Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LieQfHJ8gRrV6U0VxIjNLm0dgmM.roa
File: LieQfHJ8gRrV6U0VxIjNLm0dgmM.roa (raw, json)
Hash identifier: vb3+l2C9z8UezrwtdT0cOrj1GFKlfyFB3ij7I+yUBCE=
Subject key identifier: 2E:27:90:7C:72:7C:81:1A:D5:E9:4D:15:C4:88:CD:2E:6D:1D:82:63
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184BB41571A7E42192F4EB54B2ABA5063B6
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LieQfHJ8gRrV6U0VxIjNLm0dgmM.roa
Signing time: Sun 27 Nov 2022 22:42:12 +0000
ROA not before: Sun 27 Nov 2022 22:42:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 171.22.76.0/23 maxlen: 24
185.172.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:41:57:1a:7e:42:19:2f:4e:b5:4b:2a:ba:50:63:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 27 22:42:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e27907c727c811ad5e94d15c488cd2e6d1d8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:dc:0e:35:60:0c:93:97:af:2c:ec:8d:79:
28:05:04:67:ff:dc:b3:99:fd:cd:14:99:8d:10:90:
5f:2e:ec:b0:76:22:d4:ae:97:55:ed:b5:87:1e:4f:
62:eb:28:7e:3c:5f:f0:e4:02:5e:6b:84:7b:ba:e1:
15:51:d3:e4:88:69:bc:ae:9d:03:57:13:44:1b:dd:
1a:5d:5c:8e:52:ee:d8:db:14:3c:d1:fa:6c:1b:79:
7c:b2:4f:03:c3:88:03:bb:4c:42:a1:be:39:ef:30:
01:cd:f1:7c:56:4f:54:1d:6d:29:cd:22:03:7c:37:
06:54:1c:a0:77:3a:29:f9:2d:60:52:d1:2f:00:eb:
36:1e:54:dc:08:30:2d:54:e9:a8:42:4c:a3:01:af:
2d:95:8a:9a:9b:90:55:bf:2a:1d:88:72:19:f3:bc:
25:c2:47:03:7e:75:18:e3:5f:ea:ae:9c:f7:31:0f:
58:bb:82:71:c6:69:7c:f8:f0:93:07:c0:6e:00:f5:
e1:4e:42:5f:e8:1e:3c:4f:0a:31:73:81:41:f0:f1:
57:5c:e5:80:20:2b:24:8e:01:48:49:54:94:11:40:
03:01:9c:c3:19:77:ee:27:46:21:5e:e3:5c:15:5d:
ab:b6:9e:65:ec:a3:5f:2c:41:9d:05:c2:aa:2e:84:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:27:90:7C:72:7C:81:1A:D5:E9:4D:15:C4:88:CD:2E:6D:1D:82:63
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LieQfHJ8gRrV6U0VxIjNLm0dgmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/23
185.172.174.0/23
Signature Algorithm: sha256WithRSAEncryption
42:36:86:0b:87:42:66:0a:23:15:6b:ce:06:61:5e:5f:06:67:
29:19:66:ef:c5:7c:d7:28:64:15:93:81:60:c5:e0:90:64:33:
17:27:1e:83:2b:20:42:94:57:51:00:6b:f4:8f:93:5f:7e:21:
2a:d7:60:f3:15:3d:5a:0b:93:46:5f:00:c6:0d:22:48:8e:50:
5a:db:07:8a:4a:4c:8f:80:c3:a3:86:5d:81:80:80:4b:29:af:
4f:18:09:e5:da:2d:35:0d:6d:5f:f4:60:83:9a:57:0f:bf:e8:
29:3c:ce:73:d2:fe:a8:ea:7a:62:7a:1e:66:c0:33:bb:61:59:
8d:d9:13:3f:03:09:f5:27:77:55:93:8f:47:d8:98:15:9f:fb:
17:88:af:b9:84:cf:d3:b5:1a:97:8f:3a:fe:d7:12:a7:0f:3c:
04:bf:ee:28:0e:60:c2:84:0c:7a:06:e8:90:3a:65:7b:19:47:
cf:bd:df:8f:f2:92:59:54:d6:0b:78:6a:12:37:56:48:57:74:
49:78:72:81:a8:5d:cc:53:c2:6f:cd:a8:2a:9a:cf:a4:da:2b:
d3:f5:14:08:57:4b:71:dd:4a:07:19:c8:2d:f2:b2:e1:ff:53:
b2:f1:b9:45:e3:58:7a:95:2f:58:65:bd:e8:b6:11:b8:5b:ce:
ca:e4:54:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org