Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/iIiL2D15uxN0yTBQDVKFxZtj3_g.roa
File: iIiL2D15uxN0yTBQDVKFxZtj3_g.roa (raw, json)
Hash identifier: YaEasSJ2PWNBdC9FvvFUoxnVouM+WAa/+OKxjj8qStE=
Subject key identifier: 88:88:8B:D8:3D:79:BB:13:74:C9:30:50:0D:52:85:C5:9B:63:DF:F8
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 018663BEDA491D5D65138EF039377CD74169
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/iIiL2D15uxN0yTBQDVKFxZtj3_g.roa
Signing time: Sat 18 Feb 2023 08:58:17 +0000
ROA not before: Sat 18 Feb 2023 08:58:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 92.249.24.0/24 maxlen: 24
92.249.26.0/24 maxlen: 24
92.249.27.0/24 maxlen: 24
92.249.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:be:da:49:1d:5d:65:13:8e:f0:39:37:7c:d7:41:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Feb 18 08:58:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88888bd83d79bb1374c930500d5285c59b63dff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:4a:c1:40:54:83:26:62:2d:65:21:7d:ed:
ae:16:ef:1f:39:21:7e:d5:fb:19:e2:13:87:d2:e9:
ac:75:4f:e5:f9:4c:57:70:1c:df:c9:07:b6:e5:ca:
c5:6c:9c:fd:58:dd:d5:94:5b:b3:db:f2:a3:25:36:
18:8e:e1:2e:f1:c4:6a:e8:29:ce:fe:ab:68:e8:5b:
74:f4:5e:20:44:20:b8:61:79:63:ab:a8:61:f4:de:
87:26:f8:4d:31:79:7f:26:3c:79:fe:f4:eb:2b:74:
00:e4:e1:84:c1:3d:32:e1:e9:3e:72:7c:aa:a0:c9:
91:35:f4:c6:43:54:75:d8:5e:55:a0:ab:70:74:c2:
f9:8f:ce:fd:54:93:ff:68:a6:79:82:b2:7e:64:0d:
73:9a:91:7e:d6:7a:1f:c2:0c:b3:fe:a9:44:a0:46:
cc:38:33:e1:b6:ae:08:0d:5b:15:35:e6:dd:70:9d:
ac:a2:c7:fc:64:92:f9:74:28:8f:3f:b5:63:5d:f7:
ae:46:31:f6:47:36:2d:3b:8d:ce:2b:c9:ca:30:64:
09:75:9d:39:8c:94:1d:eb:3c:19:6c:f9:22:d7:1e:
2d:6e:bb:3d:45:93:c9:be:9f:d4:80:29:33:85:1e:
bb:55:be:66:b4:be:ef:74:95:50:d0:7b:55:be:13:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:8B:D8:3D:79:BB:13:74:C9:30:50:0D:52:85:C5:9B:63:DF:F8
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/iIiL2D15uxN0yTBQDVKFxZtj3_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d3:7d:47:53:b6:a3:af:c4:db:6e:e7:84:95:26:19:a3:46:
64:5b:26:53:3c:e7:44:02:01:8d:fe:c2:25:77:b3:a0:e2:3a:
0a:b1:33:3a:4b:40:37:60:7b:bf:ef:2d:05:18:6d:50:76:8b:
df:30:46:69:31:79:59:9d:58:c2:0b:7a:aa:70:57:fe:53:05:
fe:df:6e:70:0e:bd:d5:e8:a5:dc:ce:d5:87:11:db:f1:f7:4b:
7f:3d:9f:98:fc:e1:16:92:2d:4a:ae:ef:ae:fd:ad:58:63:10:
21:d1:8d:dd:c3:f8:a8:b2:df:29:85:2b:8d:b0:8a:c2:45:d9:
5d:9b:b9:67:7b:e2:10:e8:62:42:d8:1e:6c:e8:86:b4:e2:bc:
4b:d5:de:b6:22:83:8b:03:22:8e:6f:0e:9a:2e:1b:af:1e:4a:
5c:cc:80:e6:a8:4f:73:5d:d3:15:33:14:ac:22:c9:84:7b:46:
2c:04:50:2a:ca:57:30:46:e0:8c:fa:37:cd:58:95:db:80:c7:
da:c7:0b:c2:4a:44:67:b3:f5:b5:ca:69:2d:53:50:7a:d0:5d:
19:7e:93:3d:5a:01:bb:68:65:dd:6a:39:7b:2d:e9:18:00:e8:
f6:ab:f8:3a:62:8c:c7:60:ca:8c:63:de:7c:c0:f5:fd:5e:9f:
9c:12:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org