Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/7RKeRpSJq70_S2y1zcmtpJwO564.roa
File: 7RKeRpSJq70_S2y1zcmtpJwO564.roa (raw, json)
Hash identifier: l5s2kVUVMtnR8XgUIR08jaQ2ID8KFkg7pipTSbsrCBA=
Subject key identifier: ED:12:9E:46:94:89:AB:BD:3F:4B:6C:B5:CD:C9:AD:A4:9C:0E:E7:AE
Certificate issuer: /CN=788a72f412a89a87064a36d14c094cf7d9eea204
Certificate serial: 018573281EBCF3E080F67D4CD64812220C83
Authority key identifier: 78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIpy9BKomocGSjbRTAlM99nuogQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/7RKeRpSJq70_S2y1zcmtpJwO564.roa
Signing time: Mon 02 Jan 2023 15:44:47 +0000
ROA not before: Mon 02 Jan 2023 15:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203536
IP address blocks: 92.118.120.0/22 maxlen: 22
92.118.120.0/24 maxlen: 24
2a09:a640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:1e:bc:f3:e0:80:f6:7d:4c:d6:48:12:22:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788a72f412a89a87064a36d14c094cf7d9eea204
Validity
Not Before: Jan 2 15:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed129e469489abbd3f4b6cb5cdc9ada49c0ee7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:0a:b7:7f:7c:82:f2:4f:93:92:16:58:71:
66:05:a6:c2:38:8e:41:c8:53:f8:6c:76:b8:9e:4e:
9d:11:ec:4a:ed:e9:8a:7f:76:f4:0c:b1:47:01:54:
d4:21:8d:3b:4e:14:02:61:8e:57:97:bf:59:79:23:
c5:ff:a5:70:59:e4:47:9c:e2:7b:0c:c2:3d:dd:c4:
4d:6e:af:64:5b:af:b9:d3:2d:db:c3:93:65:95:ea:
f3:e7:e1:a9:f1:5e:45:50:c3:1d:f6:7a:31:67:93:
83:ca:84:c3:e8:79:27:f4:ab:0f:0c:98:fb:e6:46:
63:51:99:a9:57:b2:75:cf:16:da:50:27:72:97:6b:
25:e7:1f:7a:41:17:75:a9:b1:54:29:25:11:fd:27:
73:0e:53:fa:88:ed:11:67:19:d5:e3:e9:fc:54:89:
45:70:a1:4f:26:01:c3:b6:ae:60:42:36:6e:75:c0:
63:e6:af:ab:d6:31:6a:6d:17:c8:b4:33:7b:a3:50:
98:c0:8b:28:88:c7:1c:36:e1:e2:a8:cf:0c:d5:4b:
24:82:a2:2e:dd:8f:98:4f:01:42:ad:f8:85:2d:90:
20:e9:78:78:30:dc:03:7f:81:80:1f:32:40:0a:7e:
67:80:ac:c1:ce:fb:6c:2f:cf:22:69:f2:aa:50:32:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:12:9E:46:94:89:AB:BD:3F:4B:6C:B5:CD:C9:AD:A4:9C:0E:E7:AE
X509v3 Authority Key Identifier:
keyid:78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIpy9BKomocGSjbRTAlM99nuogQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/7RKeRpSJq70_S2y1zcmtpJwO564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.120.0/22
IPv6:
2a09:a640::/32
Signature Algorithm: sha256WithRSAEncryption
18:9c:fd:2e:89:e5:5c:e7:bf:14:7f:49:59:f5:94:a6:5e:5a:
84:23:e6:11:4b:18:79:ec:bb:66:0b:59:80:e0:a4:c3:ef:e2:
59:a4:d3:c8:4e:f7:4f:27:f4:2b:14:7b:3d:0a:13:cb:bf:54:
20:4b:db:39:c0:62:dd:e6:37:aa:4a:49:99:81:f3:d1:5f:96:
8f:79:89:9e:47:3f:2f:1d:e3:78:b9:cb:22:96:33:35:de:57:
13:38:ed:0d:ee:c0:4c:81:eb:a6:31:5a:58:97:cf:eb:5e:97:
c4:12:78:48:e1:5d:9d:6d:82:f9:17:0f:d6:01:75:53:c3:4d:
13:65:3d:f5:ba:16:9a:a5:c2:05:a7:ad:37:4a:a4:0f:83:1a:
fe:a0:97:35:14:41:c6:82:f9:4d:02:13:0d:41:4a:40:36:70:
87:b3:b2:85:f8:7c:a2:85:a7:cd:e1:df:62:13:01:46:57:0a:
9c:c9:3b:47:79:88:08:9f:fd:12:08:7c:e6:40:7f:c4:07:17:
3f:51:a9:39:d1:2b:b8:ea:16:41:83:cd:b3:26:ec:84:40:08:
87:09:90:85:64:e6:e2:ed:1d:2f:ff:21:48:0a:c6:50:86:11:
9d:d6:f9:e9:77:70:c3:2c:6e:ff:25:32:df:be:31:7d:60:6f:
9c:68:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:53 2024 by rpki-client on console-ams.rpki-client.org