Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/R-j1INgey85_UhSpTBN7P81AeEQ.roa
File: R-j1INgey85_UhSpTBN7P81AeEQ.roa (raw, json)
Hash identifier: S7EUL8+EmgzHohZkkw9Tv1p/o3Kc5kdeN9IvXLkUAv0=
Subject key identifier: 47:E8:F5:20:D8:1E:CB:CE:7F:52:14:A9:4C:13:7B:3F:CD:40:78:44
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 084E4E4A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/R-j1INgey85_UhSpTBN7P81AeEQ.roa
Signing time: Sat 01 Jan 2022 00:51:23 +0000
ROA not before: Sat 01 Jan 2022 00:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 86.38.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139349578 (0x84e4e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 1 00:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47e8f520d81ecbce7f5214a94c137b3fcd407844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:6a:5c:77:b7:73:16:9d:a4:f3:92:e6:1b:
5f:dd:58:ec:f5:fe:de:eb:8c:18:c9:14:67:b0:27:
c6:08:b2:ad:02:78:40:86:f1:9c:f4:e8:dc:f1:93:
f6:f4:b7:69:aa:03:58:91:6d:c5:a0:6e:76:fd:ba:
b0:2c:84:a2:7a:4f:18:f4:69:b8:9c:d0:d0:1e:48:
9a:f9:09:43:03:09:cb:ae:57:28:e5:49:6b:b1:4b:
2e:6f:f0:0b:d6:dc:7b:b2:fd:5c:27:89:6e:79:6b:
0f:cf:a1:0c:b2:0d:9d:33:3a:db:6b:2e:3d:de:b6:
40:27:8a:03:82:5d:2c:f0:cb:78:ea:61:d4:e1:76:
21:9d:6f:6c:f6:90:eb:03:45:4b:45:ff:93:ef:e3:
2d:19:3d:e6:8c:98:d6:36:e6:32:54:92:2a:57:eb:
0b:52:fb:9c:83:2b:a1:95:af:6d:18:cd:e6:5a:c1:
33:d9:18:16:f6:a6:22:88:94:e8:c8:e7:e6:ad:d9:
5c:5f:b5:59:77:18:7a:b8:e1:61:9a:d0:fd:86:9c:
1c:66:be:5e:7d:53:9c:05:4b:c5:6f:6a:66:bb:fd:
05:f2:e3:bc:a2:ad:71:21:0d:9a:5b:89:1a:15:92:
27:b2:1d:6f:d9:d2:94:de:c2:cb:65:a5:11:9e:1a:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:F5:20:D8:1E:CB:CE:7F:52:14:A9:4C:13:7B:3F:CD:40:78:44
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/R-j1INgey85_UhSpTBN7P81AeEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.32.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e8:e8:26:e3:74:ee:5f:bd:32:ea:ee:e0:4e:f0:97:d4:d1:
1e:5f:f6:aa:68:47:f7:53:3a:72:a0:f5:38:9d:ed:e1:2f:9f:
da:5f:cd:db:6c:52:e4:e1:66:c3:a1:56:43:14:3a:46:b2:52:
a7:39:57:ed:f4:ed:0f:d5:ef:c7:75:0d:9b:1d:1d:6d:19:09:
06:3d:24:41:04:7d:d5:b9:a3:9e:05:79:d6:c1:04:18:f7:82:
ef:31:92:5e:a7:11:fa:58:72:a0:7a:e8:d8:ae:45:32:ec:70:
3a:f6:76:7a:bc:5c:04:81:e2:40:2e:cb:93:69:28:81:40:09:
68:db:a9:11:50:ec:82:73:cc:6f:e0:13:df:ea:a5:c9:f8:e9:
13:25:b7:37:1f:cd:f8:b5:ad:2b:ae:6b:7d:7a:27:51:93:ce:
0c:0c:a9:80:47:21:27:0f:3f:6d:d9:fe:72:f6:ea:c7:3a:a1:
b1:af:0b:28:39:cf:77:fe:ca:59:5a:fb:82:13:b0:44:cc:66:
6d:04:9b:be:8b:9c:24:a7:2e:cf:47:2c:94:4b:48:c8:d7:a5:
08:c3:58:03:4f:55:41:0e:57:23:b7:d5:56:a6:54:a2:ce:78:
01:12:f1:e9:92:c3:68:93:9c:7a:f1:60:8d:ef:b2:b2:3c:71:
8f:7e:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org