Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/MI47C6rO123vV6CAmmx-XrJUoRk.roa
File: MI47C6rO123vV6CAmmx-XrJUoRk.roa (raw, json)
Hash identifier: e1Inc2inrK6RprOYIU5sD6m3R95Sospx0YQV/b34z9Y=
Subject key identifier: 30:8E:3B:0B:AA:CE:D7:6D:EF:57:A0:80:9A:6C:7E:5E:B2:54:A1:19
Certificate issuer: /CN=916098b0295d617488d3d9e7d23b59a331c15e60
Certificate serial: 018CC801C6E19853BDFD4A7504ABB20C4692
Authority key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/MI47C6rO123vV6CAmmx-XrJUoRk.roa
Signing time: Tue 02 Jan 2024 02:30:08 +0000
ROA not before: Tue 02 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205124
IP address blocks: 147.78.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c6:e1:98:53:bd:fd:4a:75:04:ab:b2:0c:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916098b0295d617488d3d9e7d23b59a331c15e60
Validity
Not Before: Jan 2 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308e3b0baaced76def57a0809a6c7e5eb254a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:d2:1f:87:6a:2f:e5:a8:0c:84:40:d3:e3:
76:63:df:d9:36:41:5e:ca:c4:40:12:7e:a7:1b:0b:
30:82:81:a3:86:2c:8e:95:21:75:17:c1:af:35:c1:
a2:e6:ab:5b:c8:96:5e:8b:7f:0d:48:01:f9:9f:25:
dd:bf:ab:ad:64:3d:24:7c:11:32:1f:61:9f:53:b2:
c2:ec:88:64:83:df:d0:65:f9:93:ed:46:72:a5:b0:
4a:df:02:a9:cf:d3:b4:1d:9b:4d:ca:d6:f8:14:69:
96:89:60:2d:75:18:52:66:f5:62:b2:78:4b:5d:5a:
c9:9e:11:fc:f4:fa:59:90:f4:5e:9b:49:36:eb:1e:
ee:03:87:39:9d:74:45:74:e9:7b:15:9e:1b:4e:65:
4f:dd:c3:32:b2:10:a5:9c:f2:dc:8d:0c:4e:f2:04:
f8:78:3f:4d:77:fe:35:49:5c:4f:79:22:a2:5f:e2:
c3:56:87:27:bc:96:53:49:0f:64:f1:86:cc:35:6f:
1b:b8:8d:9d:f5:bb:b4:d4:80:f4:48:58:6a:ad:09:
7a:8c:0f:9a:e8:33:a0:09:02:42:5b:56:c9:97:2b:
04:6a:67:91:f8:27:37:be:f7:dd:06:f1:11:00:ba:
fb:cd:f2:af:d5:96:8e:1b:17:2d:6c:6e:72:30:27:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:3B:0B:AA:CE:D7:6D:EF:57:A0:80:9A:6C:7E:5E:B2:54:A1:19
X509v3 Authority Key Identifier:
keyid:91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/MI47C6rO123vV6CAmmx-XrJUoRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
41:08:4f:90:11:ce:73:54:f1:d8:22:e7:dd:5b:1a:6d:44:e8:
96:d5:23:64:d2:47:19:d8:33:62:b6:ca:a8:1c:39:da:26:5c:
11:0f:f8:20:41:17:7a:64:47:1f:48:c3:a4:0c:e5:5d:e4:6c:
93:fa:fe:84:5f:0f:f0:9c:59:57:ea:5a:b2:d7:92:e7:b5:a1:
d0:59:d7:53:dd:1e:9d:0c:85:f0:f9:a7:83:e4:f2:bd:80:ae:
de:dd:e5:f1:e7:33:0c:e0:a5:73:46:b7:6c:60:f7:13:3f:b6:
71:70:d5:38:77:28:f6:10:91:68:49:df:53:56:68:23:33:07:
09:d9:12:b9:b0:c3:ae:6a:eb:8f:15:67:fc:7f:dc:b3:77:a8:
26:d7:d3:67:2f:c8:3f:15:41:cb:fb:8c:e2:dc:8e:6b:80:d8:
01:de:af:29:3c:ca:6e:5c:eb:12:5f:56:12:81:9b:66:fc:3d:
ca:ff:b4:73:93:d8:23:81:d1:26:03:0a:6a:67:12:96:91:ab:
9a:36:a0:01:5f:be:2a:25:0e:4b:3e:9b:59:d5:50:24:44:45:
33:d6:88:93:79:8f:a7:51:94:ae:46:4f:4a:f5:4e:31:ec:39:
14:ab:c8:ee:fc:ad:25:2e:bd:eb:56:67:9a:a5:f4:9a:87:4f:
78:30:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org