Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/lnCILnibbw5BnoIC4ZWw7PhKmsw.roa
File: lnCILnibbw5BnoIC4ZWw7PhKmsw.roa (raw, json)
Hash identifier: mSt1GoZcI1HLMOni9OzPCS63Qs4kYPDEKE9pOvwYBaE=
Subject key identifier: 96:70:88:2E:78:9B:6F:0E:41:9E:82:02:E1:95:B0:EC:F8:4A:9A:CC
Certificate issuer: /CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Certificate serial: 018456DC3C285B149D3BC2D7CA22FE87D628
Authority key identifier: CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/lnCILnibbw5BnoIC4ZWw7PhKmsw.roa
Signing time: Tue 08 Nov 2022 10:49:44 +0000
ROA not before: Tue 08 Nov 2022 10:49:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 92.119.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:dc:3c:28:5b:14:9d:3b:c2:d7:ca:22:fe:87:d6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Validity
Not Before: Nov 8 10:49:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9670882e789b6f0e419e8202e195b0ecf84a9acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:5b:c9:cc:2f:ea:b9:81:e0:08:63:7e:55:
5f:e2:f6:63:a6:cc:80:23:35:a7:27:b6:ce:12:0e:
9d:18:63:0a:e3:49:6c:39:6d:0f:f1:02:1b:cb:73:
75:f2:e3:9c:3c:e1:95:cf:d7:f7:6d:3f:f9:91:0a:
f5:1e:02:5c:84:8b:21:85:96:f2:a9:9e:f5:87:ca:
46:0b:0e:e2:05:78:b6:da:45:8c:dc:0f:32:e2:7a:
ac:cb:cb:4a:4d:c2:17:f8:df:00:b6:e7:d9:64:7c:
98:d2:53:04:85:a3:5c:02:ae:1b:20:18:20:04:2b:
76:9d:01:a4:ad:bd:54:d5:1d:93:0c:15:0a:f2:0d:
ed:1e:81:28:c3:d6:2a:5b:59:e0:86:d7:fd:0c:2e:
91:d2:c9:d5:71:da:ab:8f:4c:ef:23:15:1f:ef:8a:
52:74:e0:8a:fc:56:95:26:5b:e1:e7:0d:fd:52:62:
a6:d9:8b:ef:6a:2f:37:51:c6:46:09:43:f6:97:23:
7a:55:3d:66:bb:bb:ec:b1:b5:d1:19:3e:8d:9b:15:
b6:ab:f5:b1:b7:b4:79:8c:d4:c3:f9:a4:1f:c5:ab:
87:bb:49:37:88:33:ce:1b:2b:2d:69:cf:73:4b:e6:
00:c6:18:97:4a:e8:51:6d:af:02:30:7e:35:bf:2c:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:88:2E:78:9B:6F:0E:41:9E:82:02:E1:95:B0:EC:F8:4A:9A:CC
X509v3 Authority Key Identifier:
keyid:CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/lnCILnibbw5BnoIC4ZWw7PhKmsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/za7RPzCm3J1NJ3DTIyNtH9IEU5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e0:1c:b9:9b:b8:fa:25:df:fb:4b:38:ec:21:19:e3:cc:b0:
8b:bd:35:d2:f5:ea:a2:70:1e:9c:7a:bb:7d:66:69:57:7a:c1:
31:86:c9:f1:73:34:be:d5:c2:52:53:be:cc:cc:34:d9:4b:b1:
1a:9d:f5:94:e7:08:0f:7a:af:58:f5:96:33:2e:34:e9:dc:77:
47:74:9e:aa:dc:30:ae:5e:ca:5c:ef:b8:27:92:15:e0:f6:96:
64:92:63:ec:69:87:1a:e6:a6:fd:e4:ac:ce:03:d3:1a:95:fc:
1b:d2:27:7b:dc:10:c0:12:89:80:60:73:3c:75:d2:d6:0e:53:
5f:8a:bc:80:6c:ab:41:84:1a:4b:30:5e:b4:5d:21:de:8c:56:
a7:ef:7b:70:ab:1e:e8:04:ea:9c:89:ae:2e:ef:3f:8a:bf:59:
0f:00:cc:6c:ff:a1:50:b7:fe:ea:1a:8a:f6:40:d6:b4:17:8c:
d7:6e:15:fe:d0:f0:9a:ab:93:5a:2f:6c:5f:90:12:8e:33:35:
79:13:f8:bc:b7:b2:1e:35:9d:c5:79:78:77:6f:5d:1a:89:7d:
10:fa:f8:62:ac:b9:75:b8:94:ab:5d:c0:43:41:8f:6e:6f:7b:
56:c9:3a:45:ed:bd:e1:d2:dd:b4:ad:43:a1:cd:70:cc:b3:ee:
b6:63:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:11 2024 by rpki-client on console-ams.rpki-client.org