Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/uM95OhGt9QFACMp7wehXhBp-ZBA.roa
File: uM95OhGt9QFACMp7wehXhBp-ZBA.roa (raw, json)
Hash identifier: o8gV08iyi/svSStx7hHQNNpf2LjbWmxSa6QKAYX7T/E=
Subject key identifier: B8:CF:79:3A:11:AD:F5:01:40:08:CA:7B:C1:E8:57:84:1A:7E:64:10
Certificate issuer: /CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Certificate serial: 01877A9CB7172AB2A988056A5413CD9AC740
Authority key identifier: C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/uM95OhGt9QFACMp7wehXhBp-ZBA.roa
Signing time: Thu 13 Apr 2023 12:35:03 +0000
ROA not before: Thu 13 Apr 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.244.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:9c:b7:17:2a:b2:a9:88:05:6a:54:13:cd:9a:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Validity
Not Before: Apr 13 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8cf793a11adf5014008ca7bc1e857841a7e6410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:85:5b:38:8a:64:e3:42:e6:03:72:80:8b:
bb:18:30:46:b5:33:60:17:0c:d6:9d:c3:32:7e:df:
4f:fe:48:0a:64:e4:08:e8:f7:a3:8c:70:79:6b:08:
ed:9a:4f:a7:f7:f9:c8:d2:02:ac:d5:a0:6b:62:1d:
90:9d:97:2d:1b:7d:6a:cf:47:1a:4c:4b:4d:01:dc:
75:66:2f:de:60:52:8c:13:f3:2e:71:93:ef:67:65:
a4:de:7b:5e:d4:66:7a:cd:c0:6a:2a:36:46:5c:6e:
5a:b3:1f:e9:f5:5e:ae:77:2c:c3:ac:f3:73:f4:4d:
d5:75:6a:fa:4a:a8:90:02:16:e4:9b:1c:33:d6:ce:
a6:d1:aa:b5:cd:6b:ee:d8:eb:70:24:77:8f:c9:68:
ad:52:d8:97:dc:ef:68:7f:94:d2:eb:1f:19:24:0f:
ee:3b:42:93:ac:b0:b3:41:42:90:12:6b:b1:68:96:
b1:79:f4:eb:24:c6:9d:c1:bc:08:e2:4e:38:d5:13:
bb:b7:9f:ea:ec:d9:67:9a:21:ed:f3:ae:22:44:35:
b5:a4:ad:d8:b8:ab:10:4d:8a:76:d9:e2:6a:1d:29:
70:ee:df:aa:ac:c3:c5:d3:69:16:59:92:3c:3c:18:
03:ec:eb:d3:fc:0c:69:ab:55:c3:62:3d:6b:7f:f0:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:79:3A:11:AD:F5:01:40:08:CA:7B:C1:E8:57:84:1A:7E:64:10
X509v3 Authority Key Identifier:
keyid:C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/uM95OhGt9QFACMp7wehXhBp-ZBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b4:18:31:eb:c8:b0:c6:65:ca:36:a4:4a:78:2b:40:c5:72:
ee:29:98:a3:54:05:bf:e6:02:a8:20:73:40:0c:92:45:31:76:
a9:74:38:3c:54:c8:71:ac:2e:fc:42:ee:d3:bf:fd:b5:7c:55:
16:63:b4:4f:47:9a:0c:fb:bf:27:cf:e1:b5:d4:dc:e1:90:ce:
bd:69:b1:7e:2e:16:00:3b:27:53:d4:44:30:23:30:98:75:4a:
c6:98:11:f5:45:6d:0b:43:e3:7c:ad:af:78:9c:bd:49:79:e0:
e4:13:c7:54:5e:2d:10:76:61:a7:24:2d:a9:d3:fe:1c:ee:72:
03:b3:fa:37:2e:47:f4:3b:4d:67:08:d2:74:b0:60:78:1d:e5:
4d:ad:8c:93:3f:3f:3b:b9:55:7d:9c:01:90:5b:59:a7:b6:aa:
1a:bb:6a:9a:a3:47:c3:c6:80:47:59:14:3f:2b:4e:b8:99:db:
64:3b:fd:7b:67:20:81:86:40:a7:bd:1f:ae:85:24:e3:ca:dc:
67:19:12:38:89:24:0f:b1:49:21:97:33:df:6e:1b:2d:0e:b2:
a0:60:3a:01:2d:78:cd:29:65:71:57:f1:b2:c9:96:32:9a:40:
77:58:7d:81:61:cc:d0:c1:cd:b6:fa:e9:7f:f2:12:15:b4:cb:
c8:aa:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org