Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/MYjgMQMkLcAInWOXftDDR8AkK-g.roa
File: MYjgMQMkLcAInWOXftDDR8AkK-g.roa (raw, json)
Hash identifier: n16yJEPtyuxYEl2dOPQg0ZdKHeT7RC8j04CyEtDJHSI=
Subject key identifier: 31:88:E0:31:03:24:2D:C0:08:9D:63:97:7E:D0:C3:47:C0:24:2B:E8
Certificate issuer: /CN=916098b0295d617488d3d9e7d23b59a331c15e60
Certificate serial: 0184529FD4310F16B0F057868EC66748716D
Authority key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/MYjgMQMkLcAInWOXftDDR8AkK-g.roa
Signing time: Mon 07 Nov 2022 15:05:17 +0000
ROA not before: Mon 07 Nov 2022 15:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 147.78.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:9f:d4:31:0f:16:b0:f0:57:86:8e:c6:67:48:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916098b0295d617488d3d9e7d23b59a331c15e60
Validity
Not Before: Nov 7 15:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3188e03103242dc0089d63977ed0c347c0242be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:92:2b:18:c4:5e:6d:5a:81:44:77:1a:c0:
5b:c3:c4:b7:cf:96:03:47:01:cd:f0:1d:88:35:ea:
ba:53:d3:2a:fb:a5:d4:18:83:57:5a:f7:06:b5:04:
42:b4:1b:d1:9c:92:7d:b0:5d:ac:c9:cb:df:32:47:
0e:48:cd:b6:a3:d5:95:29:ac:f8:2d:d2:77:da:b8:
68:8a:fd:21:c5:e1:1a:68:e0:36:43:9a:43:65:66:
01:62:67:3a:32:b0:3d:5e:47:31:58:7e:38:6c:2e:
e6:e9:6e:68:c1:2c:5b:1e:a5:71:e6:1d:e9:e4:c7:
91:9a:12:91:37:48:d5:7d:01:6c:a8:5e:63:4a:8d:
28:3f:9e:46:01:54:73:5d:32:95:40:ea:73:69:7b:
fa:b6:ea:d9:b1:ef:48:4b:0f:e8:89:1f:b8:dd:2d:
5f:3f:1e:9d:c0:10:54:d7:b1:3d:c0:58:3c:27:41:
06:47:26:54:51:bf:e4:16:56:3b:c2:e5:28:e0:3a:
58:7b:33:e3:ff:a4:08:b6:b3:5d:a6:52:8c:55:df:
b1:e5:63:31:6b:04:76:1c:37:85:55:d5:d5:43:72:
9b:98:6a:a6:34:49:19:55:82:ca:84:5b:79:a4:6c:
54:cd:9b:fb:65:d4:89:28:62:fd:46:6b:f7:d4:5f:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:88:E0:31:03:24:2D:C0:08:9D:63:97:7E:D0:C3:47:C0:24:2B:E8
X509v3 Authority Key Identifier:
keyid:91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/MYjgMQMkLcAInWOXftDDR8AkK-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
43:59:c9:14:8e:cd:75:aa:d8:42:95:e7:ba:65:ba:26:60:bb:
82:51:69:b9:2c:83:91:98:aa:b9:4b:03:9a:62:6a:82:28:09:
fa:e4:89:5e:f8:6a:5e:1c:76:f8:0b:72:09:95:e2:5c:02:de:
14:56:74:57:1f:f9:0e:bf:02:2e:4e:31:2e:ba:77:70:5d:1e:
ed:07:c7:7b:61:20:ef:f3:70:57:17:a5:ce:69:cc:07:c5:c0:
c2:26:fd:a7:28:a3:f6:d6:ca:c5:eb:9f:71:65:af:fc:87:10:
92:3d:c7:a2:b6:28:5b:d3:50:9a:b4:6e:af:34:72:6b:b5:0b:
3a:9c:0e:de:d2:5f:69:e6:9a:a6:f5:80:70:f2:2f:92:2d:d6:
a4:d4:99:b8:6d:56:4f:fb:03:25:07:ab:d6:7c:f4:0d:5f:d9:
bc:10:c9:94:09:f9:c1:ed:d8:bd:8a:97:3f:f9:bb:a4:f7:94:
58:39:49:0f:23:b7:00:3a:ce:27:c5:59:d2:09:ec:a9:c1:98:
cd:5c:88:41:c9:3e:a1:e2:07:b1:66:91:7a:bd:21:d8:d9:48:
80:08:25:7b:c3:b7:b5:37:f4:94:38:b1:61:ec:15:1d:a0:d9:
e0:19:0f:71:9e:6c:0b:b2:3d:d6:6c:6b:f8:36:d9:70:97:d2:
d4:c6:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org