Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/10LWk_FpUQtVXYS_aYCE-PimcHk.roa
File: 10LWk_FpUQtVXYS_aYCE-PimcHk.roa (raw, json)
Hash identifier: LVhfSUuiA4hBGvB1f7AFhGe+3R1+FTrytvERUeLIBMQ=
Subject key identifier: D7:42:D6:93:F1:69:51:0B:55:5D:84:BF:69:80:84:F8:F8:A6:70:79
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 01887165BA502B8543160625AA38DFADFA9F
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/10LWk_FpUQtVXYS_aYCE-PimcHk.roa
Signing time: Wed 31 May 2023 10:41:12 +0000
ROA not before: Wed 31 May 2023 10:41:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 89.23.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:65:ba:50:2b:85:43:16:06:25:aa:38:df:ad:fa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:41:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d742d693f169510b555d84bf698084f8f8a67079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:fb:a3:29:b6:f8:3c:b6:2c:47:16:97:60:
6b:4d:f9:8e:c6:d4:d9:16:f6:4c:ec:49:a8:9a:8f:
2e:08:bf:ff:64:36:63:50:32:d1:3c:55:ff:4d:c0:
d6:b2:23:52:9c:59:d4:a6:7b:e9:41:22:38:4d:73:
2f:06:0d:41:b3:2c:bf:f8:de:c0:c3:0a:3e:7c:e4:
5c:2f:04:96:9d:e1:00:da:d2:76:39:c6:2a:6d:e3:
70:03:7a:e4:56:2f:2d:32:d2:f2:65:44:7f:0e:cb:
7f:d8:00:77:40:d0:4a:13:62:08:2c:f8:71:2e:dd:
f1:24:04:ea:53:c0:b8:8b:c4:f4:80:90:a3:91:51:
21:e5:63:f6:47:89:82:47:d0:dc:c4:48:ca:78:e0:
c4:73:77:99:6f:be:78:6f:49:1b:3a:b6:2c:eb:b2:
4b:c7:40:ea:8f:31:2b:1f:d2:a6:a0:52:57:bd:43:
7f:23:1e:af:e3:2b:64:ce:0e:3a:de:e7:4a:b3:41:
2d:83:71:33:87:66:1f:52:cd:7a:68:2f:7a:ec:e9:
c5:d3:b7:9f:9a:c1:60:ab:7e:65:68:22:bd:f9:b3:
0f:50:e1:4e:a2:93:c8:61:4d:83:40:eb:5c:d3:7a:
e1:d2:69:93:fd:c3:6c:2e:17:6c:1e:7d:1f:1f:a4:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:D6:93:F1:69:51:0B:55:5D:84:BF:69:80:84:F8:F8:A6:70:79
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/10LWk_FpUQtVXYS_aYCE-PimcHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.78.0/24
Signature Algorithm: sha256WithRSAEncryption
f3:df:5d:4a:86:60:36:05:e7:74:1e:da:e2:0d:7a:1d:6b:db:
0b:19:37:3a:0b:75:62:1d:01:e3:fd:4e:cb:b8:5e:73:0a:cc:
d8:1d:0f:a3:25:83:39:9b:c3:63:db:45:a9:6e:0d:05:3d:72:
91:97:4b:d7:bc:cc:6d:e4:a5:f2:36:b4:c8:46:44:62:ef:53:
69:25:e0:bd:46:88:31:79:ee:40:8c:8a:48:36:2c:f1:4d:39:
73:46:dd:ba:e3:0e:5e:10:d6:c2:88:2f:ff:82:04:47:4c:9a:
c5:d8:7e:dd:25:61:52:06:cb:77:01:8d:1b:b4:b2:fb:cd:9d:
d7:0c:07:0d:49:1c:87:71:dc:b4:84:ec:ad:77:3d:46:84:ef:
a2:4b:53:5e:e3:32:f2:d9:8e:59:33:2f:dd:51:21:d3:fd:ce:
44:93:55:eb:52:ae:69:30:27:dc:00:6e:56:75:b1:3c:ed:e4:
37:01:6c:a1:18:20:14:99:27:2c:bc:1c:72:ba:81:d6:36:30:
f8:17:e7:f2:51:68:50:fe:23:40:3f:64:81:2d:f0:8f:cd:08:
14:f5:31:56:31:55:86:fe:e8:96:51:23:88:a3:03:2f:0f:9d:
d6:85:8e:73:c6:51:8d:84:35:a9:fc:79:f8:7b:56:db:a6:cc:
11:e1:58:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org