Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pPz9PlSaWFiMQ1vpZIDwTjbLd7c.roa
File: pPz9PlSaWFiMQ1vpZIDwTjbLd7c.roa (raw, json)
Hash identifier: SXpp53ZBY8Vpbk2jZyx8XC4pVgo1xeER7ySUuYxwW/k=
Subject key identifier: A4:FC:FD:3E:54:9A:58:58:8C:43:5B:E9:64:80:F0:4E:36:CB:77:B7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0956158F
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pPz9PlSaWFiMQ1vpZIDwTjbLd7c.roa
Signing time: Sun 02 Jan 2022 18:41:05 +0000
ROA not before: Sun 02 Jan 2022 18:41:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.119.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156636559 (0x956158f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 2 18:41:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4fcfd3e549a58588c435be96480f04e36cb77b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:b5:c3:bf:b6:17:b4:84:07:34:a0:c8:20:
be:ec:73:fa:ce:a7:85:6a:1a:50:a3:8c:29:b0:6c:
16:1c:b8:7a:8e:4b:87:24:93:24:44:a7:ec:ec:a1:
84:da:d6:c2:79:81:fc:a8:e9:01:91:9c:2a:cd:dd:
86:3b:0b:fc:ad:a9:04:5b:5b:b3:96:a1:8d:87:a6:
55:c5:79:31:7e:32:81:ca:ce:56:bb:43:d2:3e:35:
d9:57:30:68:0b:54:52:f6:57:97:6c:f4:fa:41:12:
f7:39:fa:ae:06:c2:22:6a:e5:a6:1c:97:3b:71:b8:
64:56:6a:b6:0a:9b:db:06:40:50:1d:5b:02:a1:cd:
d4:32:ee:80:c2:7d:3d:99:d5:8c:46:ed:f4:f1:da:
90:9a:04:a9:d2:c4:84:57:46:e2:07:f9:77:f7:2c:
73:fc:13:b1:a2:82:51:18:70:93:89:4b:c6:ef:a5:
bd:89:a8:f1:ce:e4:d8:5c:db:b4:ee:d0:04:06:6b:
94:69:9f:01:9b:b6:8f:7b:b3:4a:b2:92:18:96:3c:
fb:8b:8c:cc:b7:0f:06:99:c4:5c:a6:7e:a5:d6:fb:
42:ee:d9:67:6c:8f:76:85:65:18:93:e8:62:9b:53:
32:19:0f:e1:0a:55:11:ab:a7:31:af:d1:01:11:d6:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:FD:3E:54:9A:58:58:8C:43:5B:E9:64:80:F0:4E:36:CB:77:B7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pPz9PlSaWFiMQ1vpZIDwTjbLd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:3f:c1:6b:1f:88:6f:23:ee:6d:12:0e:43:d1:71:3b:6f:ac:
be:33:65:f0:6e:b7:d8:58:90:89:22:cd:49:d3:63:e3:06:b3:
ed:a7:20:cb:80:16:52:d2:b6:0d:ce:ac:71:d9:26:e9:42:28:
bc:91:ba:a8:b5:dd:4a:36:21:69:67:e6:89:2c:f2:b5:d7:df:
f2:0b:df:84:98:9e:eb:d7:f5:a9:00:50:cb:7a:e9:86:57:97:
f5:3c:a3:8c:73:36:30:b9:1b:e5:4b:84:4f:13:39:6f:6c:08:
13:ec:26:e1:67:18:ba:f6:20:7a:da:97:2e:80:93:e9:ae:4c:
5d:85:b2:dd:36:b0:6e:b4:b3:a3:0e:48:3d:a9:95:57:22:5c:
bf:a4:0e:07:93:71:d8:97:7a:27:cf:d8:1c:19:a2:35:f7:e0:
00:f9:ba:68:ba:de:02:92:47:3a:4f:c6:23:a5:30:ce:49:1b:
cb:38:fc:41:99:04:1d:6b:ae:2f:44:bf:43:47:b3:d7:19:e1:
be:1b:98:8f:ec:a0:79:55:f3:11:8e:08:43:82:91:ad:89:6d:
04:dc:af:1b:2f:8b:df:33:12:44:38:de:64:2c:b4:36:df:3a:
2c:b9:35:9d:5a:37:f5:da:37:04:40:61:78:d3:93:51:50:15:
9e:67:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org