Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/aFcGRhYmus-rUKPTOuVNMRBdzLM.roa
File: aFcGRhYmus-rUKPTOuVNMRBdzLM.roa (raw, json)
Hash identifier: cem0FTJ1C6uxXauwqO+4SQNX1ZoVdtRc87y/kg0+W+I=
Subject key identifier: 68:57:06:46:16:26:BA:CF:AB:50:A3:D3:3A:E5:4D:31:10:5D:CC:B3
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184814A763DF3619BF127A8C30E68036C8E
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/aFcGRhYmus-rUKPTOuVNMRBdzLM.roa
Signing time: Wed 16 Nov 2022 16:34:11 +0000
ROA not before: Wed 16 Nov 2022 16:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396073
IP address blocks: 171.22.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:4a:76:3d:f3:61:9b:f1:27:a8:c3:0e:68:03:6c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 16 16:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=685706461626bacfab50a3d33ae54d31105dccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:7c:13:6f:d1:bf:90:a2:b9:82:07:be:bf:
85:34:bc:23:71:99:55:77:e2:89:a8:6b:ca:cc:7a:
a1:95:12:0d:a7:de:15:e4:60:c1:34:9d:e3:4d:7b:
ec:29:be:00:2c:35:88:9b:bc:e9:46:17:4f:d5:3a:
44:5f:8a:d6:f4:05:5f:a6:35:93:40:48:34:2e:67:
38:72:61:4a:d2:9b:d3:4d:09:57:10:57:9d:3b:78:
d5:95:65:03:20:40:b7:bf:4e:f1:3d:63:90:b2:57:
b8:be:37:ea:fd:7a:4a:2a:a7:b7:e6:c0:f9:b1:db:
f0:50:5d:12:1f:dc:89:df:15:24:9f:1c:d2:3b:b1:
cd:c4:73:8a:ec:aa:a1:5c:b0:25:27:c8:c5:3d:43:
46:75:61:79:f9:9e:15:79:87:3d:8d:c2:0e:98:72:
a0:93:21:e2:7b:89:7d:9a:f4:51:b4:e2:0c:39:06:
57:19:c4:c2:06:b0:79:cf:02:c6:c6:ff:67:a0:f3:
92:e7:87:d1:cd:db:36:36:01:25:4f:1d:2b:c5:66:
53:04:fe:84:9a:0a:d3:12:3a:f0:72:bd:eb:f3:08:
df:c9:8d:21:61:11:8e:a3:9b:5c:27:27:0d:4d:4c:
4d:de:6d:37:bc:ad:29:1f:f1:35:fc:42:9f:90:0b:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:06:46:16:26:BA:CF:AB:50:A3:D3:3A:E5:4D:31:10:5D:CC:B3
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/aFcGRhYmus-rUKPTOuVNMRBdzLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.78.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:11:91:af:2e:4a:9e:9d:9f:a0:0f:1d:7b:0a:a7:33:80:82:
c9:25:df:f2:c7:4c:bd:56:7d:d9:ef:f7:07:dc:53:3d:52:3e:
24:e5:d4:71:65:71:e0:87:6b:a3:3c:00:c3:5a:2a:42:7d:78:
9b:7e:bd:06:3f:33:a0:73:55:84:09:e4:72:ca:82:71:34:e0:
28:36:0c:ce:41:08:1e:c4:5d:2e:5b:52:af:00:b3:67:0d:0e:
c4:50:35:a1:90:0c:34:6a:3f:7c:f9:fd:76:17:ec:c9:27:50:
99:5c:6c:66:4b:17:89:11:11:ca:91:6f:7b:0b:c8:05:d8:73:
1d:bd:13:44:42:68:b5:e4:0d:e2:df:e5:aa:04:4a:7e:00:37:
95:a7:33:19:b0:98:c5:97:2f:7d:f3:ff:f5:87:30:6e:30:d2:
cf:4a:bf:d2:70:83:5d:8b:02:43:e9:2f:42:d9:95:b6:a5:5c:
49:90:9f:73:1a:2a:df:09:99:3d:cd:9a:3c:f7:a3:5d:2b:9d:
d3:b7:74:ae:e4:9a:22:b5:bd:03:96:dc:cf:3c:8e:a3:45:b8:
95:e2:67:df:0e:c3:ad:44:e3:d4:63:7d:67:12:15:99:2a:1e:
4f:99:e9:00:fa:96:b8:8d:66:c3:c2:9b:27:18:ee:2a:a3:22:
68:bc:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org