Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/S3JoQaBMBr0ndaROBplG69gZK4I.roa
File: S3JoQaBMBr0ndaROBplG69gZK4I.roa (raw, json)
Hash identifier: XyioIK0PszcmyIpfTQvDTmk2C7Ih4JQ0VkV/b1oxid4=
Subject key identifier: 4B:72:68:41:A0:4C:06:BD:27:75:A4:4E:06:99:46:EB:D8:19:2B:82
Certificate issuer: /CN=2e5d76a1b3b05de4248feb1cb56f0f1b5851bbba
Certificate serial: 0187C3024FCA5592093941F90008207F1103
Authority key identifier: 2E:5D:76:A1:B3:B0:5D:E4:24:8F:EB:1C:B5:6F:0F:1B:58:51:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ll12obOwXeQkj-sctW8PG1hRu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/S3JoQaBMBr0ndaROBplG69gZK4I.roa
Signing time: Thu 27 Apr 2023 13:58:41 +0000
ROA not before: Thu 27 Apr 2023 13:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12337
IP address blocks: 209.16.144.0/24 maxlen: 24
209.16.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:02:4f:ca:55:92:09:39:41:f9:00:08:20:7f:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5d76a1b3b05de4248feb1cb56f0f1b5851bbba
Validity
Not Before: Apr 27 13:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b726841a04c06bd2775a44e069946ebd8192b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:5f:e7:dd:d5:1e:5d:5b:70:4e:87:b0:77:
26:bf:48:17:1c:d8:72:70:26:ac:45:bd:79:64:c5:
bb:73:d0:66:e4:00:a8:f2:48:b5:3d:79:ee:58:b6:
ee:a8:2e:e9:10:b3:4f:f9:aa:71:06:e6:2c:62:7e:
95:3f:12:20:6d:25:21:ef:d2:51:80:17:0d:b9:81:
92:1e:b9:61:7d:9c:5d:25:84:c9:a1:6d:69:2e:57:
cc:30:e3:48:b2:f8:1d:c5:20:01:ca:1d:75:64:64:
ff:04:3a:ab:ba:a0:d2:ba:13:36:26:e6:f6:d8:6b:
01:3c:7c:3b:5b:47:21:bb:31:c3:92:f2:17:70:ab:
18:bc:f4:59:a3:a7:7f:00:1e:50:d3:bf:4e:48:7d:
7f:d8:44:c4:7f:57:46:3d:06:f4:cc:62:bb:ef:48:
28:c0:bf:f0:2e:de:96:57:d9:3b:bd:86:4d:ac:d0:
f5:5d:22:66:4e:60:f3:a7:24:0b:83:a2:cf:90:0c:
df:63:1f:10:da:70:8a:e9:e0:21:5a:c2:7b:fe:4a:
6e:7b:43:dc:4e:66:3f:bb:63:90:64:dc:1f:91:15:
5c:f9:23:48:cb:7d:e1:20:37:80:b0:ee:eb:29:e4:
03:95:66:de:1e:ed:53:a3:fa:d5:3c:50:d7:64:f8:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:72:68:41:A0:4C:06:BD:27:75:A4:4E:06:99:46:EB:D8:19:2B:82
X509v3 Authority Key Identifier:
keyid:2E:5D:76:A1:B3:B0:5D:E4:24:8F:EB:1C:B5:6F:0F:1B:58:51:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ll12obOwXeQkj-sctW8PG1hRu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/S3JoQaBMBr0ndaROBplG69gZK4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/Ll12obOwXeQkj-sctW8PG1hRu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.16.144.0/23
Signature Algorithm: sha256WithRSAEncryption
92:e0:8a:2e:e3:35:bd:2c:26:d4:71:cb:73:ad:c6:62:ec:02:
5d:45:7b:77:b7:9e:64:12:e3:57:43:e9:9f:b4:fe:f8:fb:36:
da:aa:4d:49:f8:5c:e5:2c:83:4c:13:5d:c9:c3:f6:5e:dc:a4:
f6:b5:2c:72:6e:c1:31:7d:2e:c4:4b:74:a0:86:e6:e0:5c:dc:
22:04:31:4a:b9:96:6b:cf:8c:e1:9f:fb:29:b5:87:89:99:12:
9e:28:fe:11:c5:9d:b0:9d:22:6b:23:81:75:2b:17:0a:20:25:
a0:9a:73:0f:e5:f2:47:ba:41:53:f8:34:2a:20:f2:92:91:a7:
80:28:28:e1:0f:dc:8d:e1:4e:90:f8:74:c4:68:28:5e:ea:74:
2a:73:b0:75:d8:27:60:c4:ec:91:cf:f6:d1:15:e2:47:21:77:
fe:07:e2:58:8f:81:f9:3d:0a:d9:cc:c8:7a:e5:51:f2:05:11:
e5:7b:f4:61:ac:f7:c3:56:cf:9a:b7:83:cd:ad:58:98:d2:b6:
d0:34:02:53:c2:7e:18:e3:5a:32:69:d0:b2:b1:c9:56:5c:74:
cf:3a:02:0a:6c:6c:5f:d2:be:8f:f5:e9:3d:ab:03:03:ab:85:
26:22:37:be:ac:4d:52:b0:5a:0c:1e:dd:8e:f5:d4:77:6a:90:
1c:96:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 15:49:42 2023 by rpki-client on console-fra.rpki-client.org