Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/RIGIrs_ivCKKIYiMm6l5i1UTbxE.roa
File: RIGIrs_ivCKKIYiMm6l5i1UTbxE.roa (raw, json)
Hash identifier: oqOgaocbnfKouIutevfgso80kIWt1e92TSSskuS49wE=
Subject key identifier: 44:81:88:AE:CF:E2:BC:22:8A:21:88:8C:9B:A9:79:8B:55:13:6F:11
Certificate issuer: /CN=de6ec345b7f36ecec256e8c4757e50de3fede7d1
Certificate serial: 01856F9DCD61C49E6F4017D2F2671602A48F
Authority key identifier: DE:6E:C3:45:B7:F3:6E:CE:C2:56:E8:C4:75:7E:50:DE:3F:ED:E7:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7DRbfzbs7CVujEdX5Q3j_t59E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/RIGIrs_ivCKKIYiMm6l5i1UTbxE.roa
Signing time: Sun 01 Jan 2023 23:14:50 +0000
ROA not before: Sun 01 Jan 2023 23:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5578
IP address blocks: 92.60.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:cd:61:c4:9e:6f:40:17:d2:f2:67:16:02:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ec345b7f36ecec256e8c4757e50de3fede7d1
Validity
Not Before: Jan 1 23:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=448188aecfe2bc228a21888c9ba9798b55136f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:ba:30:66:57:9c:e1:f9:8a:5b:77:b4:c8:
ab:e2:1b:37:af:19:ea:45:62:53:16:14:a0:06:42:
ea:e7:ac:08:a1:47:8b:24:ec:ac:1d:1c:f4:d2:aa:
e8:6c:27:5e:ec:b1:e9:b5:42:e5:45:61:41:80:35:
ae:c2:e6:59:63:8c:2c:0e:04:46:db:a2:c5:a1:65:
01:5b:4a:00:46:7b:fe:0f:a9:c7:83:f3:42:cb:f9:
85:d1:d9:13:ed:5c:cb:cb:0d:62:b8:f4:8b:a8:2f:
64:67:e9:5f:37:bc:fe:9b:9a:d7:d1:04:59:c9:b2:
6d:d1:e2:2d:b7:ae:0d:df:36:6d:bd:31:6a:f5:0a:
12:a1:d8:ea:d1:42:b8:90:6d:ae:a2:63:c6:d6:61:
0b:c1:20:39:f7:a5:44:9b:74:6b:22:09:8c:e3:08:
11:75:1d:ca:fa:15:c6:dc:9b:bd:c2:39:79:6c:e3:
61:62:27:ee:25:b5:ca:a4:0d:95:fa:b6:1f:9b:48:
29:0f:58:51:ee:5d:ef:7e:68:d9:f5:ba:73:7a:b9:
e8:11:95:68:29:c9:f7:b9:fe:64:c4:fe:db:a5:b3:
ad:e8:f0:b1:b9:75:2d:d8:39:c0:16:08:6b:91:6d:
fa:72:f3:8e:af:82:61:56:46:12:0b:32:1c:5a:b2:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:88:AE:CF:E2:BC:22:8A:21:88:8C:9B:A9:79:8B:55:13:6F:11
X509v3 Authority Key Identifier:
keyid:DE:6E:C3:45:B7:F3:6E:CE:C2:56:E8:C4:75:7E:50:DE:3F:ED:E7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7DRbfzbs7CVujEdX5Q3j_t59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/RIGIrs_ivCKKIYiMm6l5i1UTbxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/3m7DRbfzbs7CVujEdX5Q3j_t59E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
42:bb:c6:15:bf:05:4f:53:09:a2:1c:bd:6d:ba:db:70:ac:11:
06:67:85:ba:fc:f2:6a:cb:88:e7:48:6d:37:84:78:82:0b:f2:
89:de:81:16:e5:d8:40:36:36:cc:47:6e:86:fc:2c:13:ee:6e:
94:ba:ad:3c:bd:f1:5e:db:ae:45:b4:31:54:ed:aa:52:0b:b5:
44:7b:52:4f:3f:9f:4b:a7:c4:32:18:07:f5:98:44:44:20:c0:
0c:1c:13:3f:d2:79:41:b0:0e:50:6e:a8:ae:1c:7a:39:71:87:
9e:af:58:6c:59:d2:62:27:72:54:5f:2d:c9:cd:b2:6b:34:5b:
2c:7c:0b:8c:b0:5b:4f:b2:74:c7:0d:4a:81:9b:ae:5c:61:dd:
bb:cb:d8:cf:76:68:25:54:97:62:1f:3b:4d:bb:c5:99:ff:36:
d5:24:2d:d1:11:2c:33:3c:0b:70:f3:bc:58:73:40:38:b3:88:
94:4f:cf:58:47:a1:8e:8d:76:c2:24:f6:a4:ef:9f:50:e7:89:
3a:da:49:59:c7:ab:3d:77:2d:8b:65:5e:0d:34:b0:78:da:09:
6f:aa:d6:76:2b:75:35:12:74:15:3a:9c:de:ae:e5:e0:f8:52:
00:b0:cb:fb:18:af:4f:c3:a2:b2:e3:bf:a4:e6:2b:f8:d3:9c:
a7:a8:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:44 2023 by rpki-client on console-fra.rpki-client.org