Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/XKsnV9wHCxAbDGk2FYjfvbjYvWk.roa
File: XKsnV9wHCxAbDGk2FYjfvbjYvWk.roa (raw, json)
Hash identifier: bxJqGTr2Byo0n41XjCnHdb7hDqVsejzloNoO6VwHGa4=
Subject key identifier: 5C:AB:27:57:DC:07:0B:10:1B:0C:69:36:15:88:DF:BD:B8:D8:BD:69
Certificate issuer: /CN=e89a7ca8705d869dfc1832de168282d4b725d651
Certificate serial: 01856D01CD04C0A27C1E02DDDFA481B115DF
Authority key identifier: E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/XKsnV9wHCxAbDGk2FYjfvbjYvWk.roa
Signing time: Sun 01 Jan 2023 11:05:12 +0000
ROA not before: Sun 01 Jan 2023 11:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 147.78.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:cd:04:c0:a2:7c:1e:02:dd:df:a4:81:b1:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89a7ca8705d869dfc1832de168282d4b725d651
Validity
Not Before: Jan 1 11:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cab2757dc070b101b0c69361588dfbdb8d8bd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:7e:c2:09:4a:0d:fd:87:f7:b4:72:01:4d:
be:d9:57:3f:a3:22:87:b8:fa:5d:40:3a:a4:78:0d:
a0:c1:be:e2:8f:2e:b6:dd:6c:d3:0e:2a:1d:bf:42:
be:9b:c1:14:b4:e4:5d:57:2a:34:d2:1e:9c:4c:27:
9b:93:43:d7:65:f2:b6:ed:c0:8d:00:b3:a6:1d:2b:
f3:85:b4:0b:eb:eb:9e:99:32:f2:34:18:61:c0:39:
2f:3d:d7:dc:9e:96:84:06:d3:fd:f8:3a:c9:2c:4e:
42:c2:8f:51:30:4d:18:de:70:b8:7d:cd:72:14:3a:
9a:a6:af:dc:1c:1e:0d:05:bc:ff:20:76:1e:05:c8:
f7:8c:c2:8e:48:74:c3:48:2e:ef:92:92:3c:e8:e4:
6a:e0:71:0d:d8:ce:e7:b1:d1:54:f8:06:83:19:a3:
63:2c:6a:d8:13:23:dd:8a:89:6f:2b:0e:3f:2a:71:
60:01:4f:c1:9d:6a:fc:b7:e8:12:cc:ba:b9:70:73:
14:5c:81:22:68:91:48:42:61:f5:96:05:d1:7e:47:
d9:9c:6e:62:34:20:91:ca:07:d1:49:60:60:41:35:
c4:c9:b2:78:1a:47:ef:d6:35:5d:3f:b6:fb:83:7d:
d4:2f:4a:bb:a6:5e:a6:ac:3d:2c:d7:9c:d5:ff:d5:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:27:57:DC:07:0B:10:1B:0C:69:36:15:88:DF:BD:B8:D8:BD:69
X509v3 Authority Key Identifier:
keyid:E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/XKsnV9wHCxAbDGk2FYjfvbjYvWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.84.0/22
Signature Algorithm: sha256WithRSAEncryption
29:77:42:50:18:34:c7:6e:fd:c5:c4:d8:fa:82:0b:80:9a:49:
67:cd:ea:5e:aa:53:00:30:53:de:97:ee:2a:75:f6:31:06:5a:
65:13:a8:0e:7c:2b:8c:72:29:78:3b:ec:5a:cc:98:5f:69:c2:
92:cd:f7:d3:11:dc:6e:b9:27:8a:19:40:c7:ab:0f:70:09:32:
ea:65:81:32:86:e6:53:0b:d2:d4:e3:b8:05:6f:9f:07:91:45:
6d:6d:7c:9e:11:8f:51:0f:57:d8:e3:e1:97:b9:75:af:32:7f:
d4:20:02:44:e6:b3:33:7e:60:98:de:47:9a:44:ed:a1:da:fe:
94:a9:d2:65:c2:ff:42:c5:fc:df:92:83:11:2f:69:ab:ed:39:
2c:5e:fd:ab:09:1d:cf:02:55:9d:0e:bb:27:a1:1b:c3:ef:2b:
fb:98:0e:cd:e4:e0:53:a8:c2:60:da:5f:8e:7e:14:3d:58:59:
7f:8e:46:b9:1a:3c:aa:37:da:e7:1d:17:5b:5d:1f:e6:da:53:
f1:b7:cd:4f:7d:ac:6a:45:0a:22:1c:36:4d:e9:f9:9d:c0:cf:
ea:24:ec:fe:2d:8c:00:bb:54:bd:c5:35:bb:92:b7:c2:51:fe:
e4:99:03:7f:cb:5c:32:cb:d0:f5:d3:08:1b:8a:26:46:65:1a:
29:40:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-fra.rpki-client.org