Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gKfrO1GI-4d7IPoegBFdfwEPwgs.roa
File: gKfrO1GI-4d7IPoegBFdfwEPwgs.roa (raw, json)
Hash identifier: ehZE+a4cuKgGFEHENxr6/oSqjsM2a+dpwvpG8Bfg3yc=
Subject key identifier: 80:A7:EB:3B:51:88:FB:87:7B:20:FA:1E:80:11:5D:7F:01:0F:C2:0B
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01853E04B9A77222BB9EF018FB74DAFE783B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gKfrO1GI-4d7IPoegBFdfwEPwgs.roa
Signing time: Fri 23 Dec 2022 08:06:14 +0000
ROA not before: Fri 23 Dec 2022 08:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 92.119.12.0/22 maxlen: 24
171.22.76.0/23 maxlen: 24
185.172.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:04:b9:a7:72:22:bb:9e:f0:18:fb:74:da:fe:78:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 23 08:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80a7eb3b5188fb877b20fa1e80115d7f010fc20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:e9:44:b5:dc:c2:e7:61:5b:36:9b:b5:5d:
e0:70:5d:8b:b4:13:66:61:c6:d0:e0:46:f0:b8:c7:
09:22:5b:19:cb:a8:af:78:74:7e:e2:fe:99:30:28:
9f:37:86:85:ac:49:08:13:8a:97:23:ba:cb:d6:b7:
08:08:49:95:e6:11:70:1a:40:7e:d3:f3:05:15:d4:
78:30:ac:c3:ba:1b:44:01:fd:39:20:cc:6e:65:0a:
fe:1a:31:00:dd:41:d6:83:d5:5d:d3:c1:60:ca:20:
ff:ff:dd:ce:40:6b:4c:a9:69:3d:0d:b7:e5:e9:34:
3e:a8:6f:8d:15:04:0f:c1:89:bb:e4:f8:0e:18:98:
89:f9:24:47:08:56:fc:00:86:08:f5:51:8a:43:14:
1c:6d:27:99:7b:25:2c:98:17:c5:09:58:ec:28:59:
d4:61:39:ae:33:32:47:54:6d:dc:7a:40:ee:b4:61:
e7:72:b2:be:9f:1b:0d:ac:2d:9a:62:86:7d:c9:5c:
fb:29:60:4d:5e:85:1b:9a:47:b7:53:89:0a:eb:ac:
97:97:fe:51:ba:db:e3:29:90:37:96:66:72:5d:44:
ca:bc:1c:c5:c2:30:db:d9:40:9a:c9:c5:a9:11:fa:
29:59:5e:43:29:96:e6:66:dd:be:fb:2e:29:15:11:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:EB:3B:51:88:FB:87:7B:20:FA:1E:80:11:5D:7F:01:0F:C2:0B
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gKfrO1GI-4d7IPoegBFdfwEPwgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.12.0/22
171.22.76.0/23
185.172.174.0/23
Signature Algorithm: sha256WithRSAEncryption
55:37:e6:48:84:85:50:c2:52:9e:b1:b1:c2:18:05:96:a6:8a:
53:be:24:b8:11:1d:ec:89:2e:c7:42:f9:44:75:c9:d3:96:ad:
c0:b5:89:15:92:74:fa:d8:e8:0b:17:f3:45:7f:11:1a:1c:6f:
65:b8:d3:b9:42:f3:0f:d9:5e:89:6f:4c:46:37:d2:41:a7:f0:
8a:2f:d3:d6:b8:bc:7c:e8:00:0c:a2:8f:24:0d:38:5f:3d:52:
5d:49:8f:17:6f:d0:91:76:61:47:0d:f4:27:25:ba:0b:d9:df:
92:53:82:60:ca:b1:81:9d:f7:13:d1:e1:b4:b1:15:42:e7:da:
99:10:c7:52:9d:9b:be:55:ae:5b:6c:da:c6:6a:15:a6:6a:90:
b7:28:84:f4:e9:fe:f0:de:2c:8e:34:8b:85:93:3f:75:a1:d9:
f0:a5:00:e4:14:bc:3b:b1:83:1e:af:46:30:73:03:d8:38:d2:
34:94:f2:2c:c6:88:50:f8:05:e9:46:68:27:66:64:1e:a2:27:
2d:4a:0a:c1:36:68:db:18:43:d7:59:40:6e:87:5b:56:68:06:
67:e8:76:58:39:3c:6c:20:d4:cc:f4:76:76:4b:33:6c:87:05:
29:13:7d:9e:b5:5d:18:da:eb:6b:f2:3a:b8:89:4c:bf:41:f8:
4a:b7:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org