Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/fE7bn310WMltGvNhvBtvTZFE0n8.roa
File: fE7bn310WMltGvNhvBtvTZFE0n8.roa (raw, json)
Hash identifier: GcOJjiAkU94uPvHM/k5s8yzdwMPoL8Y4ECyDaR7mw7k=
Subject key identifier: 7C:4E:DB:9F:7D:74:58:C9:6D:1A:F3:61:BC:1B:6F:4D:91:44:D2:7F
Certificate issuer: /CN=948b09d6772a1417f17f60468ab33b3bb112f229
Certificate serial: 018571309D975768F5F9EDE96A42590FDE16
Authority key identifier: 94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/fE7bn310WMltGvNhvBtvTZFE0n8.roa
Signing time: Mon 02 Jan 2023 06:34:49 +0000
ROA not before: Mon 02 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 188.244.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9d:97:57:68:f5:f9:ed:e9:6a:42:59:0f:de:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948b09d6772a1417f17f60468ab33b3bb112f229
Validity
Not Before: Jan 2 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c4edb9f7d7458c96d1af361bc1b6f4d9144d27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:5f:ba:62:a5:bf:80:c4:86:54:30:fd:8a:
bf:21:e8:fb:3d:dc:a6:22:6c:3a:9e:bc:b8:9e:59:
ea:ff:8e:a1:c0:72:53:8b:6f:3b:bb:93:3f:72:78:
98:c1:1b:12:bc:74:73:d2:63:34:83:40:2d:43:04:
9f:96:97:79:52:a3:a9:66:80:c3:1a:af:05:43:3c:
30:20:04:fb:ae:e4:ff:ac:95:b0:42:98:75:62:49:
8e:3d:bd:85:33:3a:5c:c7:88:59:7f:97:fa:18:6b:
95:62:df:cc:ed:02:04:da:35:70:9a:3b:55:96:1d:
51:ee:4c:23:10:2b:d7:46:1c:cd:a0:f1:2d:da:db:
36:a8:64:79:dd:23:36:53:50:a0:69:df:3e:c4:bb:
26:9b:66:b2:b5:6f:1e:3e:9f:2b:e9:99:3d:0f:f6:
d7:a6:74:a6:0a:08:d8:0a:32:a1:20:fe:8f:27:f7:
d7:58:c5:7b:3f:cb:01:a7:57:19:71:78:2a:1b:3f:
f7:90:e6:fb:f3:39:9b:21:ea:2e:59:38:66:90:1c:
df:b6:00:0e:d8:08:34:e0:93:ac:49:78:bb:e5:07:
0e:d3:e6:84:61:fa:d4:88:17:25:b6:3c:52:a5:0a:
84:a3:6a:9d:88:14:f1:86:5b:6e:b6:44:e7:3a:2e:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:DB:9F:7D:74:58:C9:6D:1A:F3:61:BC:1B:6F:4D:91:44:D2:7F
X509v3 Authority Key Identifier:
keyid:94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/fE7bn310WMltGvNhvBtvTZFE0n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.127.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b8:4c:e3:6b:ab:ce:19:84:74:96:7d:e2:f7:37:5f:75:ad:
35:70:59:41:49:bb:18:61:98:24:b9:65:6c:a6:4a:4e:99:a8:
6a:9e:6f:34:53:9b:bc:55:c0:f7:f4:9f:d1:c9:d4:a1:5f:6d:
4f:05:07:a4:31:e0:2a:9d:c4:5a:96:dd:6f:fb:f6:53:08:f4:
84:0b:72:24:ca:84:0f:10:b2:2a:62:9b:ec:39:74:8b:39:88:
27:5e:fc:e0:ce:f6:f6:9d:df:35:7a:6e:72:4b:07:54:0d:b4:
da:69:e0:d5:28:4e:41:5e:c6:d4:78:2c:45:ed:68:00:cb:02:
5d:49:a0:ea:6c:80:03:fa:56:3e:b5:43:9e:5b:82:f6:a1:06:
54:bc:6a:c9:97:99:4f:5f:f9:61:7b:6a:21:1f:75:9d:60:8b:
1f:5f:6c:6b:ac:b8:a9:3c:8d:2a:9e:43:e3:e5:dc:74:9d:f7:
14:05:75:cd:09:e4:d3:d2:8c:b9:ae:a8:cc:bb:5c:e6:0f:ed:
c1:35:9e:61:a6:86:68:b3:eb:d8:ab:23:54:da:ad:bc:ca:a9:
95:72:ad:86:b0:c1:cb:55:79:ee:2d:15:7d:4c:c1:d8:c4:4c:
e1:d5:82:df:fa:8a:e3:2d:e9:e3:53:a8:88:99:a6:d5:11:e5:
ea:c0:3b:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxMJ2XV2j1+e3pakJZD94WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGIwOWQ2NzcyYTE0MTdmMTdmNjA0NjhhYjMzYjNiYjEx
MmYyMjkwHhcNMjMwMTAyMDYzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzRlZGI5ZjdkNzQ1OGM5NmQxYWYzNjFiYzFiNmY0ZDkxNDRkMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHVfumKlv4DEhlQw/Yq/Iej7Pdym
Imw6nry4nlnq/46hwHJTi287u5M/cniYwRsSvHRz0mM0g0AtQwSflpd5UqOpZoDD
Gq8FQzwwIAT7ruT/rJWwQph1YkmOPb2FMzpcx4hZf5f6GGuVYt/M7QIE2jVwmjtV
lh1R7kwjECvXRhzNoPEt2ts2qGR53SM2U1Cgad8+xLsmm2aytW8ePp8r6Zk9D/bX
pnSmCgjYCjKhIP6PJ/fXWMV7P8sBp1cZcXgqGz/3kOb78zmbIeouWThmkBzftgAO
2Ag04JOsSXi75QcO0+aEYfrUiBcltjxSpQqEo2qdiBTxhltutkTnOi6/sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxO2599dFjJbRrzYbwbb02RRNJ/MB8GA1UdIwQY
MBaAFJSLCdZ3KhQX8X9gRoqzOzuxEvIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElzSjFuY3FGQmZ4ZjJCR2lyTTdPN0VTOGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMzRhNWItZTQ3OC00ZDIzLTljODIt
MDI5ZjY3OGQxNDhkLzEvZkU3Ym4zMTBXTWx0R3ZOaHZCdHZUWkZFMG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMzRhNWItZTQ3OC00ZDIzLTljODItMDI5ZjY3OGQxNDhk
LzEvbElzSjFuY3FGQmZ4ZjJCR2lyTTdPN0VTOGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPR/MA0G
CSqGSIb3DQEBCwUAA4IBAQCYuEzja6vOGYR0ln3i9zdfda01cFlBSbsYYZgkuWVs
pkpOmahqnm80U5u8VcD39J/RydShX21PBQekMeAqncRalt1v+/ZTCPSEC3IkyoQP
ELIqYpvsOXSLOYgnXvzgzvb2nd81em5ySwdUDbTaaeDVKE5BXsbUeCxF7WgAywJd
SaDqbIAD+lY+tUOeW4L2oQZUvGrJl5lPX/lhe2ohH3WdYIsfX2xrrLipPI0qnkPj
5dx0nfcUBXXNCeTT0oy5rqjMu1zmD+3BNZ5hpoZos+vYqyNU2q28yqmVcq2GsMHL
VXnuLRV9TMHYxEzh1YLf+orjLenjU6iImabVEeXqwDtT
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:51 2024 by rpki-client on console-ams.rpki-client.org