Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/amrm3G9FQjK-HlcoNnFceU9WNEE.roa
File: amrm3G9FQjK-HlcoNnFceU9WNEE.roa (raw, json)
Hash identifier: U9ijM4x3BRqFkXIfvhdCI82bqIFNZ+jrJY7RFwHNpow=
Subject key identifier: 6A:6A:E6:DC:6F:45:42:32:BE:1E:57:28:36:71:5C:79:4F:56:34:41
Certificate issuer: /CN=916098b0295d617488d3d9e7d23b59a331c15e60
Certificate serial: 0185719561ABAE0EAE33B362EBA782D447B4
Authority key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/amrm3G9FQjK-HlcoNnFceU9WNEE.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205124
IP address blocks: 147.78.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:61:ab:ae:0e:ae:33:b3:62:eb:a7:82:d4:47:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916098b0295d617488d3d9e7d23b59a331c15e60
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6ae6dc6f454232be1e572836715c794f563441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:cb:ef:41:91:98:9e:80:55:63:9e:4a:44:
46:1e:90:9d:b1:95:00:16:fb:ac:9f:4c:ee:4c:30:
74:bb:c3:03:db:33:a9:95:d9:6e:1d:5a:82:a9:d4:
f1:26:c4:39:d1:9c:db:f1:59:6e:5a:bd:0a:5f:a3:
62:d8:35:95:5a:10:13:e0:88:04:07:d1:e3:a1:fe:
e4:ec:e8:11:38:ae:40:98:36:e1:a5:13:c4:b9:b0:
9c:49:37:42:55:34:32:fc:5f:7a:a4:cc:0a:84:2d:
71:e9:c9:11:27:59:9d:a6:91:91:b4:9d:7e:63:bb:
0a:4f:d7:cd:9d:56:50:a7:ea:e1:98:e0:73:dc:71:
e8:1a:cc:79:5d:08:c7:43:e1:14:8a:69:3c:37:b1:
8a:85:73:64:1c:4d:04:df:c3:46:2b:7d:b7:c2:6f:
6b:ee:64:72:ff:0d:9b:c8:e7:06:93:61:c1:8d:0b:
79:27:a1:29:63:ae:c1:d8:00:6b:86:c2:f3:78:60:
e5:a1:ff:ea:b1:5b:34:0e:e6:5f:19:10:3b:60:46:
94:4c:60:ee:63:b3:53:2c:e0:f8:dd:2a:54:91:ef:
7b:bd:c1:ab:96:50:eb:be:1c:b1:5e:79:18:1f:ba:
86:05:f6:d1:49:35:f6:62:72:13:f8:af:aa:13:e8:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6A:E6:DC:6F:45:42:32:BE:1E:57:28:36:71:5C:79:4F:56:34:41
X509v3 Authority Key Identifier:
keyid:91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/amrm3G9FQjK-HlcoNnFceU9WNEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
55:24:52:35:ec:01:79:c9:e1:25:d2:f3:e9:0f:c9:3f:ae:b1:
c5:72:88:85:c1:a1:a8:2b:41:6f:5c:6f:91:cc:7f:a8:9d:54:
22:93:2e:41:02:c1:f9:cd:cd:8a:21:1b:49:36:6c:02:cd:f6:
a2:fa:9f:94:5d:c7:7c:40:48:90:45:ea:75:39:43:c1:bc:81:
a8:82:a0:38:88:75:ef:9f:78:55:6c:89:fc:ea:48:d9:78:fe:
75:f2:dc:bd:7d:dc:4d:b5:50:87:83:ea:dc:02:8d:18:f4:ee:
ae:4a:66:e0:dc:0c:73:f4:40:8d:ef:f8:77:89:76:df:97:c7:
1f:2a:4d:d7:4e:9c:a7:59:bd:34:9a:7d:b6:42:04:b2:94:a1:
b4:8c:02:59:6a:50:38:ca:a3:a1:c2:e2:72:19:d1:5d:a6:d9:
9d:e0:36:6c:36:49:d6:f6:1e:63:6c:39:a6:b4:4f:8d:49:47:
37:81:51:80:2d:a1:65:75:8c:10:1d:da:d5:d8:15:dc:25:b3:
be:04:4b:12:f1:97:b8:43:ed:8a:c7:0b:1a:a7:92:de:ef:f2:
e4:7e:93:0a:0e:89:bc:2b:e8:00:c2:c8:a8:82:6f:2e:8f:a1:
de:71:40:ef:49:0e:ca:d9:81:fb:f0:f4:1e:c4:71:eb:18:db:
5a:fd:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:14 2024 by rpki-client on console-ams.rpki-client.org