Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/6g3JUKfkMSgrRJnC62Pl5Af7WLg.roa
File: 6g3JUKfkMSgrRJnC62Pl5Af7WLg.roa (raw, json)
Hash identifier: FZ7TBY1QArmg+amcqEvUU1JLY6Gx/9wyPnYmWpt/cP8=
Subject key identifier: EA:0D:C9:50:A7:E4:31:28:2B:44:99:C2:EB:63:E5:E4:07:FB:58:B8
Certificate issuer: /CN=948b09d6772a1417f17f60468ab33b3bb112f229
Certificate serial: 01882086AFE6E07AD8FAB954F5A16563FA92
Authority key identifier: 94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/6g3JUKfkMSgrRJnC62Pl5Af7WLg.roa
Signing time: Mon 15 May 2023 17:47:57 +0000
ROA not before: Mon 15 May 2023 17:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 188.244.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:af:e6:e0:7a:d8:fa:b9:54:f5:a1:65:63:fa:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948b09d6772a1417f17f60468ab33b3bb112f229
Validity
Not Before: May 15 17:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea0dc950a7e431282b4499c2eb63e5e407fb58b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:58:07:5b:aa:15:34:d4:11:1e:6f:b3:fe:
a9:19:af:2b:46:ac:f3:2a:77:b0:67:21:c0:75:50:
15:ab:49:ee:54:4e:71:69:2a:f4:4d:b7:fd:58:d4:
fe:2a:ae:3b:af:4b:79:ad:6a:f7:04:01:ae:68:70:
96:41:42:c5:01:b9:dc:4b:fe:84:f9:2d:f9:4f:ab:
be:88:1e:a6:96:0d:52:20:ba:14:77:40:ab:79:5d:
1a:2d:47:29:28:ea:59:43:b6:ff:31:b5:e3:65:eb:
72:54:e7:84:56:fb:7e:6a:5d:0e:ec:06:55:b5:d0:
eb:2f:2a:8e:62:99:6e:c3:a8:85:03:79:f5:07:06:
50:19:56:ba:ca:55:96:f6:ff:25:3d:34:13:0f:c4:
17:1c:a8:ec:2b:34:f6:82:b9:55:77:6a:34:cb:06:
cf:60:61:cc:28:5a:bd:64:d8:ab:3d:8f:da:91:3e:
bf:e8:7c:82:41:53:db:65:3a:14:00:e8:b0:2f:8c:
2e:03:c7:43:a0:1d:05:56:14:8a:ba:76:09:d7:d7:
2f:4d:41:32:03:bf:01:8f:53:37:24:ce:a2:a4:76:
bd:ac:76:3e:1b:05:b7:ac:8a:29:de:44:3f:ad:fc:
49:42:99:7b:12:6d:db:a5:d8:68:84:cb:92:ae:c8:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:C9:50:A7:E4:31:28:2B:44:99:C2:EB:63:E5:E4:07:FB:58:B8
X509v3 Authority Key Identifier:
keyid:94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/6g3JUKfkMSgrRJnC62Pl5Af7WLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.127.0/24
Signature Algorithm: sha256WithRSAEncryption
54:43:07:68:a1:0b:92:07:24:08:c2:20:4d:73:10:f0:bd:fd:
6b:f9:e5:70:79:e8:83:bf:8c:f2:0a:c0:20:aa:ec:b1:ba:55:
1c:10:98:13:3b:6d:85:be:9d:fb:00:5a:1a:ad:13:14:2a:d8:
0b:72:9f:f9:b7:0f:e5:6b:f3:1a:20:75:29:e3:4e:95:9f:da:
57:ee:a3:a5:8d:ac:de:94:43:9b:5f:c8:c6:dd:5b:5e:00:86:
37:09:4b:f0:09:92:d4:36:c0:3a:cb:06:26:ad:c8:5d:93:d8:
64:ef:83:19:75:92:5a:97:3b:39:5b:4a:ac:64:91:8c:99:f6:
36:ca:08:5d:52:9d:e4:ba:5f:f1:71:e2:ce:34:c4:21:04:4a:
0a:6b:36:9f:50:3b:7c:7e:17:2a:52:9c:14:18:29:b5:53:d1:
11:67:79:9f:8c:f3:51:a2:6e:b8:db:07:c1:ad:e6:5b:29:d2:
53:cb:ac:4e:f3:37:5f:c3:82:d6:89:a7:09:e0:1b:cd:d2:74:
02:21:a1:af:4a:e0:6e:0d:5f:6e:72:65:51:4d:b2:8f:41:6c:
a2:67:45:7d:b5:b3:2f:7b:77:ac:ff:26:e2:56:63:e1:02:db:
dc:55:8c:f9:7b:80:06:1e:ce:df:24:26:2a:f6:26:c0:e8:b6:
24:a2:d3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:03 2025 by rpki-client