Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/ezfY92grwvhxUwsw34ogeuMCRAc.roa
File: ezfY92grwvhxUwsw34ogeuMCRAc.roa (raw, json)
Hash identifier: +XtugS6bxyGAN59rIaIKk7zkVWFggsWuR/L5ksuNlfE=
Subject key identifier: 7B:37:D8:F7:68:2B:C2:F8:71:53:0B:30:DF:8A:20:7A:E3:02:44:07
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 018521C19E797CFF1CA43C9F7BBEAC0E2B6B
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/ezfY92grwvhxUwsw34ogeuMCRAc.roa
Signing time: Sat 17 Dec 2022 20:23:34 +0000
ROA not before: Sat 17 Dec 2022 20:23:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203576
IP address blocks: 92.249.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:c1:9e:79:7c:ff:1c:a4:3c:9f:7b:be:ac:0e:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Dec 17 20:23:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b37d8f7682bc2f871530b30df8a207ae3024407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ae:4c:71:61:ed:ae:df:f0:5a:2a:de:44:4c:
01:10:5e:14:8a:79:b8:81:be:23:5c:45:df:ab:6d:
19:76:7f:02:18:fc:8d:79:b5:da:6a:97:64:64:b7:
1c:a4:ac:10:4d:61:ec:50:70:64:2e:df:e8:bc:2f:
d6:73:07:a8:6c:f2:a2:70:2c:02:68:fb:8d:11:25:
b4:57:51:95:7f:d3:7f:45:5e:b7:99:ea:5e:2f:91:
2e:7d:5b:80:ec:40:dd:22:74:a2:5d:c2:32:16:7b:
62:cd:ca:0e:3f:17:14:d9:0d:01:28:24:da:ee:37:
b1:66:53:78:9c:5c:90:43:f1:9e:7f:b7:29:dc:54:
3e:b8:3d:26:08:cf:f8:96:05:4e:76:67:17:59:57:
e6:08:80:bc:5c:e6:e7:67:aa:89:8a:6b:4c:1c:76:
48:08:33:03:6a:2a:e1:da:38:a6:95:89:68:2d:ba:
3a:75:7a:19:b2:18:11:2d:5a:ca:0c:43:fd:b1:70:
18:f7:50:64:49:be:46:03:07:05:01:96:db:c7:ae:
ac:92:fe:f3:b7:27:07:16:16:4c:40:3d:86:c6:cb:
28:23:54:96:03:0e:94:49:d5:69:5e:24:f9:4d:d3:
67:66:a5:62:bc:bd:cb:6e:91:69:c7:59:91:df:34:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:D8:F7:68:2B:C2:F8:71:53:0B:30:DF:8A:20:7A:E3:02:44:07
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/ezfY92grwvhxUwsw34ogeuMCRAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.26.0/24
Signature Algorithm: sha256WithRSAEncryption
35:61:4b:dd:b1:f5:f4:c2:6a:d5:0d:8c:c6:4a:37:48:f3:e6:
34:f9:c9:0b:d9:8b:52:ad:84:9f:6d:b5:3e:23:c3:56:17:bf:
78:3b:ac:e0:05:6b:ee:db:9a:75:d8:56:49:b9:b5:51:73:2d:
6e:19:89:2d:cc:0f:c0:35:e8:e9:f8:08:90:1a:fa:f0:a7:8a:
43:2a:5f:99:fa:fc:12:72:05:ca:33:43:dd:d9:f5:2c:fd:45:
69:4e:0a:20:42:60:35:eb:e8:d0:a7:b9:f0:65:83:4c:fd:f2:
c9:73:9e:b3:54:d3:e9:12:5a:ef:63:1a:44:20:d7:9d:6c:fb:
4d:f1:ce:28:20:3d:8e:df:43:6b:b1:c5:fc:bd:cf:ba:69:12:
f6:30:30:f9:b4:df:c0:d9:69:27:69:0a:75:ce:f4:9c:0c:3c:
9c:e0:e8:34:e7:fe:94:31:50:59:56:97:af:c5:96:77:65:fd:
98:4c:98:9b:bf:c9:77:51:80:5c:7c:0a:ea:0a:70:10:cd:57:
0b:25:a6:98:ca:73:4a:e3:39:4a:24:fe:26:de:c1:da:bc:48:
f5:f4:aa:d2:e3:5d:bd:c0:20:ff:11:00:6b:51:77:02:d6:bc:
83:23:65:57:1a:91:01:57:15:78:13:d7:21:23:04:0e:ab:c4:
7e:03:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org