Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/m3eT-qiBOS0rLPBDOZLBp9xiLCI.roa
File: m3eT-qiBOS0rLPBDOZLBp9xiLCI.roa (raw, json)
Hash identifier: 7bxu6PwrHYQtUA2VzMO+hN9UsB89a1wrYGLrhcGGxg0=
Subject key identifier: 9B:77:93:FA:A8:81:39:2D:2B:2C:F0:43:39:92:C1:A7:DC:62:2C:22
Certificate issuer: /CN=d21cf923ba3e3d1f64acbc6a5ef26c2446242a6a
Certificate serial: 025046F6
Authority key identifier: D2:1C:F9:23:BA:3E:3D:1F:64:AC:BC:6A:5E:F2:6C:24:46:24:2A:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hz5I7o-PR9krLxqXvJsJEYkKmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/m3eT-qiBOS0rLPBDOZLBp9xiLCI.roa
Signing time: Sat 01 Jan 2022 09:54:38 +0000
ROA not before: Sat 01 Jan 2022 09:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38917
IP address blocks: 149.255.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38815478 (0x25046f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21cf923ba3e3d1f64acbc6a5ef26c2446242a6a
Validity
Not Before: Jan 1 09:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b7793faa881392d2b2cf0433992c1a7dc622c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:7a:0f:d2:ce:92:01:b1:a5:30:ef:9a:eb:
0a:42:d0:6c:cd:e4:02:ff:ba:45:be:3b:75:6f:d8:
1c:d5:e4:36:c9:59:48:59:e8:c1:e9:ea:1b:95:a3:
26:76:45:b2:30:a9:ee:91:7d:51:2d:8e:aa:17:dd:
9d:d2:b5:5d:34:e9:cd:e5:e6:f6:61:0b:6c:bb:77:
8a:80:c7:a8:77:67:9c:a3:ea:37:99:78:c0:c4:b8:
a0:24:9c:b8:0c:7d:b7:40:63:4f:14:4e:d2:24:a0:
f0:b2:f5:fa:2a:cc:ea:d4:26:70:dc:6c:f3:3c:5a:
6f:69:2c:1a:4c:d5:21:4c:33:87:15:9b:f2:2f:38:
77:3f:fa:1d:05:94:ad:30:f0:f2:11:17:14:bc:ac:
b5:d4:1c:49:36:1a:d5:56:90:ab:70:a2:01:6f:36:
56:e5:b4:f7:b5:2f:48:63:54:f9:63:25:00:6a:16:
de:10:0f:e2:3f:60:24:69:df:50:20:b8:b3:a9:c4:
9e:0b:ac:0b:15:05:09:45:12:06:63:01:d9:38:87:
b7:a3:d6:fd:af:59:cf:44:4d:3a:22:1d:11:aa:5b:
b9:ac:4b:18:db:79:ef:12:a2:3a:c1:7c:4d:9d:c5:
30:d9:98:a1:91:2b:c4:16:b3:63:f5:d0:9a:7e:90:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:77:93:FA:A8:81:39:2D:2B:2C:F0:43:39:92:C1:A7:DC:62:2C:22
X509v3 Authority Key Identifier:
keyid:D2:1C:F9:23:BA:3E:3D:1F:64:AC:BC:6A:5E:F2:6C:24:46:24:2A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hz5I7o-PR9krLxqXvJsJEYkKmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/m3eT-qiBOS0rLPBDOZLBp9xiLCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1f761c-6da1-4352-ab87-1b4e10c186bc/1/0hz5I7o-PR9krLxqXvJsJEYkKmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.16.0/22
Signature Algorithm: sha256WithRSAEncryption
85:c8:2a:01:58:b3:56:21:28:20:e4:e1:1e:ef:77:a0:57:2a:
00:08:1c:3c:e5:7e:44:9a:88:97:8f:67:cf:3f:2c:f1:38:89:
86:2b:00:9d:e1:42:89:ec:b0:37:04:a9:f6:79:ca:8c:34:d0:
48:3e:21:e3:95:b2:fb:61:a0:49:c8:a4:2c:5c:b0:a3:ee:c5:
84:ff:f5:0c:ff:79:55:5d:11:6b:78:e3:b1:7f:2d:d3:c1:22:
3b:94:2e:76:22:0d:8c:8e:88:29:29:71:4f:4a:8a:8b:6d:63:
ba:ad:a2:1d:f3:ab:55:76:6d:68:a5:59:5b:9f:ce:61:7b:4d:
96:38:41:37:45:b6:64:38:d5:f3:58:3b:12:0b:3c:ed:9b:30:
5c:b5:35:aa:79:9c:2a:c2:67:64:89:ac:be:2f:03:cf:e2:af:
5f:6e:2a:ca:3f:a6:9c:8a:bd:cb:17:af:3e:53:2a:25:64:e7:
fb:65:46:38:dd:e6:2e:05:d7:e0:04:ed:5b:e7:58:ce:2e:30:
6c:4c:5d:e1:a0:5f:89:e6:3f:e3:e0:ed:46:5f:6d:39:62:0e:
42:88:07:1e:3e:5e:16:ea:44:cb:1f:03:9d:0d:f2:c1:48:04:
e1:99:7b:e3:80:8b:ae:f6:4f:1e:7e:f8:57:fb:96:77:6c:04:
6c:ce:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-fra.rpki-client.org