Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/tLNkJU_w89_DIeMJwL2nBCVqTSY.roa
File: tLNkJU_w89_DIeMJwL2nBCVqTSY.roa (raw, json)
Hash identifier: 1Ou8YPKdtiR0i8IJPeR6qjonYdsgLIUnwqnBUZHkpEg=
Subject key identifier: B4:B3:64:25:4F:F0:F3:DF:C3:21:E3:09:C0:BD:A7:04:25:6A:4D:26
Certificate issuer: /CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Certificate serial: 0183A7C750AF43374B88921CEF9CA90ED24E
Authority key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/tLNkJU_w89_DIeMJwL2nBCVqTSY.roa
Signing time: Wed 05 Oct 2022 10:53:20 +0000
ROA not before: Wed 05 Oct 2022 10:53:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 147.78.100.0/24 maxlen: 24
147.78.101.0/24 maxlen: 24
147.78.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:c7:50:af:43:37:4b:88:92:1c:ef:9c:a9:0e:d2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Validity
Not Before: Oct 5 10:53:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4b364254ff0f3dfc321e309c0bda704256a4d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:9d:05:55:69:d4:41:0b:1c:10:3d:b1:02:
2a:71:c6:33:2c:e2:bb:ab:13:80:84:73:ad:3c:b0:
d1:f8:68:98:05:f8:b4:28:80:8d:ba:df:e7:25:dd:
9a:49:af:02:dc:3a:a0:e1:75:c6:8a:d6:81:1c:bf:
e7:dd:f0:fd:ac:78:26:1b:bf:c8:de:81:81:aa:c5:
26:ef:7a:11:8f:a2:58:0a:1d:ea:02:f7:31:69:37:
ac:36:64:63:1c:7d:cd:8e:06:54:f4:63:70:17:a0:
6e:e7:81:21:44:bb:9b:78:6a:59:34:37:a3:35:d3:
86:1f:1b:96:d5:ef:89:b2:7a:f8:1c:7c:3b:9b:dc:
65:0b:4b:b4:92:f4:8e:d7:57:ca:f6:3a:47:69:6e:
da:54:44:f4:74:82:06:da:54:5f:0d:d8:42:49:14:
89:ad:eb:b9:26:e7:3a:af:69:04:a8:ba:79:25:66:
81:83:ae:31:09:f4:25:9b:90:6d:24:47:d2:90:e8:
aa:82:38:40:c0:eb:7c:91:70:18:d7:d8:eb:2d:42:
57:31:01:ae:81:d1:9e:56:9f:a3:5a:d4:52:63:c9:
43:d9:35:28:50:50:c4:d2:bb:ad:b6:75:3f:91:da:
30:14:2a:39:44:9d:bc:80:13:3b:88:11:81:1e:80:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:64:25:4F:F0:F3:DF:C3:21:E3:09:C0:BD:A7:04:25:6A:4D:26
X509v3 Authority Key Identifier:
keyid:71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/tLNkJU_w89_DIeMJwL2nBCVqTSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.100.0-147.78.102.255
Signature Algorithm: sha256WithRSAEncryption
90:51:af:38:5f:6c:42:36:46:0c:c5:a8:66:51:cc:93:32:cc:
dd:ea:bd:0c:4a:5e:00:57:83:13:6c:74:40:bf:13:6b:53:72:
3f:20:ae:d8:58:ec:d7:5f:9f:97:26:86:24:80:2f:19:8c:e6:
f5:3e:8b:35:13:32:5f:57:d2:69:21:a2:16:c7:e1:d6:c8:9a:
33:19:ca:9c:6b:5d:6b:78:e8:ce:22:14:1e:7c:2b:33:a3:ca:
9e:28:e7:ee:ad:40:dc:aa:29:5c:1f:26:a4:97:05:8d:b5:4e:
f2:26:65:c2:0e:1c:7a:36:c5:9e:27:a8:4d:ed:fb:7e:32:93:
53:9c:be:99:b5:b4:e9:5c:4c:34:df:a2:2a:35:5b:18:13:97:
6c:cc:e4:c3:f8:ea:c0:29:26:48:49:4b:fa:ab:08:b4:db:e0:
8d:c4:51:c6:c8:aa:c1:90:4f:53:c8:1e:5a:7b:b4:bb:93:bb:
05:8b:8d:d2:fe:9e:f1:76:2f:88:72:6a:35:28:d6:2c:bb:09:
ba:bb:b1:91:3d:2a:21:b1:02:37:01:9c:a0:a7:bd:6e:5e:11:
90:ae:5b:67:95:dc:42:ad:9a:64:ec:cc:d6:a6:2d:3d:ee:97:
ef:34:5b:c7:ba:1a:49:b9:f7:e5:8a:52:0f:74:0d:65:74:4e:
af:d0:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:41 2025 by rpki-client