Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qNP39pPqXzrg21XGoa_gdeDyYag.roa
File: qNP39pPqXzrg21XGoa_gdeDyYag.roa (raw, json)
Hash identifier: N1RVaWDnvd49fC9Xq3iPkG6xbpQORp31+FPq/9cNXbE=
Subject key identifier: A8:D3:F7:F6:93:EA:5F:3A:E0:DB:55:C6:A1:AF:E0:75:E0:F2:61:A8
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184C58A12971881EFC203FC9237A2B3B672
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qNP39pPqXzrg21XGoa_gdeDyYag.roa
Signing time: Tue 29 Nov 2022 22:37:50 +0000
ROA not before: Tue 29 Nov 2022 22:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.119.12.0/22 maxlen: 24
185.172.172.0/24 maxlen: 24
185.172.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c5:8a:12:97:18:81:ef:c2:03:fc:92:37:a2:b3:b6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 29 22:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8d3f7f693ea5f3ae0db55c6a1afe075e0f261a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:a1:44:c7:dd:c0:05:35:de:c5:e3:c4:08:
db:f6:07:d9:6c:c0:45:55:27:32:e9:e5:18:d9:9e:
0d:b3:29:d5:30:90:5a:30:83:ac:83:23:c3:69:24:
9c:ad:3b:a0:5d:d9:d8:f7:18:83:9c:63:0e:7e:7d:
36:ce:e4:2a:96:e1:53:ab:2e:dd:63:0d:3d:b5:ca:
a4:7a:c0:64:92:06:92:6b:4c:ba:ee:92:c1:64:3b:
d8:74:84:98:8a:27:6b:37:e5:30:7d:b2:81:f0:01:
e8:ad:df:d3:d7:c7:19:30:57:c4:b7:1c:2a:62:73:
ac:08:46:c1:99:6b:31:5a:7b:20:31:40:ad:3f:a4:
07:ba:d0:a3:08:57:ef:64:1f:a8:47:a4:55:0f:d5:
f3:52:4b:7f:f5:55:fe:f7:22:d9:6e:05:fc:32:e9:
fb:5c:30:92:20:a4:25:36:c3:93:2f:e0:56:47:c3:
bc:6f:b1:72:31:4b:57:d7:35:2c:a2:d4:e0:f7:a2:
19:b0:00:79:c1:66:45:62:fa:13:9c:d1:d2:77:9f:
ae:8c:c7:ec:3e:db:04:fe:24:aa:fc:a4:70:ac:19:
0a:72:b4:e2:20:5a:f7:89:cc:7a:7a:24:61:98:3d:
12:c4:4c:bb:1b:5d:5f:27:8f:b6:e4:46:c3:86:39:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D3:F7:F6:93:EA:5F:3A:E0:DB:55:C6:A1:AF:E0:75:E0:F2:61:A8
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qNP39pPqXzrg21XGoa_gdeDyYag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.12.0/22
185.172.172.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:52:4b:eb:ff:08:fd:d0:83:3f:23:ee:60:f5:b2:01:66:20:
c9:c5:d2:06:f7:ad:28:b8:1a:8d:e9:45:b9:59:35:f4:a2:03:
63:c1:e3:f4:a4:a6:f3:fb:e6:e5:b3:a8:b3:7b:27:77:59:ff:
3a:d1:1c:2b:e4:5c:c0:d0:af:d2:bb:ee:82:12:a8:09:57:06:
fa:89:e5:4f:f5:7e:e6:99:91:5d:81:44:cb:b1:ea:f4:7b:a8:
9b:46:f1:77:49:44:5a:8f:4d:05:9c:9f:c6:20:ef:2a:b6:6c:
83:0a:b7:a2:1e:d4:9d:cd:4f:dd:71:72:41:ce:8c:89:94:0c:
0a:3c:83:c7:0c:b2:e1:25:72:ce:c3:51:81:f8:eb:b4:16:02:
2a:4c:85:93:27:97:a7:55:d8:4c:99:bd:ca:67:62:bb:7e:5c:
89:45:77:52:5c:c2:c6:84:f6:13:a8:29:cc:38:d2:8b:fe:7f:
24:7b:fd:41:a2:07:58:ec:81:8a:02:ec:a2:e3:1a:af:d6:40:
db:e4:a4:76:48:43:63:59:d2:8a:5a:84:0c:d9:cd:7c:5c:82:
83:7d:82:3b:14:01:79:eb:57:59:6e:a7:ba:80:00:3e:d7:46:
f7:84:0c:28:19:b9:fb:3f:7d:76:f6:d8:7f:e9:23:66:55:a0:
43:bd:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org