Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/7WbV2F37aSRZ8GkFwTG22CIUwE4.roa
File: 7WbV2F37aSRZ8GkFwTG22CIUwE4.roa (raw, json)
Hash identifier: v6JmFXzxnKc2MDCEOAjo20rvM78/W0cjqUxSwmvDCf0=
Subject key identifier: ED:66:D5:D8:5D:FB:69:24:59:F0:69:05:C1:31:B6:D8:22:14:C0:4E
Certificate issuer: /CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Certificate serial: 01856CE60FE71B16BC20DD8790D0FBFF2B81
Authority key identifier: 82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/7WbV2F37aSRZ8GkFwTG22CIUwE4.roa
Signing time: Sun 01 Jan 2023 10:34:54 +0000
ROA not before: Sun 01 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397695
IP address blocks: 144.57.32.0/21 maxlen: 21
144.57.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0f:e7:1b:16:bc:20:dd:87:90:d0:fb:ff:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Validity
Not Before: Jan 1 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed66d5d85dfb692459f06905c131b6d82214c04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:29:99:4f:73:3f:6c:47:67:22:4c:e1:62:
f1:47:3f:99:bc:38:c7:35:2b:1d:5d:17:56:6b:93:
3e:63:c7:09:71:03:0e:20:ce:c3:83:96:34:cc:8f:
35:07:45:c6:f9:9f:6f:f5:77:60:5e:a5:93:dc:a3:
eb:f5:1f:cc:63:fa:9c:79:7a:19:4a:af:1a:45:63:
04:48:e6:80:03:d1:90:29:f7:6e:2a:75:1a:b5:08:
7b:7e:17:ad:16:09:2d:c8:37:4e:47:10:71:39:cd:
e7:94:2a:fa:05:d0:d3:7d:23:25:3c:94:60:b1:8c:
af:a5:de:d6:e5:e5:17:06:f1:81:0a:7c:76:ac:50:
2e:93:6e:10:79:c4:8d:dc:6e:60:d2:6b:03:96:35:
70:46:50:85:3e:1f:87:3e:d5:9a:bb:fe:7b:98:92:
b6:ff:57:92:41:09:73:bd:6e:28:58:1e:5e:3e:d7:
bc:94:14:88:56:51:14:9a:1d:9a:96:51:aa:3a:4b:
e1:52:0d:cd:1d:63:60:41:95:34:b2:e4:72:1d:c5:
c9:b7:7d:81:82:3d:cf:1a:e1:fd:f1:9c:61:62:06:
3a:5d:fc:11:1c:74:32:8f:fc:bb:6c:1c:1f:2a:da:
0d:84:9a:ed:30:60:b8:50:60:94:9d:88:4f:9f:46:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:D5:D8:5D:FB:69:24:59:F0:69:05:C1:31:B6:D8:22:14:C0:4E
X509v3 Authority Key Identifier:
keyid:82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/7WbV2F37aSRZ8GkFwTG22CIUwE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.32.0/21
144.57.56.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:98:35:08:c3:a1:20:a4:84:f5:24:8e:9c:83:71:99:33:4c:
53:02:e1:98:7f:e7:f8:5e:35:6f:a5:21:70:a8:90:95:3c:8e:
c4:bb:f5:e0:90:bf:6e:59:a9:bf:12:2b:0e:2e:50:d7:4b:1b:
ae:f7:52:ed:a5:7d:e1:ff:5d:a2:6a:de:4e:4b:67:b2:22:aa:
aa:c0:92:05:44:9c:67:97:02:83:c9:d2:1b:03:09:b0:dd:8f:
50:d5:63:97:98:76:1f:4f:ac:ab:7b:ae:fa:41:f3:3c:53:d5:
32:0a:79:bc:cc:82:39:bd:3b:8f:ab:47:5c:d0:90:cb:13:d4:
15:5c:87:90:94:fa:5d:78:43:45:ed:b4:cf:ce:79:11:37:79:
66:3e:cf:ee:26:af:68:09:1a:fb:de:d7:5a:cc:ff:6b:99:e5:
73:c6:f9:2e:44:09:d5:98:29:51:ef:6c:93:62:04:b1:a7:1d:
04:2c:1c:6a:b3:3a:53:52:45:54:b5:6d:d0:bd:cd:03:e2:0e:
11:59:f2:28:56:34:36:4c:83:6e:74:e0:d2:2f:8c:fd:b5:23:
44:b1:be:e3:96:ce:ee:5e:eb:35:ab:bd:97:cd:27:79:45:2b:
f4:56:3b:ac:ac:c0:7d:84:27:2f:0c:e5:f3:cd:d9:73:75:0a:
da:de:88:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 09:58:14 2023 by rpki-client on console-fra.rpki-client.org