Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/U-fhA4cxf7MShV3SlBRouycozrI.roa
File: U-fhA4cxf7MShV3SlBRouycozrI.roa (raw, json)
Hash identifier: Z8IDY7CAVwXomz7l7MTwZSF3Ew+FAuuGd+lOkIs54q8=
Subject key identifier: 53:E7:E1:03:87:31:7F:B3:12:85:5D:D2:94:14:68:BB:27:28:CE:B2
Certificate issuer: /CN=1c14ea32ebe84556fd468f812eac103153789ed0
Certificate serial: 0185701522D74384F74A20D159880BE0183C
Authority key identifier: 1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/U-fhA4cxf7MShV3SlBRouycozrI.roa
Signing time: Mon 02 Jan 2023 01:25:11 +0000
ROA not before: Mon 02 Jan 2023 01:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 188.244.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:22:d7:43:84:f7:4a:20:d1:59:88:0b:e0:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c14ea32ebe84556fd468f812eac103153789ed0
Validity
Not Before: Jan 2 01:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53e7e10387317fb312855dd2941468bb2728ceb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:ba:d3:66:ee:e9:37:54:47:c1:4d:a7:83:
b4:54:f8:70:cf:9b:41:d9:e6:35:25:98:28:90:55:
d5:1c:a4:26:98:11:39:e6:84:0a:e2:72:46:97:a8:
d2:14:79:f0:74:04:d9:71:45:18:38:24:25:3a:4c:
9d:33:5c:03:36:4f:2a:dd:ef:ba:d7:77:91:67:5c:
73:50:95:f4:a5:5e:18:ee:e4:29:1c:16:58:ac:95:
65:e6:ed:14:11:e7:3f:5f:39:1c:6e:d3:a7:70:92:
19:82:24:54:9d:fd:b6:2a:a0:c5:79:88:79:5e:b7:
cb:73:63:14:5f:88:82:93:b1:88:31:b3:70:4e:b2:
ec:8f:73:26:1b:ca:e0:e6:a6:d5:37:fc:3f:b1:7e:
29:f2:1f:18:18:8e:64:4a:5f:1e:b0:1c:f1:79:55:
57:f2:ce:42:47:a2:a2:26:c4:2d:6b:88:14:26:57:
f9:32:97:b4:2f:f4:cf:d7:7f:47:82:e1:5d:c8:c7:
bb:3e:5d:78:a5:88:27:b0:88:fa:98:1e:22:4c:e2:
fb:e1:06:4d:0a:b0:71:6b:f7:f1:4a:30:b5:41:d7:
f9:89:ee:3f:1f:97:93:21:9f:8b:14:48:86:5f:ad:
7d:5a:ce:a2:6d:0b:9e:73:4d:c5:f1:6d:b6:82:98:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E7:E1:03:87:31:7F:B3:12:85:5D:D2:94:14:68:BB:27:28:CE:B2
X509v3 Authority Key Identifier:
keyid:1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/U-fhA4cxf7MShV3SlBRouycozrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.117.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a0:64:75:6b:5d:d8:24:2b:51:31:09:a4:83:93:cf:2f:8d:
a5:d9:03:f8:74:38:ab:35:fa:2b:f8:74:6b:16:18:74:ac:ad:
b1:a7:a9:71:d2:07:f9:ea:01:80:71:c3:23:ee:cb:f0:ed:76:
1a:9f:8c:35:89:e7:3a:7d:7b:12:c7:bb:c5:c6:b6:42:47:ef:
94:2d:e8:c8:07:f3:8a:aa:84:b3:67:45:6d:35:8a:81:47:68:
3d:ac:b6:ad:14:de:42:ef:c5:40:08:12:61:de:b1:86:de:5c:
a5:99:65:18:5e:1d:80:43:1e:3b:2f:3e:f4:85:76:51:5c:bb:
2c:72:09:95:54:b2:cb:f3:28:3e:1f:69:ef:e6:d2:0a:7b:10:
22:c7:94:79:c5:8f:2a:4c:8d:f6:d7:a8:eb:67:0e:7c:5d:c4:
9f:5e:c4:1a:00:ef:2c:1a:3a:bc:fc:2c:95:92:7d:44:21:7c:
c7:19:f8:47:5a:d8:bd:16:3c:d1:f4:30:98:75:a4:6e:51:14:
dd:8e:7e:fb:1b:86:e8:46:18:0d:d7:61:54:bf:e0:2e:60:7f:
90:20:0c:9a:5b:de:1d:c9:b3:a1:68:70:2d:55:fd:cb:d2:9f:
b0:ab:5d:14:1b:52:6c:65:32:d7:c4:dc:41:2a:15:3c:f5:46:
09:90:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:07:35 2023 by rpki-client on console-fra.rpki-client.org