Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/IwKx6WAvgjRQ3lShTiJuBBELI-8.roa
File: IwKx6WAvgjRQ3lShTiJuBBELI-8.roa (raw, json)
Hash identifier: iq89HY9QSKk+sCce1/7i16JgG7xnsw4XYE+b3F1yOcE=
Subject key identifier: 23:02:B1:E9:60:2F:82:34:50:DE:54:A1:4E:22:6E:04:11:0B:23:EF
Certificate issuer: /CN=598fe37b0334f2f952d7ee2b9643229527477898
Certificate serial: 020AC2B4
Authority key identifier: 59:8F:E3:7B:03:34:F2:F9:52:D7:EE:2B:96:43:22:95:27:47:78:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY_jewM08vlS1-4rlkMilSdHeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/IwKx6WAvgjRQ3lShTiJuBBELI-8.roa
Signing time: Sat 01 Jan 2022 14:07:31 +0000
ROA not before: Sat 01 Jan 2022 14:07:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.169.92.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34259636 (0x20ac2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598fe37b0334f2f952d7ee2b9643229527477898
Validity
Not Before: Jan 1 14:07:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2302b1e9602f823450de54a14e226e04110b23ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:95:0f:61:69:2a:35:83:5e:cf:6e:1f:b6:6a:
38:73:38:df:46:7c:c0:4c:bf:bd:86:47:ba:dc:82:
dd:80:11:fe:df:d2:84:1c:44:31:c3:88:a0:e4:f7:
b6:12:02:7a:d5:28:04:50:21:d7:3f:10:42:97:4a:
a3:62:93:ac:1b:90:e3:2a:2e:b7:ce:5e:0a:47:3a:
e9:ff:4f:2e:83:e9:c8:f1:e3:96:5a:9e:d5:78:7e:
c2:f4:36:6c:4e:2b:ad:a5:33:52:c3:5f:a0:3d:bf:
e3:3f:b2:73:00:b9:8a:66:4a:d3:4f:59:4b:95:d7:
cb:b2:6b:56:d8:fd:18:e4:9a:32:d5:e9:cb:89:b2:
46:d0:b3:ba:04:78:12:78:89:47:ae:97:ce:7f:7b:
f5:fa:02:a6:9b:c3:a9:b8:65:72:74:06:71:5c:8c:
73:09:0b:48:4e:f6:7b:40:24:27:e0:51:0e:28:9c:
35:95:cf:84:29:68:4d:9c:79:28:f4:87:68:53:73:
e2:06:c5:a6:69:46:83:a2:ea:07:4f:f8:7e:43:f4:
e7:f7:2f:63:e4:a3:f1:80:22:a1:c9:0f:87:a3:09:
50:b5:39:b3:ce:c7:cf:6c:0a:ed:6e:6e:50:f1:91:
4c:89:da:cc:21:17:fa:43:3e:1c:54:46:39:ff:4d:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:B1:E9:60:2F:82:34:50:DE:54:A1:4E:22:6E:04:11:0B:23:EF
X509v3 Authority Key Identifier:
keyid:59:8F:E3:7B:03:34:F2:F9:52:D7:EE:2B:96:43:22:95:27:47:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY_jewM08vlS1-4rlkMilSdHeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/IwKx6WAvgjRQ3lShTiJuBBELI-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/13a3a3-180a-4bc1-a3e9-9ea6c0e61151/1/WY_jewM08vlS1-4rlkMilSdHeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
75:ac:15:e9:48:9c:24:4b:b2:c6:44:24:e8:32:08:32:af:ee:
1f:37:33:50:ae:68:37:68:f5:59:01:35:fc:23:4a:1c:1e:29:
12:c5:af:5d:6e:93:89:82:3f:e2:e4:af:07:1f:cf:b2:a9:d7:
0b:ba:bb:1d:93:54:9f:80:3c:61:ce:f8:3e:d8:3d:2e:9f:db:
c2:68:2b:e4:cc:f8:db:9d:9b:7f:50:38:16:71:b7:fc:31:4c:
34:50:d6:6d:e3:26:22:b5:5f:a0:83:a9:a8:91:0b:39:46:b0:
12:09:9e:bd:ec:9e:c0:e9:8c:13:78:0c:c0:49:03:4e:70:4a:
50:f8:a4:38:72:96:b5:01:a6:53:d8:7c:1d:73:6d:55:ca:22:
51:dc:7d:9e:10:16:6e:57:ff:be:94:07:89:ee:7a:69:65:2c:
d3:42:08:74:a0:70:b8:4b:d8:a5:d2:c3:c5:1f:26:b4:ca:27:
b7:b3:89:23:9b:4c:b5:39:8b:2f:e4:19:b2:3d:12:99:90:54:
53:9c:7a:3e:c2:0c:a3:96:ce:16:77:b3:48:e4:89:35:f7:b0:
c4:40:b1:a5:fe:0f:50:7b:85:f8:a9:b9:10:9d:f1:64:e3:e1:
9b:cb:1a:f2:cc:fe:ac:be:6c:ae:f3:29:56:8d:27:9d:d4:84:
22:7a:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org