Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/KSnpTnSrsBxDvFC4NYYglBZclvU.roa
File: KSnpTnSrsBxDvFC4NYYglBZclvU.roa (raw, json)
Hash identifier: BYG25AZ/8DUw/nwR0XnazWClfwgTrXWA1qNuVDYcauQ=
Subject key identifier: 29:29:E9:4E:74:AB:B0:1C:43:BC:50:B8:35:86:20:94:16:5C:96:F5
Certificate issuer: /CN=916098b0295d617488d3d9e7d23b59a331c15e60
Certificate serial: 01837AAB46A3072A34C67B077F47A32B87DB
Authority key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/KSnpTnSrsBxDvFC4NYYglBZclvU.roa
Signing time: Mon 26 Sep 2022 16:39:48 +0000
ROA not before: Mon 26 Sep 2022 16:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205124
IP address blocks: 147.78.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:ab:46:a3:07:2a:34:c6:7b:07:7f:47:a3:2b:87:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916098b0295d617488d3d9e7d23b59a331c15e60
Validity
Not Before: Sep 26 16:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2929e94e74abb01c43bc50b835862094165c96f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:e9:8d:d7:8e:0d:ce:37:21:d9:aa:1a:fe:
de:93:14:e5:12:60:3c:e3:19:e9:75:f1:eb:5e:eb:
79:0f:db:b0:7b:e4:0e:87:1b:bc:db:38:7c:85:43:
61:65:91:b0:99:c0:33:76:0c:ba:7e:2a:36:93:ef:
aa:08:41:c1:ac:a5:57:59:25:9e:1f:52:d2:41:50:
3e:d0:41:9c:0f:8e:6f:4c:9f:4f:a2:b2:24:be:a2:
d7:02:8b:37:ac:57:62:79:40:47:b2:4c:67:fa:ea:
96:19:3b:fe:1f:ce:c5:2a:42:26:c8:01:71:d0:fb:
12:ed:47:e4:8e:d1:56:91:7e:1d:fd:28:55:21:53:
90:31:25:9a:2a:6d:c5:7b:63:1e:a6:c5:f9:78:b9:
d5:68:0f:1c:12:15:6b:3f:5f:7a:c1:da:b5:87:84:
59:b3:8d:1d:cd:ed:51:96:b2:82:5f:b7:f4:5b:69:
6d:7a:a0:f6:46:98:75:4c:1b:55:47:81:40:26:20:
b5:52:11:53:21:bc:fd:73:7d:27:f0:42:13:af:8a:
b5:eb:58:89:f1:25:a1:79:fd:4b:20:44:8c:12:89:
52:20:b3:93:41:72:bf:2a:19:8f:47:33:79:ed:6e:
d8:1d:2b:26:62:6d:68:8d:0a:2e:ca:39:cf:28:ec:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:E9:4E:74:AB:B0:1C:43:BC:50:B8:35:86:20:94:16:5C:96:F5
X509v3 Authority Key Identifier:
keyid:91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/KSnpTnSrsBxDvFC4NYYglBZclvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:3e:6d:d4:81:af:c9:ce:8f:bf:89:92:0b:55:46:d7:52:0d:
7a:75:fd:04:2f:d6:79:7b:5b:88:15:8b:be:21:66:5e:f9:69:
4d:a8:0e:75:f2:0c:33:b8:b4:87:74:cf:bb:42:24:5b:f6:44:
0c:5f:de:b6:e5:c7:a9:05:3b:cf:59:b8:54:3d:d8:c3:b0:55:
70:e6:c2:b4:72:9c:6c:f6:a7:d6:20:8f:5c:07:09:6d:9e:11:
e6:c3:77:82:ee:30:8c:df:af:07:7f:16:e0:40:52:9d:02:0d:
27:d2:18:97:da:4f:a1:8a:d5:d2:c2:f0:ad:7a:d4:e0:4e:00:
b6:29:88:57:1c:06:ba:7b:04:c1:7f:6e:2b:d5:74:2e:6e:65:
f2:65:cd:99:ac:4c:09:31:fc:d5:45:d6:f2:1a:3c:8c:14:d4:
20:bc:d4:54:49:83:e9:c9:32:c9:98:49:38:4a:9e:b3:66:2e:
98:8e:88:00:94:3f:34:7e:c2:2d:24:ad:da:87:ce:0c:56:09:
f5:ab:b1:74:3a:96:e9:20:3f:d5:19:8c:b0:50:c0:ee:ec:53:
31:cb:56:fa:dd:16:ea:c1:a6:f0:35:01:4a:9e:3b:31:28:e0:
ea:ce:b2:39:81:ad:54:6c:bc:f6:49:0e:08:95:1c:05:19:5b:
56:d5:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org