Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/C6WG1YWu2fZl0IxGrvkuNd7azBE.roa
File: C6WG1YWu2fZl0IxGrvkuNd7azBE.roa (raw, json)
Hash identifier: i1LhjNEZYr56b+rxkEpFXQHDD1IOBuF8whnwn9gYPb8=
Subject key identifier: 0B:A5:86:D5:85:AE:D9:F6:65:D0:8C:46:AE:F9:2E:35:DE:DA:CC:11
Certificate issuer: /CN=cd57894c99db9dbf745e664a3a0d274fe16e5dad
Certificate serial: 018258F88CE8DC1D4D0255C90EF1E7BCEBD3
Authority key identifier: CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVeJTJnbnb90XmZKOg0nT-FuXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/C6WG1YWu2fZl0IxGrvkuNd7azBE.roa
Signing time: Mon 01 Aug 2022 10:34:20 +0000
ROA not before: Mon 01 Aug 2022 10:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28716
IP address blocks: 147.123.80.0/20 maxlen: 24
147.123.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:f8:8c:e8:dc:1d:4d:02:55:c9:0e:f1:e7:bc:eb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57894c99db9dbf745e664a3a0d274fe16e5dad
Validity
Not Before: Aug 1 10:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ba586d585aed9f665d08c46aef92e35dedacc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:92:39:72:d9:14:66:59:80:cf:a4:1b:bc:
a1:b1:e0:f1:9e:19:f1:6b:56:7b:51:df:66:ac:8e:
d1:ae:2d:9f:99:07:3d:75:9c:5f:4b:ac:cf:8f:c0:
e9:06:19:6f:0c:a2:29:90:93:a8:3f:9e:b5:e1:d6:
6b:98:a2:9a:15:b7:85:7c:f3:3c:43:44:dc:eb:46:
c3:1b:60:4c:44:1d:e6:48:47:5a:2d:10:39:35:05:
52:00:ac:01:bd:f3:5c:26:ad:ab:5c:74:61:c8:19:
54:39:c4:99:c3:3c:e4:9a:62:bd:ca:1b:dd:14:28:
0a:39:6d:6b:32:63:81:77:4e:19:ac:d5:60:dc:90:
7e:78:64:16:8a:03:3b:0a:e3:27:60:30:ca:5e:43:
25:ad:d6:71:ad:96:d5:5b:26:93:b1:c2:2d:a7:09:
66:35:95:6a:2f:d3:60:15:ff:0d:b0:09:db:dc:4e:
ae:76:86:da:a8:58:f1:96:d7:23:55:2d:41:05:9a:
93:74:f3:8c:4d:ba:cc:69:4a:c0:61:26:06:83:12:
21:cd:51:bd:bb:cd:dd:34:ec:38:5a:d3:8b:31:e7:
41:5c:37:76:b0:da:32:fa:6c:c3:45:ff:e1:0b:53:
78:a3:09:1d:13:69:62:72:c5:6c:b4:b9:d8:27:73:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:86:D5:85:AE:D9:F6:65:D0:8C:46:AE:F9:2E:35:DE:DA:CC:11
X509v3 Authority Key Identifier:
keyid:CD:57:89:4C:99:DB:9D:BF:74:5E:66:4A:3A:0D:27:4F:E1:6E:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVeJTJnbnb90XmZKOg0nT-FuXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/C6WG1YWu2fZl0IxGrvkuNd7azBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2e491c-17a8-4ee5-bc71-e04074ce613b/1/zVeJTJnbnb90XmZKOg0nT-FuXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.123.80.0-147.123.111.255
Signature Algorithm: sha256WithRSAEncryption
27:23:82:ab:37:d9:53:c8:3a:00:40:59:7c:ae:89:9b:6a:6d:
a5:8e:47:2f:60:d2:4d:18:0e:01:48:28:99:cb:d9:aa:ef:f2:
2f:0e:79:e4:23:67:65:c0:f6:1a:83:91:54:5b:e3:96:d3:d1:
64:f0:62:f6:5e:6d:d5:0c:0b:2b:fb:ea:bb:ea:04:a3:95:ce:
40:1d:86:4c:84:e9:bd:37:d5:7a:d8:28:a7:f0:00:4b:2a:fc:
ef:27:4f:42:9d:85:58:7d:24:c8:ba:70:f5:8a:d1:d0:a0:7c:
62:a1:20:b6:14:fb:b7:0c:fa:3a:b7:6f:2f:26:50:09:9e:e0:
48:42:47:6c:bb:ef:21:e1:d2:87:a9:5a:c3:87:8f:d4:de:cc:
15:84:75:17:88:1b:ce:69:79:69:7a:b4:7d:12:95:81:05:91:
fb:71:21:2b:46:3c:ed:50:d0:49:91:d2:cb:a5:2c:89:dc:e2:
13:87:4f:38:da:d8:63:59:f3:19:6c:7b:8b:bc:71:30:f8:9e:
9c:7b:67:e4:d4:40:26:df:1e:bd:bd:9a:db:81:d4:36:bf:d2:
c5:05:79:cf:63:04:f3:e6:29:49:40:d8:64:57:71:e9:45:d6:
22:04:ac:85:39:bf:37:c4:e5:cd:41:58:34:21:69:1c:4f:ec:
b0:f6:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:16 2024 by rpki-client on console-ams.rpki-client.org