Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/rMfyRKyJ1sw-oIfALn2aKSMIXoY.roa
File: rMfyRKyJ1sw-oIfALn2aKSMIXoY.roa (raw, json)
Hash identifier: XKnqKRlrOXzgIg0jfkBHnRwwPHvjH3QIeohEfsXITSQ=
Subject key identifier: AC:C7:F2:44:AC:89:D6:CC:3E:A0:87:C0:2E:7D:9A:29:23:08:5E:86
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 09EBA078
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/rMfyRKyJ1sw-oIfALn2aKSMIXoY.roa
Signing time: Sun 17 Apr 2022 09:54:42 +0000
ROA not before: Sun 17 Apr 2022 09:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 178.20.28.0/22 maxlen: 24
88.218.47.0/24 maxlen: 24
88.218.46.0/24 maxlen: 25
88.218.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166436984 (0x9eba078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Apr 17 09:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acc7f244ac89d6cc3ea087c02e7d9a2923085e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:91:e1:36:72:01:4d:8d:c8:54:0d:df:3d:
33:98:12:7d:59:86:29:7e:b7:04:26:a7:02:ce:06:
03:dc:be:39:13:66:6d:76:aa:26:a1:3c:08:80:4b:
8f:ed:13:27:2b:d0:23:93:98:ba:39:72:ae:45:71:
10:c3:5c:c5:84:6a:14:b7:70:6c:c0:05:12:14:95:
63:df:cb:85:ef:97:a3:f9:81:fc:50:63:a4:c0:09:
be:db:91:6c:8d:cd:48:e3:0c:63:3c:9d:20:81:99:
74:52:d1:e7:c4:8e:bc:88:bf:d7:76:70:bb:59:45:
5d:fd:8f:1b:38:23:5b:37:d5:8b:d7:40:8f:de:ba:
b1:73:37:f8:7e:e7:1d:40:67:e5:8b:5a:38:ad:c3:
c3:02:36:5b:4e:ac:ad:a1:73:c2:43:54:5e:7d:40:
2f:f9:a2:6d:9f:af:c0:88:76:64:f8:f7:58:88:92:
e5:65:f7:8c:68:c9:98:8e:c5:01:c8:c8:14:20:c1:
be:e1:a2:ec:90:63:00:47:96:7f:ff:b8:ae:b4:7e:
83:95:7c:d6:9a:91:cd:d2:5d:ad:f4:6f:5e:5f:ce:
9b:96:8e:6b:15:db:33:cc:42:b4:45:a2:73:b7:65:
be:72:0b:06:3d:3b:50:a9:9a:37:0c:27:e5:43:f6:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:F2:44:AC:89:D6:CC:3E:A0:87:C0:2E:7D:9A:29:23:08:5E:86
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/rMfyRKyJ1sw-oIfALn2aKSMIXoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.45.0-88.218.47.255
178.20.28.0/22
Signature Algorithm: sha256WithRSAEncryption
53:4d:77:0c:5e:14:86:08:3b:98:fa:23:70:fa:22:82:4e:e2:
c3:00:37:a3:b7:19:90:09:38:5f:de:53:3e:fa:c7:89:c4:06:
e6:6f:b6:11:b8:cc:54:98:0d:80:30:98:eb:75:2a:6f:01:e4:
a7:0e:7d:38:76:3a:c3:99:2b:6f:87:28:79:bb:ca:92:02:f5:
05:89:8f:8e:65:f9:03:59:ff:10:d6:11:e1:3b:b9:c8:70:71:
89:cb:b8:d6:42:09:21:93:71:75:33:bc:2a:14:0f:bb:77:7f:
4a:4b:56:b2:69:3a:24:57:70:6f:be:c2:4e:c2:bc:8e:41:c3:
33:16:4a:50:5d:f4:b1:62:06:ae:26:03:08:d8:46:f3:23:d6:
79:d0:4b:3f:92:f9:54:ae:d3:5d:6d:da:c8:16:01:17:38:0d:
15:95:35:97:4d:f1:81:45:b7:c4:65:c0:c4:57:93:11:9c:53:
67:0b:44:ea:f4:dd:a9:37:ed:eb:1a:e7:c9:bb:d5:cd:38:f8:
99:b2:ff:d6:8c:43:27:19:04:24:8a:22:16:de:ff:ee:3d:a9:
01:82:2c:1f:f7:ea:5a:96:b5:15:a7:98:61:b4:72:fd:05:ef:
72:83:4a:9a:9a:74:8d:76:42:d2:dc:9a:c7:b2:20:d7:99:d2:
3d:2e:f8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org