Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/jkCESgatlqjkdsy175dbXKMF_LM.roa
File: jkCESgatlqjkdsy175dbXKMF_LM.roa (raw, json)
Hash identifier: tFNIBPR2q3ESrVXD/qWf2YSUcOylOHM6NeJnLX6fnRY=
Subject key identifier: 8E:40:84:4A:06:AD:96:A8:E4:76:CC:B5:EF:97:5B:5C:A3:05:FC:B3
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 018789F1403A44C6AE25C967434F8A9B284E
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/jkCESgatlqjkdsy175dbXKMF_LM.roa
Signing time: Sun 16 Apr 2023 12:01:41 +0000
ROA not before: Sun 16 Apr 2023 12:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 92.249.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:89:f1:40:3a:44:c6:ae:25:c9:67:43:4f:8a:9b:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Apr 16 12:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e40844a06ad96a8e476ccb5ef975b5ca305fcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:be:59:07:61:56:64:89:34:14:5e:c8:ae:
2f:92:d8:b0:3f:94:e1:0f:b9:8b:86:e0:60:c0:f7:
fa:7f:99:ef:cc:27:26:a0:42:10:74:68:fe:91:5f:
d8:88:ae:6e:67:ef:32:23:5c:5c:2a:b9:e0:35:a6:
50:72:19:51:93:46:83:3c:13:d0:a3:a3:99:4e:ee:
aa:a1:96:18:c3:ca:e9:4e:51:7b:3b:10:d3:e9:45:
f3:c7:a5:e8:15:9c:c7:e7:9c:b4:1a:04:92:f7:14:
12:90:03:b2:17:3e:01:5d:3f:e5:b2:7e:d7:f4:b0:
60:f2:98:bc:3d:2d:e6:32:5b:9a:e0:8b:a5:23:b8:
05:91:6f:a8:35:cf:ed:66:ab:3e:95:5d:c3:61:8a:
0a:e5:e7:b5:1e:b2:37:f8:9b:d7:15:10:0f:18:85:
e2:61:10:8b:03:05:8d:49:35:83:57:59:75:fb:ce:
0e:c9:94:74:c9:b0:ab:39:d2:52:12:04:30:9e:77:
3e:4f:e7:82:c9:11:01:04:24:2d:4f:f4:e9:94:4b:
81:e9:1f:5c:e1:fd:8d:7c:86:da:35:3b:36:22:4e:
3d:e9:4c:8d:e8:34:be:a0:a8:12:b7:5a:a6:e9:74:
a1:41:7b:73:5d:41:83:f2:45:a5:5c:54:89:8d:4d:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:84:4A:06:AD:96:A8:E4:76:CC:B5:EF:97:5B:5C:A3:05:FC:B3
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/jkCESgatlqjkdsy175dbXKMF_LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.26.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:06:c7:14:92:f5:ac:4b:b4:f9:f1:19:61:4a:75:b3:17:eb:
51:34:0e:24:3e:e0:64:8e:e9:1d:4e:64:ba:50:bc:ce:0c:ea:
22:bd:24:f1:b7:7b:93:b2:7a:a3:e3:65:e8:1c:d8:09:c6:97:
62:c4:88:a6:e6:4f:bb:a8:ad:2e:99:de:e2:e2:e5:2e:56:47:
ce:7f:8d:43:cc:24:8b:a8:52:ec:26:53:d0:45:8a:e9:b0:68:
06:70:1d:e1:46:c8:1b:ca:db:ff:6d:9e:41:55:05:9d:80:29:
64:5d:70:60:1a:b0:1a:05:4b:a5:39:22:a4:ec:be:36:12:68:
18:b2:cb:02:d4:94:3e:14:ec:ef:d6:0e:ee:51:98:19:48:98:
fb:2e:b4:5e:d0:75:67:c4:a5:a4:b6:05:4f:3c:bf:38:83:a0:
45:d4:3b:cc:06:a8:97:41:24:64:df:3d:94:32:b8:5d:e5:d1:
45:3e:63:dc:d0:e6:a6:66:86:fa:da:87:8d:c0:f4:91:ac:20:
64:e1:a8:76:8b:fc:45:87:16:28:6e:b7:46:21:f6:4f:32:7e:
34:63:8a:23:25:32:73:1b:20:26:a6:e6:01:0d:f0:37:09:45:
c2:8c:0c:c1:13:7a:cb:37:f6:85:5e:8f:ca:3b:b4:54:81:13:
1d:d6:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org