Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/9I9np5IUoTxrIeWKHAewOK7glQA.roa
File: 9I9np5IUoTxrIeWKHAewOK7glQA.roa (raw, json)
Hash identifier: 2HVRGTae4P9cpUbMtnTikJfNX32sd+G305ORZBDL9Z0=
Subject key identifier: F4:8F:67:A7:92:14:A1:3C:6B:21:E5:8A:1C:07:B0:38:AE:E0:95:00
Certificate issuer: /CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Certificate serial: 0185715532261330E9AD316CBD47F8A645CD
Authority key identifier: C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/9I9np5IUoTxrIeWKHAewOK7glQA.roa
Signing time: Mon 02 Jan 2023 07:14:46 +0000
ROA not before: Mon 02 Jan 2023 07:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 188.244.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:32:26:13:30:e9:ad:31:6c:bd:47:f8:a6:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Validity
Not Before: Jan 2 07:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f48f67a79214a13c6b21e58a1c07b038aee09500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:ad:d2:09:d9:54:6c:d9:ff:11:8b:83:51:
9b:34:a6:1f:43:88:53:7f:6f:c0:95:08:7b:a7:05:
47:84:ec:e5:e1:af:7d:48:e4:71:9e:0d:3c:23:f9:
57:be:c0:b6:09:83:69:53:ef:1a:1e:db:db:80:7e:
84:79:aa:40:d5:5b:8b:c5:f0:3c:55:f6:fa:0c:ff:
fe:15:91:4a:a4:d1:63:92:79:29:73:a0:94:40:ab:
f0:ae:c1:f7:da:f1:8b:16:a9:b1:f7:27:3d:f7:40:
d2:84:c5:a0:d4:47:3c:b6:75:bf:29:b6:bc:2a:20:
d1:d8:b1:2c:8c:34:21:21:74:89:11:a1:50:7c:89:
8a:5e:9a:b3:57:2c:4a:6a:75:40:3a:07:08:33:7b:
02:28:50:9a:bf:06:f2:a7:90:ee:2d:84:a7:b5:b6:
7f:9d:14:aa:c8:56:5f:be:3e:22:98:3f:66:9a:43:
b7:61:c8:03:1c:dc:da:10:04:0f:89:a0:23:61:ef:
fe:38:03:d7:46:ed:75:2b:5d:7f:06:bf:79:b6:b4:
d4:f9:75:ee:3e:ce:10:d2:27:e4:75:bc:c9:09:2f:
04:42:df:46:58:91:1f:91:e5:19:4e:f2:68:ed:f4:
2c:7e:92:55:89:28:62:09:25:7b:cb:4d:e6:b8:6b:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:67:A7:92:14:A1:3C:6B:21:E5:8A:1C:07:B0:38:AE:E0:95:00
X509v3 Authority Key Identifier:
keyid:C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/9I9np5IUoTxrIeWKHAewOK7glQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.125.0/24
Signature Algorithm: sha256WithRSAEncryption
11:61:6d:47:3d:12:cd:12:9e:04:ae:0a:6c:ea:74:2e:8f:f3:
e2:52:f9:67:60:34:ce:f6:b4:42:5b:d8:9d:ce:57:95:76:6c:
e3:3a:f5:8b:ec:f6:d4:d9:9d:4b:03:0a:3d:f8:f9:9b:60:37:
43:bb:14:e9:6a:0f:38:83:bb:c4:08:b3:8d:49:a2:74:ed:92:
fe:59:e1:04:27:3d:6a:32:ba:b1:08:5c:ce:28:e1:ec:52:da:
d0:7d:64:06:87:ba:03:dd:27:4a:45:55:2d:9e:04:f3:50:65:
b1:4d:36:4c:ca:e9:77:2c:47:60:db:15:8d:96:88:44:ce:1f:
69:e0:86:a4:20:f1:d6:12:d1:99:9e:ce:18:ea:fd:a8:54:15:
72:f5:60:63:27:4b:9c:ea:17:fe:c7:78:01:6f:ad:99:90:e5:
6a:f7:59:40:f7:19:a3:f0:cc:68:65:3f:1f:de:02:44:50:b9:
83:23:cc:9e:ff:f0:67:ed:e5:41:90:44:01:fb:ba:32:ce:74:
6f:8b:80:71:65:d2:a8:9c:de:d9:ac:56:b5:5b:95:5c:1e:3d:
cd:e6:1e:29:6c:7e:81:6b:0d:97:a4:a7:94:b2:81:bc:97:f7:
f6:5b:10:53:91:4d:5e:3a:25:97:c4:51:3b:2f:61:50:68:0f:
fa:85:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org