Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/7J2coi8yjwZkMqksfQxoD2pyv28.roa
File: 7J2coi8yjwZkMqksfQxoD2pyv28.roa (raw, json)
Hash identifier: FExrhrjYpiKwZMXkEi+7eC1iv1IKNKByaZN9Qo7L4bI=
Subject key identifier: EC:9D:9C:A2:2F:32:8F:06:64:32:A9:2C:7D:0C:68:0F:6A:72:BF:6F
Certificate issuer: /CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
Certificate serial: 01856F14C549D44A3A98525BC6894A222597
Authority key identifier: 68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/7J2coi8yjwZkMqksfQxoD2pyv28.roa
Signing time: Sun 01 Jan 2023 20:45:10 +0000
ROA not before: Sun 01 Jan 2023 20:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 94.103.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:c5:49:d4:4a:3a:98:52:5b:c6:89:4a:22:25:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
Validity
Not Before: Jan 1 20:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9d9ca22f328f066432a92c7d0c680f6a72bf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:57:ce:34:dd:e2:dd:8b:68:94:f4:20:41:
fb:fa:d1:60:cb:5c:4a:56:68:8a:e5:b2:62:96:e8:
d5:45:e0:5c:04:76:5e:6a:4b:74:7e:fa:5e:8f:80:
36:32:4b:6a:51:32:2f:ca:78:87:65:c5:30:9f:39:
09:bb:d8:8c:23:84:c7:54:cc:ed:9c:c1:d4:43:a5:
49:fe:ce:e9:21:d7:4f:64:ac:54:72:22:71:fb:b6:
cd:f2:05:04:b6:e6:03:e6:1b:80:21:dd:af:bf:4e:
65:a5:27:3a:cd:dd:8b:15:8b:74:9c:d4:b7:5f:18:
79:43:c0:85:90:14:a2:5f:8c:ac:b9:77:54:1b:db:
01:d9:91:11:d9:aa:39:53:a6:64:0d:f9:f8:43:35:
55:c0:b9:bf:dc:b8:81:f9:04:f7:f0:39:fa:16:e9:
da:fd:84:ec:7f:bf:35:17:46:e4:6d:6e:49:aa:70:
a3:e1:b8:8e:84:8c:d6:13:27:8c:0c:24:d5:5b:df:
85:ea:ad:20:4a:3e:4d:8d:b5:51:0e:f1:10:e9:0e:
d6:e8:a4:ae:cf:f8:21:2d:88:33:46:cd:ee:f1:a2:
08:68:45:b8:d5:88:78:b9:56:9d:08:fd:8f:a9:95:
4d:fd:72:7d:ca:49:de:e1:f8:1e:1a:86:96:24:8a:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:9C:A2:2F:32:8F:06:64:32:A9:2C:7D:0C:68:0F:6A:72:BF:6F
X509v3 Authority Key Identifier:
keyid:68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/7J2coi8yjwZkMqksfQxoD2pyv28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7f:5a:d5:78:92:36:ff:1e:a5:27:7b:66:3c:b5:62:be:1f:
ad:87:1b:3e:71:1d:7e:7e:a9:77:42:42:4f:79:89:cf:cc:b3:
0d:7c:2a:13:26:8a:b0:d1:55:c5:fd:7a:6d:84:d6:b4:ad:10:
77:b2:5b:ee:a7:b3:6a:26:9f:ed:9f:6b:f6:eb:b5:0f:2a:e1:
00:95:22:58:96:03:88:29:85:d4:9b:61:19:74:f2:21:77:e9:
c4:f9:48:be:dd:31:1b:3e:1e:f9:77:79:d2:e1:04:1a:39:fe:
5e:52:29:bf:b3:f5:12:86:ad:47:b8:4c:4d:79:5b:d0:27:60:
1b:bc:9e:8e:f5:f6:10:07:03:56:e1:ca:a7:ac:cb:a2:f3:c5:
92:0f:9e:d1:63:de:e9:d4:e2:39:c4:5e:40:b9:65:88:ef:c2:
54:ee:8f:34:4b:56:81:9e:fb:01:cc:03:a4:c0:18:c6:2e:e2:
0c:63:92:88:97:37:43:21:15:2d:41:ce:e4:e3:55:d0:fd:30:
c7:3d:0b:65:df:6a:dc:d6:46:da:2c:78:e3:e2:4e:a2:39:c6:
90:9d:46:d4:5a:ec:5e:4e:59:4a:2c:7f:3e:35:61:79:aa:a4:
4a:c3:66:ac:30:48:fc:51:2a:f9:64:f1:5c:7c:84:5b:26:c0:
1f:54:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 08:45:01 2023 by rpki-client on console-ams.rpki-client.org