Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/YOCMpfDhBM9umYwQUBwmLB7Bgqk.roa
File: YOCMpfDhBM9umYwQUBwmLB7Bgqk.roa (raw, json)
Hash identifier: ccqX5S6vcDpjpUSlrSl62t8t5gjM4wx+s5+na8tZ4do=
Subject key identifier: 60:E0:8C:A5:F0:E1:04:CF:6E:99:8C:10:50:1C:26:2C:1E:C1:82:A9
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184BFB866B101EB5EAD2BE8D101AD4A4A77
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/YOCMpfDhBM9umYwQUBwmLB7Bgqk.roa
Signing time: Mon 28 Nov 2022 19:30:43 +0000
ROA not before: Mon 28 Nov 2022 19:30:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.172.172.0/23 maxlen: 23
185.172.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:b8:66:b1:01:eb:5e:ad:2b:e8:d1:01:ad:4a:4a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 28 19:30:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60e08ca5f0e104cf6e998c10501c262c1ec182a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:c3:5c:59:64:df:48:e9:a3:4a:a3:5c:4e:
b2:83:58:4b:25:79:94:c0:2c:d1:ee:e2:c7:18:57:
b3:13:7c:2a:98:3a:e6:0a:6a:c5:6f:38:ab:8c:a5:
f6:ee:38:97:7d:8b:af:5b:b3:e6:b9:bf:60:8d:1d:
75:6f:25:6e:96:0a:44:e9:a2:1c:41:d7:f3:fb:48:
cf:05:d2:24:d8:07:6b:53:53:c0:15:e2:3e:3d:f9:
10:e4:11:e9:df:bb:03:9f:7c:10:09:a1:27:48:7e:
49:dc:74:5d:99:57:8e:d7:47:49:68:a1:88:6e:93:
a8:1f:5e:32:fc:10:ed:d2:ce:84:7a:bf:d4:56:87:
23:fc:f0:53:de:42:7f:87:e3:8a:35:e1:09:09:24:
8b:1c:5f:ac:b0:8e:8e:d1:65:e5:12:1b:4c:39:69:
29:5f:c6:42:2b:83:46:bc:54:8f:38:bb:b3:e5:44:
0e:62:b2:1e:66:a7:8b:52:95:a6:6d:88:43:6f:f4:
65:b8:e2:2f:fb:99:b4:8e:d6:9f:fc:b0:88:18:a3:
f1:f1:1d:0b:fe:41:85:43:8a:3c:92:6d:7a:bc:72:
26:f3:c9:be:08:7c:e3:40:94:db:c9:04:68:24:ba:
95:ea:95:16:f4:bc:ac:29:b9:cb:a3:83:7b:ab:04:
70:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:8C:A5:F0:E1:04:CF:6E:99:8C:10:50:1C:26:2C:1E:C1:82:A9
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/YOCMpfDhBM9umYwQUBwmLB7Bgqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:42:c3:fa:9d:ea:13:8d:60:e4:c7:34:c3:53:d9:3b:99:56:
a6:ff:4e:20:c0:eb:49:6e:7d:e8:29:77:f3:0d:e5:ed:ec:bf:
5c:07:56:e1:2f:dd:0b:5a:11:24:d7:81:71:cc:a5:37:e7:c8:
fa:95:da:3e:ce:90:51:03:b5:ef:d3:2f:4b:90:98:f8:3b:e5:
46:ed:82:67:df:30:ad:83:d9:80:b9:b4:58:44:05:10:a2:d1:
a6:c2:cd:79:52:5b:a9:b9:3f:64:50:3a:86:dc:1c:05:8c:43:
cb:14:b5:bd:f6:6e:19:6c:61:95:e8:7e:49:71:fe:74:a7:cc:
a8:ea:fc:95:f6:0d:49:da:f9:78:b5:5b:3b:f3:da:95:89:17:
ee:f7:01:b3:17:fd:ad:eb:53:03:b5:1e:85:a5:62:fe:da:32:
24:d6:d6:21:42:99:6f:cc:61:76:38:51:af:cc:b4:b4:2b:a1:
3e:4e:c0:31:a0:56:2c:bb:6d:f0:39:9f:09:7a:61:b1:17:66:
5d:42:db:cd:fb:5a:46:1d:0a:bc:a1:5a:c0:ea:45:d6:2b:98:
83:15:37:4e:c0:73:d8:29:db:ca:41:3d:e6:3d:42:d6:8e:34:
01:4e:06:8e:5c:52:b1:2d:de:3e:0b:29:3e:d4:95:78:37:5b:
10:8b:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org