Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/1jxDTrKll9Svsp6uFg39qGoI6yc.roa
File: 1jxDTrKll9Svsp6uFg39qGoI6yc.roa (raw, json)
Hash identifier: AbV3k5S2pYc932I7xPToOT2xDA/Jlsde/akc8xxUi7g=
Subject key identifier: D6:3C:43:4E:B2:A5:97:D4:AF:B2:9E:AE:16:0D:FD:A8:6A:08:EB:27
Certificate issuer: /CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Certificate serial: 018820867844665897B7CF2258064AFBA670
Authority key identifier: C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/1jxDTrKll9Svsp6uFg39qGoI6yc.roa
Signing time: Mon 15 May 2023 17:47:43 +0000
ROA not before: Mon 15 May 2023 17:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 188.244.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:78:44:66:58:97:b7:cf:22:58:06:4a:fb:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Validity
Not Before: May 15 17:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d63c434eb2a597d4afb29eae160dfda86a08eb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d9:65:7b:2f:7f:53:89:96:32:8e:fa:37:34:
f5:c5:74:fc:8f:69:0f:c3:18:c8:39:33:92:0e:90:
b8:1d:0b:2a:8b:6b:65:69:a0:21:80:c5:97:1b:66:
f5:b9:39:08:de:4e:bb:4b:88:7e:40:96:19:1f:6e:
a8:eb:40:af:fd:c7:71:d1:e0:a1:49:b8:f9:08:78:
74:97:d1:fc:25:2d:8b:a1:2a:bf:4a:9d:78:3a:09:
97:10:d5:01:83:e1:a9:e7:d7:31:db:d0:b7:d1:03:
61:84:ae:10:22:a4:df:6f:53:2a:d0:c0:7b:cc:1b:
d8:23:e3:25:af:82:88:5b:2c:d4:aa:63:7c:23:27:
92:61:58:df:34:54:54:cd:84:ab:12:b1:2f:21:22:
69:7d:53:fd:06:71:2f:c0:06:a3:0d:2c:e4:fe:f7:
2c:15:4b:dd:d4:36:75:60:50:66:90:8d:a7:71:b4:
f6:c1:5a:10:bb:04:26:72:ba:95:d4:cb:b4:c1:e7:
11:ed:f7:e2:c8:19:d6:0b:d3:61:f9:ba:4a:8d:b5:
61:71:7b:5a:43:96:42:5b:87:54:80:2d:34:b8:86:
86:51:02:2f:5e:31:f8:f8:7a:58:5c:2b:de:63:3d:
2f:2a:49:26:13:25:b5:df:82:52:c1:5d:c4:42:65:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:43:4E:B2:A5:97:D4:AF:B2:9E:AE:16:0D:FD:A8:6A:08:EB:27
X509v3 Authority Key Identifier:
keyid:C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/1jxDTrKll9Svsp6uFg39qGoI6yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.125.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b3:c8:3f:44:2f:d4:62:f0:e4:7a:20:d0:8c:bd:4c:77:81:
da:db:ac:54:21:84:16:ab:3e:f4:b9:55:98:dd:b0:dc:31:cb:
3a:73:79:17:29:e4:08:bc:c3:5d:96:e1:e3:ba:11:fc:28:eb:
3f:a8:47:62:b5:91:5e:e0:43:b4:40:2b:0d:66:73:dc:8a:7c:
2e:a5:93:d5:5d:fe:0d:a4:a4:bf:a6:b2:6e:69:71:fd:7b:2e:
d4:16:7d:36:a4:c6:4c:71:8c:04:ca:13:4d:5a:bb:c8:6f:52:
ce:16:a1:ad:5c:d7:8b:1f:22:32:98:2d:70:0e:e7:6d:d1:08:
9a:5c:8f:0d:72:6b:bb:68:ed:af:d6:c0:ea:69:0b:a1:ba:55:
db:88:c8:03:66:03:97:3a:97:ea:8e:00:e7:50:24:dd:27:48:
97:77:52:1a:33:9d:65:8d:bc:a2:c0:19:a9:14:e7:53:33:3b:
3a:ed:77:1d:f5:bc:8f:08:3c:64:11:a1:d5:25:bb:03:00:74:
77:ef:5a:03:01:b8:8d:bd:18:fe:59:e8:2c:83:90:79:72:3b:
9e:17:69:b5:7d:8a:79:46:55:6e:15:87:32:f7:1f:29:b2:ef:
8a:05:97:eb:a4:59:73:29:95:23:f7:96:ee:42:80:6e:2f:5e:
3b:c8:03:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnhEZliXt88iWAZK+6ZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MzMwMGYxY2Y1MWUyM2Y3ZDhlNGRhOTI5ZjM5NmQ2YTRl
OTBmZjgwHhcNMjMwNTE1MTc0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjNjNDM0ZWIyYTU5N2Q0YWZiMjllYWUxNjBkZmRhODZhMDhlYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9lley9/U4mWMo76NzT1xXT8j2kP
wxjIOTOSDpC4HQsqi2tlaaAhgMWXG2b1uTkI3k67S4h+QJYZH26o60Cv/cdx0eCh
Sbj5CHh0l9H8JS2LoSq/Sp14OgmXENUBg+Gp59cx29C30QNhhK4QIqTfb1Mq0MB7
zBvYI+Mlr4KIWyzUqmN8IyeSYVjfNFRUzYSrErEvISJpfVP9BnEvwAajDSzk/vcs
FUvd1DZ1YFBmkI2ncbT2wVoQuwQmcrqV1Mu0wecR7ffiyBnWC9Nh+bpKjbVhcXta
Q5ZCW4dUgC00uIaGUQIvXjH4+HpYXCveYz0vKkkmEyW134JSwV3EQmXOAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNY8Q06ypZfUr7KerhYN/ahqCOsnMB8GA1UdIwQY
MBaAFMYzAPHPUeI/fY5NqSnzltak6Q/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGpNQThjOVI0ajk5amsycEtmT1cxcVRwRF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hM2I1YTAtODlkYS00ZmY4LWIwYzgt
YmMyYWIyODQyNDgxLzEvMWp4RFRyS2xsOVN2c3A2dUZnMzlxR29JNnljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hM2I1YTAtODlkYS00ZmY4LWIwYzgtYmMyYWIyODQyNDgx
LzEveGpNQThjOVI0ajk5amsycEtmT1cxcVRwRF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPR9MA0G
CSqGSIb3DQEBCwUAA4IBAQCUs8g/RC/UYvDkeiDQjL1Md4Ha26xUIYQWqz70uVWY
3bDcMcs6c3kXKeQIvMNdluHjuhH8KOs/qEditZFe4EO0QCsNZnPcinwupZPVXf4N
pKS/prJuaXH9ey7UFn02pMZMcYwEyhNNWrvIb1LOFqGtXNeLHyIymC1wDudt0Qia
XI8Ncmu7aO2v1sDqaQuhulXbiMgDZgOXOpfqjgDnUCTdJ0iXd1IaM51ljbyiwBmp
FOdTMzs67Xcd9byPCDxkEaHVJbsDAHR371oDAbiNvRj+Wegsg5B5cjueF2m1fYp5
RlVuFYcy9x8psu+KBZfrpFlzKZUj95buQoBuL147yAPQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org