Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gRu88mokVOWXeUPaVFtA2g1JP4k.roa
File: gRu88mokVOWXeUPaVFtA2g1JP4k.roa (raw, json)
Hash identifier: fvl/srwjY6kSASCkbKAM3V8wMXczHm3TGUxU2E+sEj4=
Subject key identifier: 81:1B:BC:F2:6A:24:54:E5:97:79:43:DA:54:5B:40:DA:0D:49:3F:89
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C483D59C34FF17B3F586190C28B35
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gRu88mokVOWXeUPaVFtA2g1JP4k.roa
Signing time: Sun 01 Jan 2023 22:55:42 +0000
ROA not before: Sun 01 Jan 2023 22:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 92.119.12.0/22 maxlen: 24
171.22.76.0/23 maxlen: 24
185.172.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:48:3d:59:c3:4f:f1:7b:3f:58:61:90:c2:8b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=811bbcf26a2454e5977943da545b40da0d493f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:91:9d:09:48:10:17:75:d1:ba:8e:5b:e1:
01:73:f1:d1:38:4e:89:8a:b4:46:0f:20:24:e2:84:
56:f7:7d:5e:25:db:c0:1f:98:1e:50:2c:6a:79:72:
d6:3b:e8:c1:f1:8b:73:44:2e:0b:61:56:0f:50:b2:
79:36:57:31:ce:d9:ff:be:e3:32:b0:4f:81:6e:50:
69:cf:5e:1b:be:d1:22:e9:45:bc:10:7d:bb:6b:25:
bb:d0:73:da:f7:c8:68:67:85:50:0c:ef:61:61:84:
22:ba:7d:58:23:2f:36:42:4d:8a:d6:bc:be:34:de:
91:9f:5e:e9:be:d3:9a:03:11:a9:95:81:12:f8:0d:
0b:16:c5:e3:0e:dc:12:91:7e:cb:33:82:7f:4f:cb:
1c:24:82:12:34:6d:a4:6c:ed:58:37:48:24:14:23:
59:56:02:35:21:32:34:74:78:0b:02:6c:c7:7b:64:
69:c0:a8:a1:1a:ea:26:8d:c0:50:cd:64:ff:de:69:
56:f0:4f:dd:cd:23:cf:06:1c:05:39:ad:95:4d:6a:
b9:9f:7d:a9:3d:56:fd:31:e5:20:a0:64:16:12:1c:
4d:f3:7b:c9:fa:0b:fe:e9:85:a5:c4:f6:95:30:2d:
4f:10:70:f4:6e:b7:33:52:ce:17:d5:bd:70:eb:30:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1B:BC:F2:6A:24:54:E5:97:79:43:DA:54:5B:40:DA:0D:49:3F:89
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gRu88mokVOWXeUPaVFtA2g1JP4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.12.0/22
171.22.76.0/23
185.172.174.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:47:21:aa:25:2f:e6:54:d1:c6:0d:a4:52:dd:71:97:22:59:
21:b6:50:75:f6:a1:22:e4:ee:9d:93:75:76:39:2b:ad:7c:ed:
7d:5e:24:b0:77:30:a9:86:f6:62:16:e1:1f:e1:13:60:fd:84:
70:e4:79:21:af:f5:9d:13:03:68:b9:e0:db:32:18:08:83:43:
b8:dd:18:da:fc:0b:04:86:c7:fc:d5:27:ff:12:67:8d:3f:0b:
9e:a8:90:44:06:67:b6:70:1e:28:31:5d:9b:96:e9:ea:e9:b4:
8f:f2:45:b7:aa:77:99:99:b4:69:91:2e:53:fc:d7:c9:df:a4:
a3:87:75:fb:47:26:5b:75:17:72:61:13:1a:1b:8c:27:59:a6:
60:be:07:98:6a:da:69:80:18:93:d0:b9:67:85:14:cf:5c:0c:
1b:4b:f1:88:4b:21:5c:ee:db:47:02:34:12:2e:09:24:08:5b:
f0:4b:0d:b9:fe:4d:14:93:e2:c0:5d:7d:3c:bf:dd:fa:e0:d3:
79:8b:46:9e:57:04:51:80:d8:7b:4f:f0:d6:35:6a:b1:8d:6f:
77:c9:83:17:b0:1b:a1:ce:36:f1:1d:52:80:5f:fd:e0:97:6a:
3c:13:9a:ef:47:04:6a:98:22:44:13:ed:ac:3c:10:1a:e9:4a:
17:b6:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org