Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/moleMsJn201vNUE62jRzwbQDWyI.roa
File: moleMsJn201vNUE62jRzwbQDWyI.roa (raw, json)
Hash identifier: iR63mGz+Udwq87XflHUzVgxJIgnzxgbb+fFCY3rE6ss=
Subject key identifier: 9A:89:5E:32:C2:67:DB:4D:6F:35:41:3A:DA:34:73:C1:B4:03:5B:22
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0182CB9ACB4AAF20D219065D37247F30401F
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/moleMsJn201vNUE62jRzwbQDWyI.roa
Signing time: Tue 23 Aug 2022 16:48:15 +0000
ROA not before: Tue 23 Aug 2022 16:48:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 178.20.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:9a:cb:4a:af:20:d2:19:06:5d:37:24:7f:30:40:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Aug 23 16:48:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a895e32c267db4d6f35413ada3473c1b4035b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:54:8c:28:12:ea:96:44:a1:d0:d0:dc:48:
8e:2d:c7:f2:bb:47:18:b5:43:da:31:2c:72:49:75:
9d:77:35:f2:af:8f:5d:9c:7c:d6:24:be:88:91:a4:
2d:75:fd:8a:79:a7:54:d7:4f:c7:e7:50:7b:4d:1f:
86:e3:99:26:3c:c1:63:41:10:e2:e7:7d:50:0c:2d:
de:1a:8c:32:35:b0:ff:c9:8b:1b:c5:4d:1d:68:f6:
1e:5b:58:d2:eb:cc:c0:a9:47:63:42:e9:99:d2:c9:
a5:3f:dd:46:a3:93:53:85:6f:7c:e1:a0:31:49:95:
b1:2c:a9:b8:70:c8:1e:4b:1a:91:0c:c4:3e:0c:fe:
ee:f4:d6:53:fb:6e:fd:97:ae:c4:87:16:bc:76:fc:
2b:94:ec:76:12:a4:3c:c8:e9:56:9f:fb:25:f2:46:
98:70:88:11:bd:f1:b5:33:c2:cd:5a:74:83:bf:d5:
26:e2:85:e4:b1:04:a0:4d:1b:5b:47:69:4d:cd:30:
1a:07:a4:3f:b8:d7:85:72:d1:6c:c9:b0:a1:0e:6f:
c6:07:85:0b:2d:4c:e6:e4:94:98:2f:d5:25:f0:93:
57:79:00:59:74:fe:7d:53:4a:c8:63:83:be:cc:e0:
8e:9a:67:67:68:66:d2:df:f6:d5:f2:83:c1:c5:4d:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:89:5E:32:C2:67:DB:4D:6F:35:41:3A:DA:34:73:C1:B4:03:5B:22
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/moleMsJn201vNUE62jRzwbQDWyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
69:94:15:4c:f5:90:b8:f7:aa:af:90:44:5b:9b:1e:84:e2:09:
c5:01:68:0f:18:f5:f9:53:37:11:45:40:b7:f5:62:0c:27:13:
0e:eb:51:cd:42:ee:d9:71:db:a0:7f:fe:6a:19:9b:92:e1:7c:
ce:20:1b:e5:e2:60:35:22:9d:a2:e8:18:a3:d6:44:70:77:03:
7d:16:a3:e3:84:9c:cd:98:09:e2:5f:a3:d8:d3:7b:c7:3d:dd:
2d:1c:58:96:7d:4b:c5:3f:42:92:05:25:b9:56:c3:8b:cf:da:
95:85:1c:0a:49:2f:3e:07:fa:4a:c5:ed:32:53:85:66:1d:b8:
3c:c3:4c:de:c5:d6:b7:99:8f:32:6b:38:ef:cd:7c:c6:64:54:
5d:62:fc:8a:04:17:a7:a9:7f:9f:a5:c3:7a:73:8b:4c:74:69:
3e:c3:cb:9f:de:34:8e:a4:7f:3c:e1:6a:b3:13:7b:df:8b:79:
47:56:04:8f:8d:bd:1f:d1:a8:a6:15:ec:aa:f0:e2:05:41:e9:
9d:df:86:10:42:77:5d:79:4f:45:64:68:e0:7a:28:41:f1:3e:
b6:11:36:57:68:84:30:e2:16:8f:fd:ce:23:75:2c:da:73:20:
89:62:af:0c:03:d4:33:22:7f:33:d0:18:6c:b9:a4:68:9b:9c:
5e:43:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org