Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/JBmb6VgqkhJwvHv8Q_HmPfIssno.roa
File: JBmb6VgqkhJwvHv8Q_HmPfIssno.roa (raw, json)
Hash identifier: 8kQhoFu3pNlrcFaRe7hBnRxGz0GSLCt6PYcxDWVuxwc=
Subject key identifier: 24:19:9B:E9:58:2A:92:12:70:BC:7B:FC:43:F1:E6:3D:F2:2C:B2:7A
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 01887164D0E910EF73ED39A488540176BB7F
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/JBmb6VgqkhJwvHv8Q_HmPfIssno.roa
Signing time: Wed 31 May 2023 10:40:12 +0000
ROA not before: Wed 31 May 2023 10:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 178.254.150.0/24 maxlen: 24
89.23.77.0/24 maxlen: 24
89.23.84.0/24 maxlen: 24
89.23.85.0/24 maxlen: 24
89.23.81.0/24 maxlen: 24
89.23.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:64:d0:e9:10:ef:73:ed:39:a4:88:54:01:76:bb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24199be9582a921270bc7bfc43f1e63df22cb27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:1a:42:3a:b5:32:cb:50:ab:1d:94:59:dd:
2b:38:a1:b5:f1:0f:43:b0:f7:d7:aa:23:4d:94:b8:
17:9d:58:15:e7:04:52:22:0a:cb:ac:05:79:be:91:
ba:5f:3a:dd:fc:34:93:e5:92:24:b2:ca:29:86:30:
bb:18:c8:0f:49:46:19:c9:73:fb:b7:72:d5:46:a5:
ea:27:2d:80:8a:04:e4:4b:15:45:fd:f1:f0:cb:a3:
b3:29:d3:94:08:ad:0c:c1:14:85:68:77:c2:ed:2a:
c7:a0:c9:f6:60:a1:ea:2d:5a:56:cb:f4:c6:2f:59:
9a:4b:27:dc:09:4c:fb:9a:e3:c7:b2:eb:25:eb:20:
a3:f3:c0:ce:3e:85:01:c1:0d:d9:56:51:fc:7b:c4:
e2:43:b4:2e:c2:f7:20:37:8a:b6:5b:f0:c9:dc:7a:
5a:e1:57:73:15:27:fc:4a:50:b0:c4:86:31:bf:ce:
93:27:26:1c:24:71:62:eb:11:10:0f:5f:88:cb:aa:
4a:86:37:bb:cc:64:fc:91:57:f0:ee:50:24:7d:73:
ba:4a:f5:de:69:51:cd:09:38:63:2d:fb:07:c5:9d:
fc:0f:3d:1a:f2:38:93:2a:5b:ad:ac:b2:aa:47:2a:
76:82:62:d8:32:d8:3b:bc:72:58:80:96:62:73:30:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:9B:E9:58:2A:92:12:70:BC:7B:FC:43:F1:E6:3D:F2:2C:B2:7A
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/JBmb6VgqkhJwvHv8Q_HmPfIssno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.77.0/24
89.23.79.0/24
89.23.81.0/24
89.23.84.0/23
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8d:9c:47:28:1b:96:65:ed:3d:5f:ae:8a:54:54:dc:e1:55:
25:6b:26:d2:44:ec:28:12:44:d1:a3:75:60:76:66:25:8f:7e:
35:a8:1f:22:97:4d:85:0c:da:ac:22:58:71:a4:42:96:01:79:
d6:e7:e0:5c:68:cf:e5:5b:cb:87:6f:78:4d:76:14:a3:55:30:
31:3d:be:08:7a:c9:b6:1e:6b:81:36:96:f3:fc:91:cb:bb:c6:
cf:ee:2c:a5:08:c7:43:4f:a2:62:7e:d5:7d:94:d1:f7:67:66:
44:93:b7:90:ae:5d:1b:85:f9:f0:23:05:19:0c:84:7b:b0:bc:
d8:24:96:56:71:3e:d5:8f:23:7a:b7:b0:f8:eb:5b:35:1f:75:
2a:b3:d6:d1:f7:dc:ac:88:51:a8:ba:2d:0f:d9:81:e5:29:96:
49:df:a0:66:fe:c1:9b:de:bf:0f:c8:63:8e:33:5a:f0:79:f6:
76:57:9c:5b:2d:c3:c3:6a:f2:09:42:77:17:a9:f2:c7:21:f5:
a4:2f:40:d4:db:fa:a8:67:76:4b:b7:c9:59:de:76:b3:46:2d:
9e:bf:46:59:2d:ca:23:d7:3c:b4:fb:72:0f:64:97:52:bb:14:
7a:d2:ba:21:cb:9b:54:89:94:29:f4:23:71:25:93:84:2e:ea:
74:c9:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org