Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/nNmxydL4jlvyf1G_cuiM3urjOIY.roa
File: nNmxydL4jlvyf1G_cuiM3urjOIY.roa (raw, json)
Hash identifier: sXM4QhVuQjPj2kZTynrKJIBpKgTWt+b42GyRPtUzMaI=
Subject key identifier: 9C:D9:B1:C9:D2:F8:8E:5B:F2:7F:51:BF:72:E8:8C:DE:EA:E3:38:86
Certificate issuer: /CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Certificate serial: 04A1DAF3
Authority key identifier: F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/nNmxydL4jlvyf1G_cuiM3urjOIY.roa
Signing time: Sat 01 Jan 2022 14:57:09 +0000
ROA not before: Sat 01 Jan 2022 14:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.20.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77716211 (0x4a1daf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Validity
Not Before: Jan 1 14:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cd9b1c9d2f88e5bf27f51bf72e88cdeeae33886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:72:ab:e3:b0:98:c1:7c:d5:19:50:75:72:
4e:b1:4b:79:53:52:08:3e:00:9c:01:0c:22:15:a2:
1d:60:cb:94:3f:4c:69:7f:a2:3e:3f:bd:ad:36:eb:
cd:b3:3f:dc:f0:7a:73:19:68:e0:4f:3b:14:37:97:
3f:cc:56:d4:72:03:f9:e4:21:b5:fd:ac:3a:5c:07:
83:84:03:1b:04:0b:56:6f:f1:2b:34:0c:81:78:a2:
03:dd:fa:dd:5c:61:02:c9:fd:5b:a5:5b:36:b4:64:
fe:0f:12:53:1d:0a:b4:d1:ca:b6:77:08:57:c7:e1:
ab:84:7b:f3:0e:9a:80:c3:2d:2f:e7:d0:ec:5c:41:
ab:36:92:bf:d5:de:e7:a0:f0:93:fe:e3:f7:1b:e2:
b9:7d:00:5c:81:13:81:c8:d3:da:78:f0:4f:c2:c0:
58:56:e7:d7:d3:66:12:02:42:20:76:50:16:ba:8f:
3b:33:b8:02:09:8d:fd:d9:4f:8b:0b:a8:67:34:b0:
69:21:90:5f:62:32:23:d1:58:c8:d3:e4:d4:ff:c8:
ae:32:48:ba:21:6c:e5:e8:5f:0e:c9:52:11:7b:f9:
25:2d:c9:88:9e:53:c9:81:36:92:24:fa:74:f2:c3:
12:0c:a2:0e:39:3d:b3:37:55:38:c7:bb:d7:75:23:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D9:B1:C9:D2:F8:8E:5B:F2:7F:51:BF:72:E8:8C:DE:EA:E3:38:86
X509v3 Authority Key Identifier:
keyid:F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/nNmxydL4jlvyf1G_cuiM3urjOIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.4.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2e:1a:5e:9a:79:3c:45:e6:48:9d:69:19:30:48:a8:b1:bb:
11:be:e6:25:0f:14:1e:6b:93:89:1a:a8:5b:90:61:f2:dd:17:
58:95:32:5a:bc:3e:6c:fc:52:45:06:c8:80:cf:9c:ef:8c:a5:
58:37:7f:fe:5a:87:a8:cd:d4:db:dd:e9:dd:d5:e6:8f:c8:49:
d1:8d:1b:cc:35:c4:fc:5b:3f:3b:1e:dc:63:2a:9c:57:e7:f7:
0b:de:f6:1c:0d:b0:ca:d6:3c:34:25:cf:2c:9e:6a:2e:2c:5c:
21:48:83:72:c0:16:2f:f0:c3:89:05:9e:a1:42:c6:77:aa:26:
05:e4:44:63:c6:9d:a9:2f:d4:f6:8b:78:5e:cb:14:94:70:4e:
d9:0f:06:ad:e6:ae:67:af:d2:b0:47:cb:28:28:c7:54:e9:16:
e5:4a:08:15:64:30:98:11:06:62:ba:1f:8e:33:c0:b7:37:dd:
c8:b3:85:63:53:ba:27:71:21:98:bf:25:98:b7:f0:83:f2:c3:
17:ef:4d:1f:a6:a9:b4:cb:a3:da:f2:5e:a7:28:12:60:39:e8:
90:53:84:b9:d1:20:0e:dc:48:78:b1:c7:7e:d3:9a:66:99:bb:
ab:7a:dc:da:9c:86:b8:6d:38:0d:c4:c5:59:c5:4c:98:1e:5f:
a0:3d:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:08 2023 by rpki-client on console-ams.rpki-client.org