Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/88Cpz2ScOtdEtlfeK5sMf8EVMfI.roa
File: 88Cpz2ScOtdEtlfeK5sMf8EVMfI.roa (raw, json)
Hash identifier: LGgWTKFO6xV0tSahcL4KhQV9k8N9qvc7TygIVd9MJws=
Subject key identifier: F3:C0:A9:CF:64:9C:3A:D7:44:B6:57:DE:2B:9B:0C:7F:C1:15:31:F2
Certificate issuer: /CN=a0ef04038673416d1757d3f0541189511b2ed123
Certificate serial: 018895F354358B6C662056B9AE2B355BE52D
Authority key identifier: A0:EF:04:03:86:73:41:6D:17:57:D3:F0:54:11:89:51:1B:2E:D1:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO8EA4ZzQW0XV9PwVBGJURsu0SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/88Cpz2ScOtdEtlfeK5sMf8EVMfI.roa
Signing time: Wed 07 Jun 2023 13:02:11 +0000
ROA not before: Wed 07 Jun 2023 13:02:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200064
IP address blocks: 92.118.172.0/22 maxlen: 22
92.118.172.0/24 maxlen: 24
92.118.174.0/24 maxlen: 24
92.118.173.0/24 maxlen: 24
92.118.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:f3:54:35:8b:6c:66:20:56:b9:ae:2b:35:5b:e5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef04038673416d1757d3f0541189511b2ed123
Validity
Not Before: Jun 7 13:02:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c0a9cf649c3ad744b657de2b9b0c7fc11531f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:c9:fd:22:7d:82:a2:05:d7:29:47:f5:39:
12:5e:0a:f7:0b:da:37:31:c3:7a:d8:37:13:b9:fb:
22:dc:3e:70:4b:d2:cb:a4:77:78:46:be:d3:c6:90:
2e:45:75:b9:73:89:41:03:dc:89:ea:42:a5:a8:95:
f9:55:60:75:24:31:ed:80:b7:78:87:3f:30:85:6a:
1d:bd:e5:ae:f5:17:95:c6:fa:fe:cf:19:de:27:25:
27:04:3f:1c:56:f8:68:3c:80:84:49:b2:11:11:ed:
05:1a:4e:1a:c2:7f:57:34:aa:b0:74:02:e3:b0:32:
b6:0e:49:85:4e:e8:d0:5b:8f:9f:3a:69:f3:f2:06:
2a:b0:f2:47:fe:46:d3:3d:a4:57:4e:cb:c8:5e:fc:
e4:3a:bd:0e:e5:b7:cb:48:44:41:1f:21:9e:eb:77:
17:83:21:fa:50:17:44:06:7e:fb:a0:f8:87:da:e1:
99:8a:00:4b:7f:a0:68:af:0c:d0:9e:cd:4a:96:cb:
6f:bf:a7:39:89:3e:14:24:b4:3e:45:14:33:b7:41:
7c:3a:fc:bf:31:e0:cf:d6:23:21:0e:a5:df:a5:ca:
88:df:8b:05:36:eb:ea:99:a9:94:5a:e7:f5:37:96:
94:a4:69:94:45:f4:c0:42:bc:1c:9f:7d:c2:92:de:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:A9:CF:64:9C:3A:D7:44:B6:57:DE:2B:9B:0C:7F:C1:15:31:F2
X509v3 Authority Key Identifier:
keyid:A0:EF:04:03:86:73:41:6D:17:57:D3:F0:54:11:89:51:1B:2E:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO8EA4ZzQW0XV9PwVBGJURsu0SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/88Cpz2ScOtdEtlfeK5sMf8EVMfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/oO8EA4ZzQW0XV9PwVBGJURsu0SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.172.0/22
Signature Algorithm: sha256WithRSAEncryption
02:19:4c:8f:fb:df:03:c8:15:40:39:f2:2a:db:11:a8:9d:56:
ce:33:46:d9:3e:ed:38:49:44:fb:bb:bd:e0:d0:14:e5:b6:b2:
8b:25:76:84:91:c4:61:05:c3:a0:0c:e5:1b:62:ff:07:12:19:
fc:cf:b2:dc:5f:5a:91:b9:0b:bb:c9:87:57:d8:11:ba:77:b2:
cd:1a:51:5e:3d:75:d6:21:01:f4:fc:2c:ff:e1:3d:62:27:2f:
e6:d6:ad:e3:c5:d2:45:51:44:f5:62:51:f2:db:c4:b8:bc:9e:
94:a4:08:47:89:a7:b6:16:9c:ec:38:8d:27:69:48:02:03:6c:
55:7f:0f:d2:80:a4:c6:c7:95:a6:e8:b2:43:e5:2f:a2:7d:c4:
e8:2e:70:c5:48:13:bd:c8:f8:ce:3f:0a:68:12:04:4f:d9:5f:
98:2c:bf:0a:6b:e2:ec:21:1c:2c:34:5f:0e:90:cf:54:88:a1:
97:e6:7e:ac:19:8b:8b:3d:52:ec:6e:c0:33:b1:33:9a:d7:d1:
bb:fb:ef:70:c5:42:ad:77:fd:ce:03:0c:77:5d:86:18:4e:d0:
6c:04:b9:b8:25:05:79:c6:0e:46:5f:bf:dd:de:4b:81:24:f3:
f5:a2:d4:e2:7e:74:2b:52:77:06:94:11:55:d1:cf:05:06:ab:
f9:ec:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:50 2024 by rpki-client on console-fra.rpki-client.org