Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/KOiFSqthWSDpVcHA8Wca1wNeCsI.roa
File: KOiFSqthWSDpVcHA8Wca1wNeCsI.roa (raw, json)
Hash identifier: 1jqMdnZCLu4F4rZQ5jHcNRz3NWR3vNR/SH6PACBCbfM=
Subject key identifier: 28:E8:85:4A:AB:61:59:20:E9:55:C1:C0:F1:67:1A:D7:03:5E:0A:C2
Certificate issuer: /CN=f71f9bddac4c34078d8d0fab9e14d176a416f963
Certificate serial: 0C4BAC2B
Authority key identifier: F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/KOiFSqthWSDpVcHA8Wca1wNeCsI.roa
Signing time: Sat 01 Jan 2022 15:01:36 +0000
ROA not before: Sat 01 Jan 2022 15:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197324
IP address blocks: 46.17.120.0/21 maxlen: 24
185.157.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206285867 (0xc4bac2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71f9bddac4c34078d8d0fab9e14d176a416f963
Validity
Not Before: Jan 1 15:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28e8854aab615920e955c1c0f1671ad7035e0ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:01:12:3b:52:37:33:30:d0:5e:21:b3:fd:
df:0c:bf:ea:91:9c:95:91:6b:3a:9b:77:c5:d3:82:
b3:80:74:a5:2b:06:21:ee:c6:7b:7d:bc:55:2d:0b:
fb:3b:13:9f:cb:62:b7:ed:7a:ba:93:f8:90:0a:c5:
97:bf:4e:e3:52:50:25:39:6f:89:b9:01:54:11:d8:
a1:d7:c4:14:45:db:bf:30:a8:ac:ad:6d:04:c8:21:
11:76:c9:8d:a5:59:46:ec:f5:4f:d5:dc:47:3a:8f:
c2:c1:e2:98:31:12:86:93:e5:cd:c1:e3:24:d8:41:
6e:55:9d:08:a4:5b:68:37:dd:ae:16:ba:86:65:19:
45:ae:4e:d6:d0:2c:cd:43:c7:b6:c4:9d:26:6c:b6:
e8:02:8b:ef:0e:cf:9e:4e:53:60:60:37:2e:61:95:
8d:05:6e:da:b4:e1:0a:f2:50:57:58:5e:15:5b:7f:
be:53:e1:8b:91:78:a2:4a:98:50:90:44:bb:9e:7e:
db:48:bb:5d:89:29:4a:c0:33:01:57:a4:18:ba:15:
d6:ad:46:ad:bd:59:e9:46:08:1c:02:67:fc:46:06:
aa:1e:01:4a:f9:93:a6:4a:97:97:0a:8f:01:9e:81:
c0:16:d7:9b:15:95:f0:2e:e4:56:50:7e:f1:52:6d:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:85:4A:AB:61:59:20:E9:55:C1:C0:F1:67:1A:D7:03:5E:0A:C2
X509v3 Authority Key Identifier:
keyid:F7:1F:9B:DD:AC:4C:34:07:8D:8D:0F:AB:9E:14:D1:76:A4:16:F9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x-b3axMNAeNjQ-rnhTRdqQW-WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/KOiFSqthWSDpVcHA8Wca1wNeCsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/514d67-ba6c-415e-bebc-0f1f3cb08b75/1/9x-b3axMNAeNjQ-rnhTRdqQW-WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.120.0/21
185.157.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:65:8d:eb:bc:9c:9b:0d:d0:22:11:6d:19:18:0d:3e:4e:0d:
27:b4:a0:32:cd:20:e3:59:6a:f9:5b:e8:0e:74:4c:7c:42:51:
b5:32:c6:91:60:78:cd:94:96:00:2c:02:cf:06:17:3e:06:cb:
b6:33:d5:2c:72:ac:f1:01:01:00:87:e0:9c:df:3d:c5:93:74:
0f:0a:fe:26:a8:ea:cb:c5:5d:e1:85:bf:79:88:35:bc:bc:4e:
17:fe:4c:42:81:7d:5d:5c:e7:30:60:75:bd:d0:63:c0:27:bf:
bb:94:9c:f6:4a:99:4d:11:5d:be:b6:66:56:c4:08:74:6b:ff:
6a:a1:73:3c:79:41:89:c4:ea:3a:32:9c:4a:72:de:df:62:1d:
af:7b:f0:f5:fc:ec:4b:ac:b4:b6:64:c2:80:38:0a:f5:f1:47:
c1:9e:3f:03:05:2c:d3:b1:fb:53:93:0c:05:e2:07:32:b1:cf:
d1:ca:2f:31:ca:e5:b8:26:1d:31:e8:c1:f3:f1:45:60:c1:51:
09:03:ca:9a:cf:59:e7:b0:b5:39:25:a0:24:0e:7d:e4:86:54:
78:d7:29:46:02:62:44:be:5e:77:cc:9e:1c:53:3e:3d:d6:27:
26:88:a9:43:8d:7f:e0:0c:32:ad:f5:21:79:06:d8:93:4b:a8:
1b:23:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:49 2023 by rpki-client on console-fra.rpki-client.org