Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/mQRkGo0WC0xjOA0VnLBELLr0A-I.roa
File: mQRkGo0WC0xjOA0VnLBELLr0A-I.roa (raw, json)
Hash identifier: BD8MdZ3ERCRKvTYVwgeHe9GW8xefV8lrWx0NRaahsg4=
Subject key identifier: 99:04:64:1A:8D:16:0B:4C:63:38:0D:15:9C:B0:44:2C:BA:F4:03:E2
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 0188716A4E159EFF43AD0901D70A8B50A1D8
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/mQRkGo0WC0xjOA0VnLBELLr0A-I.roa
Signing time: Wed 31 May 2023 10:46:12 +0000
ROA not before: Wed 31 May 2023 10:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52116
IP address blocks: 178.254.170.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
89.23.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:6a:4e:15:9e:ff:43:ad:09:01:d7:0a:8b:50:a1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9904641a8d160b4c63380d159cb0442cbaf403e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:2d:48:43:ef:f3:ce:1f:de:89:23:f9:90:
05:bd:45:d4:57:bb:18:e9:a2:ad:de:23:5a:2c:55:
61:71:83:91:ae:01:6f:76:9e:3a:21:82:90:aa:08:
7b:a2:36:0e:d0:37:72:b8:3c:f6:e8:61:5a:fb:eb:
76:36:f6:6b:0a:3c:2c:83:80:44:08:62:77:b0:68:
79:76:06:d6:76:25:15:17:a8:0f:07:8d:a1:e6:66:
87:a9:aa:7e:0d:08:49:92:a9:a3:a1:f5:6c:4d:ba:
c4:c7:3a:3e:c9:78:6a:70:75:01:c4:ed:b9:e0:52:
c2:1d:b1:7e:79:28:d0:6b:00:bb:3e:a6:12:f1:ee:
fa:fc:ae:cc:13:e1:96:f0:e2:71:a7:f9:66:5e:7e:
5b:54:f8:e5:d8:6d:bb:ce:83:55:81:37:b0:65:a5:
71:ff:8f:20:fe:ca:c0:48:dc:f0:63:3f:22:35:0c:
d4:3e:64:fa:85:80:3e:80:05:fb:c1:5d:2a:2c:2f:
df:cf:c6:21:19:a6:33:ed:9a:ec:09:05:c3:5d:cb:
a1:9e:5f:14:66:01:14:28:9f:cd:4e:a8:fe:8c:33:
b1:fc:73:41:ed:d8:dd:ab:b5:fb:d4:09:a5:e8:1d:
00:47:6f:c0:5a:b5:71:53:c9:11:1d:c3:14:e6:f9:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:04:64:1A:8D:16:0B:4C:63:38:0D:15:9C:B0:44:2C:BA:F4:03:E2
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/mQRkGo0WC0xjOA0VnLBELLr0A-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
178.254.170.0/24
178.254.180.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:1b:e5:82:ca:89:00:ea:02:f2:7d:ec:c4:91:60:b4:6f:de:
2a:4d:88:a0:e6:61:06:8e:26:2d:86:25:9e:6d:d6:b7:eb:c9:
77:6a:a1:24:51:a1:a9:bc:67:48:9a:7c:15:19:7b:31:2b:c1:
d4:ab:3a:ae:6f:e4:44:72:ed:a8:8d:17:e6:b5:a0:22:8c:e0:
83:47:91:aa:fb:d9:b7:89:72:d9:0f:5d:74:6f:13:eb:37:f8:
0d:cc:ac:a8:32:1e:bc:01:54:ad:dd:35:29:8b:29:90:fb:6f:
f4:dc:96:e5:1d:5c:ae:a5:f6:0d:7f:52:ad:39:c8:4c:d9:cd:
c9:7d:4a:0c:8f:ea:20:da:38:11:74:38:19:56:c0:eb:89:90:
40:34:21:b9:22:7c:db:5c:a0:d4:e0:db:f2:49:05:04:cb:1a:
4d:f2:f5:91:1e:ad:c3:51:4d:7d:12:cc:27:a2:69:8d:b1:24:
f1:f3:4e:f6:15:9a:0b:61:d3:4f:30:4e:eb:ec:6e:0e:ea:4f:
3a:79:b2:32:49:ae:f6:06:86:74:dd:2a:06:8c:df:50:2f:e7:
6d:63:be:79:5d:26:cd:14:80:fd:b9:25:c8:23:39:98:d9:59:
07:b5:48:50:d9:b1:63:7e:a5:70:d3:1f:21:c4:79:c4:dd:8d:
63:1b:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org