Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/h49IfGxvDhK6hXaVrULxJPUhsNM.roa
File: h49IfGxvDhK6hXaVrULxJPUhsNM.roa (raw, json)
Hash identifier: +3pbGSJ+XaOPu7UNpyTEL0RuV4GGBlv9eQ0Dlo7DeXw=
Subject key identifier: 87:8F:48:7C:6C:6F:0E:12:BA:85:76:95:AD:42:F1:24:F5:21:B0:D3
Certificate issuer: /CN=923aa0015ac180c236ffa211d969674286d073e9
Certificate serial: DD11CC
Authority key identifier: 92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/h49IfGxvDhK6hXaVrULxJPUhsNM.roa
Signing time: Sat 01 Jan 2022 06:01:57 +0000
ROA not before: Sat 01 Jan 2022 06:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47380
IP address blocks: 185.93.232.0/22 maxlen: 24
91.242.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14488012 (0xdd11cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923aa0015ac180c236ffa211d969674286d073e9
Validity
Not Before: Jan 1 06:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=878f487c6c6f0e12ba857695ad42f124f521b0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:69:c5:e2:a1:af:7a:ec:0f:17:2e:b9:87:
94:cb:a4:4b:26:3c:d2:ee:d3:75:28:d5:2a:d9:54:
71:e6:a1:d4:d6:b7:30:74:1c:cd:8d:86:b2:ec:a6:
cc:a9:f2:16:53:e9:a3:2f:e1:99:fe:a1:90:48:eb:
31:aa:61:13:87:82:36:e4:ba:aa:be:c2:9a:b2:36:
e8:ff:39:da:ee:74:6e:42:11:bf:63:20:87:59:d7:
89:13:4a:7f:e7:68:67:6c:ac:f0:45:0f:50:ec:64:
6a:5e:79:13:f8:37:59:75:1b:bf:e2:67:d3:7d:7f:
ba:4d:40:76:80:37:e1:82:ab:eb:56:77:6f:07:de:
12:ab:49:29:35:74:8f:01:8b:97:b1:77:ee:78:9e:
c8:b3:77:31:5c:30:80:d5:1e:d1:37:5a:4f:e8:ff:
b5:8a:d6:6c:5d:b1:be:4f:b8:52:29:c5:62:cf:65:
54:77:d1:32:bf:65:17:3a:9f:80:4f:c6:5f:61:63:
d9:51:06:ca:a4:8f:b4:37:d9:a5:70:26:f1:c1:0c:
ef:db:35:85:32:7e:0b:04:28:99:b5:8f:c3:f8:e4:
8f:57:72:ed:0c:4a:c2:5d:01:6e:32:61:ba:3c:36:
db:1d:30:5c:77:0b:89:66:cc:32:d9:d6:42:bf:b4:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:48:7C:6C:6F:0E:12:BA:85:76:95:AD:42:F1:24:F5:21:B0:D3
X509v3 Authority Key Identifier:
keyid:92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/h49IfGxvDhK6hXaVrULxJPUhsNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.144.0/22
185.93.232.0/22
Signature Algorithm: sha256WithRSAEncryption
05:f0:6f:60:98:8f:74:ee:f4:f9:06:c4:65:5c:d5:eb:e3:12:
ff:b3:10:88:8d:62:9e:7b:b8:c0:68:4a:62:d4:bc:03:e9:4b:
2f:07:c4:2e:cb:53:68:25:67:b4:2e:ea:5d:f3:d9:0a:16:f7:
de:98:f8:e8:04:a2:06:84:47:45:4e:75:f9:5d:cc:ba:0b:c8:
c2:00:21:dc:14:b4:c0:c4:01:79:ad:00:e9:83:1b:c6:c0:74:
64:0f:6e:8e:b2:50:df:45:f3:df:ad:f1:27:85:eb:e6:3e:3e:
61:93:55:e8:c6:62:5e:a4:ef:a8:d5:dd:62:72:bd:4e:f4:1d:
f3:e1:51:a1:51:40:2a:d1:1f:08:fa:74:71:aa:97:fb:4a:ef:
78:8d:c9:b7:97:41:49:92:70:47:d5:aa:fd:54:0d:b9:4f:8b:
96:a4:1a:59:d5:1a:08:83:cd:2f:41:6d:bc:ff:f2:e8:97:e1:
fd:46:3c:77:53:39:8b:e9:4d:59:14:e3:86:fa:26:40:35:ed:
c5:0d:98:00:7c:fb:a3:3d:c8:e2:45:37:dc:21:24:fa:4e:60:
64:7e:ba:42:3e:b5:ff:59:88:3a:bf:5a:17:d2:5f:c7:bf:5f:
da:70:ea:d8:d2:8d:dd:c5:d5:0e:5e:f0:99:58:0b:ed:c8:a4:
a6:63:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:45 2024 by rpki-client on console-fra.rpki-client.org