Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/jX1T7mfZ4kTbS8RxYIIWLwkk3Cs.roa
File: jX1T7mfZ4kTbS8RxYIIWLwkk3Cs.roa (raw, json)
Hash identifier: rKuG3NGZUZntgE+4HgnAGC7fmWRvdX9i5j1FVoftF6U=
Subject key identifier: 8D:7D:53:EE:67:D9:E2:44:DB:4B:C4:71:60:82:16:2F:09:24:DC:2B
Certificate issuer: /CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Certificate serial: 01868C97F75842B860B0E7E080C211FF7134
Authority key identifier: C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/jX1T7mfZ4kTbS8RxYIIWLwkk3Cs.roa
Signing time: Sun 26 Feb 2023 07:20:14 +0000
ROA not before: Sun 26 Feb 2023 07:20:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 188.244.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:97:f7:58:42:b8:60:b0:e7:e0:80:c2:11:ff:71:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Validity
Not Before: Feb 26 07:20:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d7d53ee67d9e244db4bc4716082162f0924dc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:02:58:4b:df:21:f5:dc:01:e1:4e:ec:99:
88:ff:ab:46:e0:73:91:bc:c9:f8:8f:47:43:37:4c:
2e:fe:7c:fd:a3:df:6d:59:38:b6:d0:08:de:93:5c:
e3:21:60:13:91:b8:f9:e6:92:5a:9e:2a:03:d2:be:
d3:65:04:a0:b6:65:00:18:9d:1e:45:a1:b2:61:6d:
6a:44:c0:34:56:3f:6a:24:4a:a7:26:b0:d7:1b:cf:
dc:40:bb:39:d6:71:f5:bf:9a:79:ef:06:96:cc:0f:
bb:8e:69:48:90:b4:2e:7a:b5:5d:73:6a:a7:46:eb:
49:e8:d3:d6:0c:a9:82:29:d3:1e:97:d6:29:ed:cf:
e4:c1:3e:59:5a:de:eb:24:e1:4d:de:8b:f6:5a:cc:
0e:8b:6c:ee:97:ff:35:4d:d2:0c:83:db:00:42:83:
02:77:85:8e:a2:7f:29:b5:95:ba:13:ad:a1:fe:69:
56:4c:3e:a5:15:72:00:dd:84:fc:43:f8:79:3f:06:
d7:0f:aa:71:2d:16:58:53:9a:6b:39:b1:3e:52:93:
0a:b3:c8:c7:23:49:9a:32:f6:f3:e5:8b:1c:b2:d8:
39:41:76:83:2a:6f:9f:4a:1e:71:73:2a:ad:2c:bd:
42:dd:62:02:ad:83:93:f6:a6:d0:30:b4:83:e3:70:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:53:EE:67:D9:E2:44:DB:4B:C4:71:60:82:16:2F:09:24:DC:2B
X509v3 Authority Key Identifier:
keyid:C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/jX1T7mfZ4kTbS8RxYIIWLwkk3Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.125.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:b9:e6:de:ea:53:58:14:e5:5b:a2:6a:bf:73:1a:53:10:0d:
fa:f6:f3:0f:ea:c5:7f:b1:49:e9:6c:d3:a4:da:ed:38:bc:5e:
be:f6:71:f1:2f:4e:c9:b9:9e:fd:56:60:7f:0a:5e:b6:31:5b:
36:99:18:f2:69:f6:8c:15:19:cc:7c:32:8c:8f:28:f1:ae:cd:
11:89:7b:3a:8b:80:e5:46:25:bb:60:ca:31:7c:a7:4e:2a:68:
1a:57:b7:ff:54:70:0a:86:de:e0:e1:ac:a4:1c:cf:d6:8f:36:
f3:f7:56:3a:ec:4f:5b:1b:f1:20:08:34:b2:f6:90:a4:8b:18:
a0:47:1b:1f:23:e5:77:7d:da:5c:9b:85:33:08:05:63:5d:42:
b6:38:1a:0c:03:75:83:01:c2:69:0b:55:b9:33:1d:aa:2f:6f:
01:1a:87:4c:85:53:b4:7f:1e:40:f0:e4:b1:61:4f:c4:70:fe:
92:22:de:cc:2b:f0:63:a6:86:3e:09:dc:82:81:93:f5:ea:ef:
24:17:61:14:64:e2:ef:36:f6:25:0b:bb:15:0e:ba:eb:5b:81:
dd:4a:e4:40:a9:fe:5f:7d:47:14:89:30:b5:a5:2a:66:47:4f:
35:b3:e9:93:23:44:2b:89:0f:8f:33:38:ae:be:64:90:25:46:
a5:81:93:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaMl/dYQrhgsOfggMIR/3E0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MzMwMGYxY2Y1MWUyM2Y3ZDhlNGRhOTI5ZjM5NmQ2YTRl
OTBmZjgwHhcNMjMwMjI2MDcyMDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDdkNTNlZTY3ZDllMjQ0ZGI0YmM0NzE2MDgyMTYyZjA5MjRkYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqYCWEvfIfXcAeFO7JmI/6tG4HOR
vMn4j0dDN0wu/nz9o99tWTi20Ajek1zjIWATkbj55pJanioD0r7TZQSgtmUAGJ0e
RaGyYW1qRMA0Vj9qJEqnJrDXG8/cQLs51nH1v5p57waWzA+7jmlIkLQuerVdc2qn
RutJ6NPWDKmCKdMel9Yp7c/kwT5ZWt7rJOFN3ov2WswOi2zul/81TdIMg9sAQoMC
d4WOon8ptZW6E62h/mlWTD6lFXIA3YT8Q/h5PwbXD6pxLRZYU5prObE+UpMKs8jH
I0maMvbz5Yscstg5QXaDKm+fSh5xcyqtLL1C3WICrYOT9qbQMLSD43CEswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI19U+5n2eJE20vEcWCCFi8JJNwrMB8GA1UdIwQY
MBaAFMYzAPHPUeI/fY5NqSnzltak6Q/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGpNQThjOVI0ajk5amsycEtmT1cxcVRwRF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hM2I1YTAtODlkYS00ZmY4LWIwYzgt
YmMyYWIyODQyNDgxLzEvalgxVDdtZlo0a1RiUzhSeFlJSVdMd2trM0NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hM2I1YTAtODlkYS00ZmY4LWIwYzgtYmMyYWIyODQyNDgx
LzEveGpNQThjOVI0ajk5amsycEtmT1cxcVRwRF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPR9MA0G
CSqGSIb3DQEBCwUAA4IBAQDHuebe6lNYFOVbomq/cxpTEA369vMP6sV/sUnpbNOk
2u04vF6+9nHxL07JuZ79VmB/Cl62MVs2mRjyafaMFRnMfDKMjyjxrs0RiXs6i4Dl
RiW7YMoxfKdOKmgaV7f/VHAKht7g4aykHM/Wjzbz91Y67E9bG/EgCDSy9pCkixig
RxsfI+V3fdpcm4UzCAVjXUK2OBoMA3WDAcJpC1W5Mx2qL28BGodMhVO0fx5A8OSx
YU/EcP6SIt7MK/BjpoY+CdyCgZP16u8kF2EUZOLvNvYlC7sVDrrrW4HdSuRAqf5f
fUcUiTC1pSpmR081s+mTI0QriQ+PMziuvmSQJUalgZO8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org