Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/K30ZJp0PTRclPbq2jONxOnQrHq0.roa
File: K30ZJp0PTRclPbq2jONxOnQrHq0.roa (raw, json)
Hash identifier: H+QeJmVIzvhL4+N0N12NgWqHi+bNga3/B9q3CFgr8IM=
Subject key identifier: 2B:7D:19:26:9D:0F:4D:17:25:3D:BA:B6:8C:E3:71:3A:74:2B:1E:AD
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 01878693C05D451E284511C7B7FF46575771
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/K30ZJp0PTRclPbq2jONxOnQrHq0.roa
Signing time: Sat 15 Apr 2023 20:20:42 +0000
ROA not before: Sat 15 Apr 2023 20:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 92.249.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:93:c0:5d:45:1e:28:45:11:c7:b7:ff:46:57:57:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Apr 15 20:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b7d19269d0f4d17253dbab68ce3713a742b1ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:35:c8:eb:6a:9d:38:0c:24:b8:ca:ef:48:
51:c6:43:75:10:f8:4a:bc:5c:98:7c:a4:d6:be:2d:
dd:ba:79:94:78:8d:d9:89:3e:44:3f:c8:f0:2c:b4:
db:06:09:2e:14:c5:3a:7e:ce:5f:84:63:78:34:51:
81:0b:94:e5:83:b2:06:97:40:eb:30:a3:d0:48:4b:
4f:39:31:c1:d3:be:55:47:22:21:db:13:ff:7a:c7:
c5:38:9f:d7:c4:41:85:f9:71:84:ed:55:6a:07:88:
fe:3a:61:eb:e3:29:61:2e:84:4d:06:4c:8b:48:e5:
42:c8:d9:3c:64:4a:0b:99:41:5a:77:a2:d4:87:82:
92:6b:00:71:48:ec:67:1e:16:5c:d0:8b:fb:16:20:
95:4c:2a:1a:28:42:b0:55:ce:54:78:59:b6:1f:26:
28:dd:8f:f0:4b:56:12:cf:97:8b:4b:87:b4:f4:63:
df:3e:e6:c1:14:12:66:6e:32:b9:f2:53:59:3a:5f:
1e:f4:00:42:f2:96:bb:09:81:19:79:e2:2b:e1:f2:
d6:2d:46:90:c6:b7:95:51:ba:eb:de:0a:98:36:15:
35:10:51:41:e6:f4:d2:5c:5e:a7:83:c3:87:a6:63:
66:02:33:fd:25:0e:23:b8:1a:37:05:6c:9b:b5:2c:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:19:26:9D:0F:4D:17:25:3D:BA:B6:8C:E3:71:3A:74:2B:1E:AD
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/K30ZJp0PTRclPbq2jONxOnQrHq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:11:8e:4a:8c:32:6d:3b:80:a7:3f:94:db:f0:56:d4:ec:b2:
b9:95:c5:7f:89:48:a1:50:4f:c1:30:26:f3:6a:82:fc:f4:d5:
c8:40:31:3c:a9:82:ca:13:a2:80:5f:4c:09:be:99:b4:7f:b4:
95:76:01:4d:fc:3a:5e:4e:15:03:78:9a:fb:5b:d6:35:06:8c:
82:75:4c:1e:42:bf:2c:b9:45:61:41:dd:e2:04:78:8c:51:53:
a9:52:0c:a3:91:f8:b8:5c:10:73:58:5b:cd:8c:fc:e9:f5:a1:
c1:0a:16:cf:0f:71:f3:70:6b:ad:46:80:c5:f7:23:57:72:8d:
34:51:a8:36:a4:d8:10:f6:96:0c:8f:2b:4e:68:2b:2b:be:05:
90:38:39:2e:16:1d:68:0b:c8:58:66:34:a2:37:d0:45:36:e3:
80:73:5f:2c:47:8b:c4:79:f5:61:2e:4b:69:52:e5:3f:66:3e:
a5:d6:cd:ed:ac:52:09:91:20:43:43:b7:fd:50:1f:07:f4:eb:
b7:ef:cc:64:26:1d:d7:85:2e:cb:44:e8:5e:0b:45:a7:68:a4:
82:d4:4c:e5:5b:a5:0c:29:21:4f:ec:a8:b6:62:42:0c:8f:a2:
a6:6b:a8:70:4c:59:6c:ea:0a:52:fd:99:6d:c6:ca:62:da:97:
59:2c:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org