Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/G3z3sCzwh65rBM1umVi3P3Qk0Xc.roa
File: G3z3sCzwh65rBM1umVi3P3Qk0Xc.roa (raw, json)
Hash identifier: j/fuLAJEoA5fwSW4vdsiw3te2Fdv0UpCj+vqqRGflwQ=
Subject key identifier: 1B:7C:F7:B0:2C:F0:87:AE:6B:04:CD:6E:99:58:B7:3F:74:24:D1:77
Certificate issuer: /CN=e89a7ca8705d869dfc1832de168282d4b725d651
Certificate serial: C16C06
Authority key identifier: E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/G3z3sCzwh65rBM1umVi3P3Qk0Xc.roa
Signing time: Sat 01 Jan 2022 06:56:17 +0000
ROA not before: Sat 01 Jan 2022 06:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48066
IP address blocks: 147.78.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12676102 (0xc16c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89a7ca8705d869dfc1832de168282d4b725d651
Validity
Not Before: Jan 1 06:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b7cf7b02cf087ae6b04cd6e9958b73f7424d177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:37:a0:8d:87:12:69:83:56:b1:46:7a:e2:
5c:ef:21:98:12:f1:91:93:76:11:2f:3b:20:8c:da:
97:14:b3:74:c3:ad:bc:25:35:cf:b3:b2:ae:c8:b8:
e4:dc:b0:d7:34:19:86:71:49:f9:1b:0c:e3:8e:c9:
dc:b8:e8:1e:96:24:d5:cd:e5:18:f1:6a:65:8c:27:
e1:51:bf:8c:81:59:17:83:f8:2e:60:d5:9f:34:3a:
c7:20:95:b3:f9:5a:38:cc:24:b7:e0:b0:ba:bb:ed:
de:90:df:a0:a2:13:4b:59:da:03:8a:0f:d3:00:00:
e7:f6:c6:4e:4c:3e:0e:d7:fc:45:39:5e:ef:9c:88:
7e:ea:36:97:b0:5b:3c:47:61:75:32:dd:b2:6b:ea:
a1:b4:57:e2:b5:4f:35:dc:81:f5:27:38:88:d8:dd:
18:e4:38:3f:76:dd:f0:82:5d:6b:48:59:a2:7e:24:
02:7f:3c:97:c4:ee:2e:0d:24:db:28:a1:64:6e:6c:
2a:28:5b:7e:24:c2:1e:95:89:3b:0b:9c:4c:36:cd:
a4:c1:91:d1:d4:a4:52:ea:07:03:fe:c3:cc:90:88:
d2:ae:9d:00:18:70:2a:6f:fc:00:5c:be:bd:51:a1:
3e:b4:3c:33:40:b7:d7:44:b6:c6:13:61:e6:8f:79:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7C:F7:B0:2C:F0:87:AE:6B:04:CD:6E:99:58:B7:3F:74:24:D1:77
X509v3 Authority Key Identifier:
keyid:E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/G3z3sCzwh65rBM1umVi3P3Qk0Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.84.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:6a:fb:e2:36:a0:0e:d6:4c:07:e2:7f:5a:31:78:65:b3:ba:
9e:88:5e:14:41:67:cb:51:b3:c4:b6:0c:3b:07:38:73:1d:6b:
35:12:94:47:9a:2c:dc:8e:67:03:06:49:45:a8:70:d7:6e:63:
18:c3:58:f6:73:c7:25:15:cf:02:4b:b3:58:4b:d4:d3:4b:e1:
fe:e3:8c:9b:8f:bd:60:1e:13:32:98:d3:35:7b:16:e2:95:8b:
cd:3c:08:4f:61:7d:3d:9a:2d:8f:10:09:f6:b8:8e:05:15:c4:
5c:6e:ad:1b:26:99:ed:4f:19:36:2a:aa:fb:0f:a3:43:b5:04:
27:12:3a:12:ad:96:d5:4f:f0:9e:e2:d5:2f:05:38:7c:0a:24:
e0:4c:15:24:64:bf:c2:2e:ac:18:cd:7e:83:78:ec:44:4d:fa:
23:84:17:fd:17:57:f5:d0:4e:b2:f1:84:e1:d9:40:58:08:79:
97:f9:22:5e:9b:d0:66:93:63:7b:d3:bc:5b:f7:ea:4a:73:58:
61:c6:07:f0:87:b2:30:9a:43:8a:70:75:3b:f0:9a:8f:4e:b0:
5d:8e:29:52:84:4f:ba:fd:99:90:43:de:29:f4:51:b5:ca:5f:
f5:d7:23:c1:ce:65:f5:75:b8:82:f5:8a:e7:f9:43:ab:65:82:
d0:68:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-fra.rpki-client.org