Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/h5drbeJgOhusjASs5XXdfKSkCk8.roa
File: h5drbeJgOhusjASs5XXdfKSkCk8.roa (raw, json)
Hash identifier: fQcYh9vIls284BoyljnrDXeKWvHTEeXndNbPpKYXc40=
Subject key identifier: 87:97:6B:6D:E2:60:3A:1B:AC:8C:04:AC:E5:75:DD:7C:A4:A4:0A:4F
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 0188716A51A239DA25FBF5E9D0AB3433C8ED
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/h5drbeJgOhusjASs5XXdfKSkCk8.roa
Signing time: Wed 31 May 2023 10:46:13 +0000
ROA not before: Wed 31 May 2023 10:46:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
89.23.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:6a:51:a2:39:da:25:fb:f5:e9:d0:ab:34:33:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:46:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87976b6de2603a1bac8c04ace575dd7ca4a40a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:0e:81:3a:7c:aa:ff:a5:27:4d:35:90:b6:
1c:93:c4:d0:1e:70:13:93:9e:e5:d4:3f:c6:eb:a9:
60:54:56:74:85:89:2d:bf:52:31:f8:61:b3:30:dc:
21:c2:aa:fe:52:95:1e:46:94:5b:a5:79:da:60:8c:
af:59:67:29:d4:01:33:27:4e:5e:29:8a:24:72:42:
de:58:f9:15:a8:54:9d:3d:06:66:93:b9:0a:8b:c6:
97:57:4b:c4:38:0a:79:d3:ca:c4:f8:76:aa:85:14:
d6:4a:51:6a:50:ca:8a:e9:80:fb:6e:36:5a:7c:31:
bb:41:ad:eb:c6:c5:c0:8c:30:9a:d2:78:db:26:a6:
bb:92:6c:7d:17:3f:7a:ce:cb:d2:49:85:23:da:f4:
16:91:4f:9f:89:8a:38:19:9d:42:b1:51:59:63:63:
67:c1:ce:1f:f1:a5:23:e4:3c:41:2a:8b:38:6f:21:
62:7c:ee:21:62:e5:ee:c9:a0:5c:13:45:41:73:72:
ca:ea:18:44:11:b9:0f:31:e9:d1:6b:8d:a4:2b:f7:
6f:09:0d:3d:df:cb:07:2a:a0:79:17:3c:01:18:d7:
95:91:e3:91:da:a3:19:f1:ca:d1:96:8d:17:41:01:
20:49:80:94:ec:80:ad:69:c4:07:6c:5c:82:ca:60:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:6B:6D:E2:60:3A:1B:AC:8C:04:AC:E5:75:DD:7C:A4:A4:0A:4F
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/h5drbeJgOhusjASs5XXdfKSkCk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.90.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:24:5c:d7:f4:c3:10:5a:83:66:7c:e9:bb:31:4d:3d:51:2d:
7a:49:81:0d:3b:b7:76:3b:5e:09:29:eb:cc:a6:e8:03:4d:8e:
10:ac:8a:91:d2:f1:1f:8c:96:fa:bd:6f:8b:c9:cb:b6:d9:09:
f2:35:c6:5d:b3:cd:22:6a:85:c6:5b:61:98:1b:f2:b3:9f:36:
c2:72:1e:e1:dd:9d:f2:1a:05:b8:eb:00:9f:55:8f:01:2b:b4:
6a:f4:c4:d7:e7:94:d6:20:b9:fb:97:11:c7:01:5e:cd:a1:8a:
bd:98:86:13:8e:5f:3d:5a:c6:e6:53:0b:0d:72:e0:00:d2:d3:
87:c8:a1:f6:38:86:f3:de:1a:4f:62:10:f2:c5:f8:ca:d8:7c:
8b:70:b9:fb:a5:75:7d:a5:d6:f7:8e:ef:15:6d:b9:a1:45:b6:
04:34:2f:05:ec:9f:b4:34:68:7a:b4:98:79:43:45:68:50:db:
9d:57:bd:f8:a5:c8:54:1f:75:d0:f0:a9:03:b6:b9:d1:15:63:
6b:b1:fa:0f:de:77:ab:1a:4a:1b:1f:94:73:63:4e:5b:77:e3:
9c:e9:3b:c3:ef:b1:d5:93:80:c7:c8:0e:6a:27:e7:2f:dc:18:
e3:b4:84:61:e3:6f:9e:1e:8b:c7:23:1f:4f:74:9d:0b:96:a6:
f4:9b:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org