Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/_AkQx2LoO_PfutXrDgBQk1QUleA.roa
File: _AkQx2LoO_PfutXrDgBQk1QUleA.roa (raw, json)
Hash identifier: C1tCncUPkbuTnzBNftLUNOjcIoebo0tdjwb+yAs1q+c=
Subject key identifier: FC:09:10:C7:62:E8:3B:F3:DF:BA:D5:EB:0E:00:50:93:54:14:95:E0
Certificate issuer: /CN=948b09d6772a1417f17f60468ab33b3bb112f229
Certificate serial: 0187284F28F3A87302F77629B2C19CE6F18F
Authority key identifier: 94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/_AkQx2LoO_PfutXrDgBQk1QUleA.roa
Signing time: Tue 28 Mar 2023 13:01:29 +0000
ROA not before: Tue 28 Mar 2023 13:01:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 188.244.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:4f:28:f3:a8:73:02:f7:76:29:b2:c1:9c:e6:f1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948b09d6772a1417f17f60468ab33b3bb112f229
Validity
Not Before: Mar 28 13:01:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0910c762e83bf3dfbad5eb0e005093541495e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:d0:5e:20:c9:d2:8a:43:6b:bd:a7:2a:c2:
67:7e:8f:fa:1c:fe:f3:ae:0d:27:b7:da:3c:6c:0b:
86:55:9d:04:11:e3:e4:29:25:00:17:2e:03:bc:69:
ae:21:0d:79:66:ce:3a:04:11:15:0f:87:2e:1a:5b:
c7:b7:1d:71:02:a8:b6:f8:05:b4:31:7d:6c:c5:b9:
f1:bc:e7:70:92:06:4b:4d:ed:ba:29:6e:62:41:97:
b4:0a:c4:b8:a6:1c:8b:30:3b:98:0e:d1:05:6e:5a:
61:0f:76:8a:6d:d3:f5:e5:bb:7e:5c:38:6f:94:c8:
7d:1c:fc:d0:ca:4d:19:fc:b2:c5:6a:79:99:0a:b9:
8c:be:d9:dd:ed:1b:4e:b1:7b:13:7c:fc:7e:bf:29:
70:b6:d3:a0:88:ea:8b:94:c4:d4:9a:13:46:10:37:
95:f5:4f:4f:95:31:0d:30:06:2f:c7:b2:a3:35:65:
13:0e:47:77:c9:b5:61:87:70:50:10:2f:95:6d:9e:
11:76:9f:84:61:3e:a2:e0:65:d8:04:9e:6f:ab:d2:
fd:55:e2:18:20:49:66:29:73:7e:12:31:44:ce:16:
2e:f7:0c:a3:d5:8c:a9:43:06:79:23:a2:83:b2:f7:
1b:90:08:e3:8c:05:a7:d9:ca:d1:69:2f:06:e4:ed:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:09:10:C7:62:E8:3B:F3:DF:BA:D5:EB:0E:00:50:93:54:14:95:E0
X509v3 Authority Key Identifier:
keyid:94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/_AkQx2LoO_PfutXrDgBQk1QUleA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:09:63:70:42:6c:7d:af:c7:3d:f5:b5:60:97:f9:fb:a4:1a:
2b:32:ae:ee:22:9d:a4:87:a7:ee:ed:ad:b1:1f:bd:20:39:ca:
6d:6b:d1:df:f6:fe:e8:fd:ba:24:72:0d:75:45:8c:2c:e8:4f:
47:45:93:99:35:85:98:04:55:a9:a3:f6:63:6f:0f:fb:8b:e9:
e7:e2:0a:80:11:8d:da:c1:24:91:36:6e:82:3a:69:3f:dd:39:
00:3e:98:2d:d6:2c:39:a0:57:8f:30:b8:86:63:61:32:73:02:
23:67:96:f2:33:4f:c3:6e:3d:51:3e:d5:92:46:a1:aa:00:54:
f0:37:a3:54:4d:82:7d:9d:f7:93:e7:b4:da:ac:66:d1:cf:f9:
e8:f1:00:21:6e:c6:0b:47:a1:ac:db:3d:95:87:fb:73:9b:92:
0e:f5:5b:fd:e8:07:ce:0d:e1:97:4d:8b:ed:24:ab:68:cb:31:
f5:d9:57:7e:b2:9c:c0:7a:74:e3:b8:54:ca:2e:d7:02:cc:57:
e3:6e:18:d5:89:17:41:52:66:83:e7:e0:b0:19:2c:3a:71:a0:
d8:bf:dd:b3:34:ca:d6:9e:1f:e4:da:80:d5:00:7c:64:d7:b6:
de:75:b4:4f:22:ab:6d:a8:5b:63:60:4d:79:0c:3b:ca:2e:13:
d9:c9:38:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:51 2024 by rpki-client on console-ams.rpki-client.org