Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/IkH7abKXVY6WCPObY8hESEIlXqk.roa
File: IkH7abKXVY6WCPObY8hESEIlXqk.roa (raw, json)
Hash identifier: 6tLjF5iXPHrG6uip/82Pkvzco4jGI1oJV+YWsCIIcng=
Subject key identifier: 22:41:FB:69:B2:97:55:8E:96:08:F3:9B:63:C8:44:48:42:25:5E:A9
Certificate issuer: /CN=3ed2591c1c83db30e42fb0e4ab8130e6ca20bf8e
Certificate serial: 0189B686AB306982ECDA6E67881C6E29CD67
Authority key identifier: 3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtJZHByD2zDkL7Dkq4Ew5sogv44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/IkH7abKXVY6WCPObY8hESEIlXqk.roa
Signing time: Wed 02 Aug 2023 13:53:46 +0000
ROA not before: Wed 02 Aug 2023 13:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208142
IP address blocks: 178.23.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:86:ab:30:69:82:ec:da:6e:67:88:1c:6e:29:cd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed2591c1c83db30e42fb0e4ab8130e6ca20bf8e
Validity
Not Before: Aug 2 13:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2241fb69b297558e9608f39b63c8444842255ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:4b:e0:db:99:32:d9:19:63:b4:f2:b8:14:
80:26:0c:75:3b:39:68:f6:0a:97:0b:29:bf:13:4a:
a0:00:c3:16:55:96:c6:52:c0:ed:0f:9f:b9:3c:e1:
7f:1a:ba:0f:e4:6e:97:5b:63:c1:3e:85:13:23:e8:
f0:f0:4a:0d:f0:8c:8e:e3:15:53:53:b5:d4:b7:e2:
3d:d4:fa:a0:4a:cb:96:7b:21:a4:bd:3c:8a:3c:a8:
c6:5d:99:9e:c6:a0:a4:b8:7e:3f:ce:1f:64:aa:82:
5a:7a:6e:c5:7e:22:42:48:bd:27:aa:30:f3:c9:1a:
7d:9a:89:56:dd:f5:f9:9d:e6:b8:55:cf:2f:f4:fe:
86:98:a5:da:6b:0b:5d:60:34:cd:94:fe:37:00:1d:
ac:ca:69:ec:61:28:b4:cb:0d:ad:e9:41:c3:ee:45:
4f:9a:ea:d5:69:cf:b2:88:3c:ad:ce:59:f3:d0:b9:
10:6d:e4:32:5c:84:8b:8c:e1:a8:9e:86:3b:76:bd:
79:25:3a:eb:ff:d8:3f:50:b8:3a:61:ce:3b:9c:52:
65:75:9a:4c:bb:1a:fe:2a:df:cf:17:f2:35:08:d2:
e3:38:7b:50:48:16:13:9d:dd:89:18:42:3b:b7:ae:
fe:d8:07:b4:ab:7b:dd:85:3f:b2:c5:bb:61:09:3f:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:FB:69:B2:97:55:8E:96:08:F3:9B:63:C8:44:48:42:25:5E:A9
X509v3 Authority Key Identifier:
keyid:3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtJZHByD2zDkL7Dkq4Ew5sogv44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/IkH7abKXVY6WCPObY8hESEIlXqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ac:4f:7d:38:70:e4:6f:18:82:22:b5:23:b5:88:ef:30:0d:
2b:92:73:43:f3:85:06:72:73:af:dd:f2:be:1b:6e:31:fd:8a:
e9:3e:0f:1e:f0:97:d6:37:4b:b2:eb:5d:62:47:e6:0f:85:07:
5f:8c:4b:8a:7a:85:a3:c6:b7:22:d7:8c:c0:ab:de:4b:c1:9a:
2c:ae:0a:b2:d4:a6:8b:20:ed:5e:d6:49:c8:91:f0:90:18:54:
73:65:00:c1:9a:cf:f6:64:6c:e8:1d:10:87:1e:c9:09:a8:a6:
7e:f4:8c:9e:7a:9b:2b:2a:72:8b:e2:cb:89:2d:78:35:23:8d:
3e:f5:ea:74:37:5f:eb:25:8d:ab:a2:83:e7:9d:be:5e:71:9b:
f1:02:cc:11:00:58:42:93:7d:4d:a5:d7:42:75:2c:fe:3c:f8:
32:83:6d:86:ec:18:21:a5:1f:bf:1c:5d:88:45:9f:ec:7e:a3:
45:ef:b6:a8:14:71:e0:79:31:5f:26:2b:9e:39:32:2c:d3:13:
6a:de:1f:3a:c8:fb:b4:2e:d9:33:28:f4:de:78:b9:32:ab:4a:
f8:80:3f:41:df:f5:81:fc:96:d6:cb:34:80:eb:a1:be:08:8b:
e3:14:3e:2a:dc:8e:7f:28:a7:9a:15:62:ad:e7:95:76:7d:de:
2d:ba:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:29 2024 by rpki-client on console-fra.rpki-client.org