3f:b8:49:cf:94:04:44:e1:96:ab:69:32:
8b:1e:88:a4:4a:ab:9a:60:b5:c6:c1:e9:cc:4b:23:
d5:7c:14:71:fb:4b:25:de:99:5e:50:7a:c1:15:3a:
f3:c7:92:0e:52:22:d5:fa:98:2a:3f:30:a8:bb:e1:
5c:b9:46:66:0f:93:79:0e:8c:8d:b4:90:81:37:63:
e4:ff:40:b7:a8:0a:27:07:c3:b3:3e:1f:7e:b5:f9:
49:d4:15:00:67:e8:71:04:92:88:d0:0e:82:e4:ad:
a9:3b:24:7b:a7:55:91:4b:e3:2e:52:ab:31:4c:c3:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:C2:03:A3:D8:5D:BF:09:59:45:28:7E:F5:1D:B2:D0:F5:5C:44
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/sobCA6PYXb8JWUUofvUdstD1XEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.251.0/24
Signature Algorithm: sha256WithRSAEncryption
27:70:b5:fd:fd:87:b0:7a:54:a5:4d:d6:73:dc:ed:a4:4f:88:
be:60:2a:fc:05:62:c1:c6:1f:9e:ff:3e:81:47:fd:10:c5:11:
58:df:54:4f:c0:af:e7:1a:24:68:04:4b:39:d4:7a:b3:b4:00:
1e:d8:79:40:5d:24:6f:cb:3f:be:fe:18:8c:92:75:54:f3:66:
e0:3a:25:7f:d0:af:eb:0a:33:f6:a1:00:15:fb:ec:c5:23:33:
ee:90:06:53:97:d0:40:02:8d:f3:9a:cb:95:0d:8d:48:7d:aa:
73:ec:c4:00:62:15:04:fb:b7:5b:24:56:bc:86:37:f6:69:cf:
68:21:0a:27:4c:56:ab:64:a4:6c:3c:f3:dd:9b:66:48:7c:4f:
87:44:1d:b6:34:a8:21:5a:2d:e0:76:ac:c5:1c:4f:76:73:d9:
11:ac:72:61:f6:03:ad:ad:cc:ef:89:46:79:bc:5f:99:a6:e6:
8a:73:0b:70:2d:f0:fe:68:b0:de:32:7e:a1:82:53:55:41:38:
c6:d3:01:43:ae:53:3d:bd:3e:6d:81:d3:50:0e:57:28:ce:51:
e2:6a:33:c4:c2:91:48:92:d7:88:53:cf:f2:03:87:50:91:ea:
84:5f:90:26:ca:9c:db:8a:ad:9a:bb:e3:f4:0d:a4:85:a0:74:
8a:7d:89:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org