Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/MXIg07EDrHG6BlsQm2zzcHiY86Y.roa
File: MXIg07EDrHG6BlsQm2zzcHiY86Y.roa (raw, json)
Hash identifier: //QNw8cQXB/rtZwYrMhmHKR2WXqlCz9gnkHHkeXySt4=
Subject key identifier: 31:72:20:D3:B1:03:AC:71:BA:06:5B:10:9B:6C:F3:70:78:98:F3:A6
Certificate issuer: /CN=948b09d6772a1417f17f60468ab33b3bb112f229
Certificate serial: 018779E37312A067A65B5E5F55FAB124C391
Authority key identifier: 94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/MXIg07EDrHG6BlsQm2zzcHiY86Y.roa
Signing time: Thu 13 Apr 2023 09:12:41 +0000
ROA not before: Thu 13 Apr 2023 09:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.244.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:73:12:a0:67:a6:5b:5e:5f:55:fa:b1:24:c3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948b09d6772a1417f17f60468ab33b3bb112f229
Validity
Not Before: Apr 13 09:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=317220d3b103ac71ba065b109b6cf3707898f3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:d1:0c:f5:78:81:b6:58:9c:c7:af:56:05:
e2:de:93:0c:df:b2:0d:3c:34:28:ba:49:74:6a:ab:
01:34:89:3f:dd:c6:f3:ee:28:2b:86:b6:16:9d:76:
20:7c:7e:f5:d1:9a:6f:2a:94:2b:e5:be:36:c0:c0:
92:96:99:a3:0b:97:d8:8c:3f:f3:19:b8:d7:46:a6:
0b:2e:36:dc:b4:0b:17:c9:16:93:17:46:04:83:ac:
66:60:69:ae:70:3e:04:40:0e:44:92:13:20:30:0c:
1e:b7:09:60:43:9f:84:55:e1:8e:5c:7a:b1:f8:63:
31:97:7a:9f:f3:c4:6d:10:37:c5:13:c6:27:2c:e5:
84:a3:fa:2f:31:33:2b:6f:ce:b1:90:55:15:c1:92:
40:9d:0f:ba:1e:bb:03:e9:09:c6:0f:cf:2c:7c:11:
85:fb:08:b2:6f:61:da:9f:48:16:0c:82:33:6c:fc:
8f:d5:c7:c0:5b:b6:ff:8b:88:3a:b9:2f:c1:53:d0:
75:27:83:72:34:d1:86:59:26:32:ec:45:08:bb:b4:
cf:df:ee:78:bf:fd:99:26:4d:39:c8:ab:29:bc:fd:
f2:c6:0d:34:c0:41:61:ab:11:b2:e2:0b:52:38:2d:
ca:e4:60:57:da:09:b9:e3:80:85:66:40:df:de:ba:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:72:20:D3:B1:03:AC:71:BA:06:5B:10:9B:6C:F3:70:78:98:F3:A6
X509v3 Authority Key Identifier:
keyid:94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/MXIg07EDrHG6BlsQm2zzcHiY86Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e3:e6:93:a5:bc:94:31:c1:ab:da:1b:0f:d4:84:e3:ce:e5:
e3:37:b2:e0:14:3c:ef:59:36:1b:7b:d7:db:b4:e2:22:1b:ae:
a4:11:22:97:66:2d:6a:07:58:82:db:f8:be:ea:f0:3c:2c:e9:
62:41:d0:67:a0:a5:43:86:1c:06:3a:30:56:dc:d0:d0:06:03:
c8:98:b1:ea:c1:4d:b8:43:32:0b:e2:b4:6a:4e:75:ef:31:b7:
d7:33:a2:7a:10:d8:21:13:b0:a0:ba:7c:4d:16:19:37:2a:17:
87:f2:f5:89:81:dc:ad:50:c0:91:22:9b:df:d8:5e:76:72:9f:
3e:b3:17:6b:bb:7b:70:7d:fe:40:f1:fb:bc:89:50:4e:b0:1e:
2a:04:84:2e:36:e2:d7:a5:d9:6e:75:86:83:80:d4:70:6e:c1:
55:3f:ac:d6:c5:5e:e5:27:b0:18:2a:61:e7:7a:f0:23:ad:6c:
02:3c:74:75:67:65:13:67:3c:77:8d:1e:f9:ee:14:98:4c:fd:
40:e2:99:4b:fc:ed:35:00:4a:30:ab:6c:0e:37:2f:b1:ca:07:
d3:9b:f6:f9:8d:96:52:6c:e4:d2:47:7f:3b:8e:6c:b7:01:6c:
4f:a8:90:10:91:a3:be:6f:b3:a7:c8:5a:b5:79:78:f4:23:50:
3d:aa:88:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd543MSoGemW15fVfqxJMORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGIwOWQ2NzcyYTE0MTdmMTdmNjA0NjhhYjMzYjNiYjEx
MmYyMjkwHhcNMjMwNDEzMDkxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTcyMjBkM2IxMDNhYzcxYmEwNjViMTA5YjZjZjM3MDc4OThmM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ7RDPV4gbZYnMevVgXi3pMM37IN
PDQoukl0aqsBNIk/3cbz7igrhrYWnXYgfH710ZpvKpQr5b42wMCSlpmjC5fYjD/z
GbjXRqYLLjbctAsXyRaTF0YEg6xmYGmucD4EQA5EkhMgMAwetwlgQ5+EVeGOXHqx
+GMxl3qf88RtEDfFE8YnLOWEo/ovMTMrb86xkFUVwZJAnQ+6HrsD6QnGD88sfBGF
+wiyb2Han0gWDIIzbPyP1cfAW7b/i4g6uS/BU9B1J4NyNNGGWSYy7EUIu7TP3+54
v/2ZJk05yKspvP3yxg00wEFhqxGy4gtSOC3K5GBX2gm544CFZkDf3rpXsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDFyINOxA6xxugZbEJts83B4mPOmMB8GA1UdIwQY
MBaAFJSLCdZ3KhQX8X9gRoqzOzuxEvIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElzSjFuY3FGQmZ4ZjJCR2lyTTdPN0VTOGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMzRhNWItZTQ3OC00ZDIzLTljODIt
MDI5ZjY3OGQxNDhkLzEvTVhJZzA3RURySEc2QmxzUW0yenpjSGlZODZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMzRhNWItZTQ3OC00ZDIzLTljODItMDI5ZjY3OGQxNDhk
LzEvbElzSjFuY3FGQmZ4ZjJCR2lyTTdPN0VTOGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPR/MA0G
CSqGSIb3DQEBCwUAA4IBAQCm4+aTpbyUMcGr2hsP1ITjzuXjN7LgFDzvWTYbe9fb
tOIiG66kESKXZi1qB1iC2/i+6vA8LOliQdBnoKVDhhwGOjBW3NDQBgPImLHqwU24
QzIL4rRqTnXvMbfXM6J6ENghE7CgunxNFhk3KheH8vWJgdytUMCRIpvf2F52cp8+
sxdru3twff5A8fu8iVBOsB4qBIQuNuLXpdludYaDgNRwbsFVP6zWxV7lJ7AYKmHn
evAjrWwCPHR1Z2UTZzx3jR757hSYTP1A4plL/O01AEowq2wONy+xygfTm/b5jZZS
bOTSR387jmy3AWxPqJAQkaO+b7OnyFq1eXj0I1A9qogS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:51 2024 by rpki-client on console-ams.rpki-client.org