Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/sgh8eCMUgJLx8BtXR8DarQxhBO8.roa
File: sgh8eCMUgJLx8BtXR8DarQxhBO8.roa (raw, json)
Hash identifier: c44ISs9Bs/+PDXzHTGMPAjeYG1i8tToqD2BX33bJdr4=
Subject key identifier: B2:08:7C:78:23:14:80:92:F1:F0:1B:57:47:C0:DA:AD:0C:61:04:EF
Certificate issuer: /CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Certificate serial: 0185712784BEE782234A767F056889104496
Authority key identifier: 9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/sgh8eCMUgJLx8BtXR8DarQxhBO8.roa
Signing time: Mon 02 Jan 2023 06:24:53 +0000
ROA not before: Mon 02 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 92.119.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:84:be:e7:82:23:4a:76:7f:05:68:89:10:44:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Validity
Not Before: Jan 2 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2087c7823148092f1f01b5747c0daad0c6104ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:e2:42:3f:10:a5:c6:02:4f:0b:c2:fe:0a:
c3:2f:8c:27:96:e6:a5:50:87:a7:b7:de:ea:58:11:
7f:ae:06:ac:24:e4:a3:5e:e0:2a:df:69:6c:f1:52:
b5:8e:6a:e6:89:f1:82:a8:33:6a:f7:63:ae:e8:4c:
43:e7:a4:92:36:df:fd:5a:a6:5e:96:ab:46:aa:ed:
f6:2e:07:bb:d4:22:ea:54:34:81:9f:96:51:6f:32:
be:5e:d4:c1:f4:bf:a1:48:17:e0:cd:fd:84:20:61:
3b:05:01:1d:c0:1f:02:cd:ab:35:79:f9:00:01:39:
ca:bd:3d:ff:cd:83:4b:26:24:ab:71:98:6e:94:e7:
3b:bf:f1:0b:4b:d4:91:12:d5:9e:83:c9:66:e9:d9:
c8:16:a5:ca:50:95:c9:02:94:af:f5:a5:7e:23:d9:
83:ef:7f:dc:b6:c0:1f:2c:68:fd:b5:ee:91:7d:1a:
ae:f6:2e:33:a9:57:e2:47:57:97:f9:64:58:15:f6:
bd:2c:f0:b1:d5:e2:0c:45:53:4e:38:61:e8:83:7c:
d9:1e:ec:5a:77:75:6a:d8:69:75:ab:e8:52:2f:f9:
15:62:9d:1f:19:16:7a:82:8b:6d:a2:f5:98:bf:f2:
e7:af:f5:1d:aa:e1:56:36:34:5d:b8:3b:08:cd:9f:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:7C:78:23:14:80:92:F1:F0:1B:57:47:C0:DA:AD:0C:61:04:EF
X509v3 Authority Key Identifier:
keyid:9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/sgh8eCMUgJLx8BtXR8DarQxhBO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4d:20:63:1f:2d:3e:b6:ad:73:5f:af:f9:4f:7a:f4:4a:ed:
09:6e:53:3a:08:cf:d9:40:5f:c6:a2:87:fe:06:c5:90:0a:76:
43:94:25:63:18:31:33:ba:56:e3:c2:b6:bb:11:5a:f4:da:65:
e2:f1:35:b6:32:5d:b9:33:24:b9:4d:2a:60:fa:fc:8b:84:96:
1a:6b:c1:36:d0:f3:7a:6d:09:46:8c:39:cf:12:2b:e8:86:d3:
9a:9f:00:8f:43:37:6c:f6:fa:76:c5:b2:91:22:74:a5:7c:39:
2e:dd:af:65:1c:24:56:6d:b2:6a:82:92:ef:0b:4f:0c:07:1a:
26:c6:77:a0:a7:d0:4f:66:ed:a4:00:40:e8:8f:49:5c:75:a7:
f8:6b:c1:21:db:1e:00:32:cb:6e:bd:a3:19:40:a8:26:91:62:
b6:d6:6f:d8:fb:8b:a0:91:42:73:5f:17:86:17:e6:fb:c5:89:
93:31:a3:52:ef:84:5b:67:57:8f:4d:43:03:f0:01:85:fe:b2:
3f:79:c4:c0:28:f0:ec:c6:5b:15:d0:06:3d:ed:0a:d6:77:1b:
7b:da:a4:1d:65:f5:d7:1a:a1:69:df:ff:ab:12:28:b9:a2:e8:
7a:0b:24:23:10:09:6e:fe:9c:18:23:e7:7f:8e:f6:60:18:b7:
10:33:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:57 2024 by rpki-client on console-ams.rpki-client.org