Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/TmfXwvWF4_R0YlbOpvq6kgDGhw0.roa
File: TmfXwvWF4_R0YlbOpvq6kgDGhw0.roa (raw, json)
Hash identifier: xV2nkP/XzFa3ZlaSaZkKkK0ZOGjITEnqmlr89kEd/Fs=
Subject key identifier: 4E:67:D7:C2:F5:85:E3:F4:74:62:56:CE:A6:FA:BA:92:00:C6:87:0D
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0185708CA7DBF91709580950BE6509709404
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/TmfXwvWF4_R0YlbOpvq6kgDGhw0.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49453
IP address blocks: 178.20.31.0/24 maxlen: 25
178.20.29.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a7:db:f9:17:09:58:09:50:be:65:09:70:94:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e67d7c2f585e3f4746256cea6faba9200c6870d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:c4:51:d4:9d:b2:30:ef:b3:3f:70:42:2f:
44:5e:c9:e7:60:32:1f:1b:ee:45:87:c3:87:28:e2:
43:15:a5:f4:6a:2b:dc:e7:ab:5a:1d:d7:98:be:97:
1b:0c:8e:eb:be:55:71:5d:e4:4c:fd:49:22:00:94:
56:52:77:5b:07:d5:91:50:e9:6c:20:83:d5:8b:1d:
1b:8f:12:00:6a:7b:dc:e9:89:26:de:17:f0:4a:96:
90:f1:07:58:c9:6f:3e:5d:e6:46:99:5e:02:09:20:
0d:3c:94:e7:7e:ad:5b:12:14:b4:2e:14:b1:b4:73:
df:ce:55:34:38:2a:18:c5:5e:7b:08:43:35:f4:3f:
bd:3f:6c:b2:2c:c2:2b:0f:8e:25:b0:96:33:66:61:
48:09:94:39:5f:4a:bf:0b:3a:9b:04:7f:59:fb:ff:
1d:16:94:4f:51:15:0f:c8:09:51:55:53:90:5a:e8:
a9:9f:70:40:7f:36:65:5b:cb:1b:e2:f5:d1:5c:9b:
e6:65:9b:c5:d2:50:a0:ba:18:6e:11:99:a3:10:91:
3a:31:14:a4:8f:e6:ab:20:3d:da:e7:54:b1:0c:4b:
4b:83:ee:47:d8:9b:72:6e:82:56:f6:5b:59:6c:bf:
ae:aa:18:a3:4d:f8:ea:2f:4b:4b:55:ab:2f:65:3d:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:D7:C2:F5:85:E3:F4:74:62:56:CE:A6:FA:BA:92:00:C6:87:0D
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/TmfXwvWF4_R0YlbOpvq6kgDGhw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.29.0/24
178.20.31.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1f:9b:32:f0:0b:72:cc:41:c5:09:37:7f:de:86:6d:3a:a7:
bd:5b:22:99:85:b2:b4:a8:21:b5:1b:e1:57:e3:f5:03:54:57:
e7:bd:09:7b:a8:ae:ac:18:3e:3d:0c:1c:67:ab:1a:1e:5f:b9:
d9:49:3b:46:bd:30:cf:df:d5:7a:a5:54:e2:33:38:b0:ec:93:
96:c5:01:54:b7:58:fb:51:a8:34:1b:a1:66:5d:44:3c:9e:a4:
b2:ca:d7:9a:c5:48:ee:0e:51:9e:6f:81:e2:2f:47:98:5e:5f:
0f:78:c5:dc:a2:99:c8:f0:f8:b6:72:ee:a4:c8:60:77:3f:65:
f5:ab:36:0a:97:1b:66:e9:d1:70:8d:1e:b9:84:bd:ff:d2:1f:
68:fd:b3:1f:f8:32:8c:09:74:ba:f8:8e:71:be:69:03:c2:5f:
f8:56:8c:d2:cd:42:a0:e5:e5:31:28:29:da:ee:c8:46:5c:e8:
83:77:26:cd:14:90:44:1d:17:9f:49:11:dd:36:50:0f:d5:54:
00:49:92:78:a5:f3:ad:15:9f:11:8a:42:9f:1c:63:80:38:19:
5f:e2:1b:b4:66:9e:cd:68:bf:03:f4:6d:10:86:cf:d7:9b:b8:
e6:5e:33:ab:90:a6:dc:f6:5a:8f:d9:42:97:82:ab:95:a8:0e:
4e:bc:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org