Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/_ieyJv2EgNHZdYFn3I0R_03YD4w.roa
File: _ieyJv2EgNHZdYFn3I0R_03YD4w.roa (raw, json)
Hash identifier: WfmLoswxSlYLOxi4dqtSqPPMNaQLkZCCnbidVEn1FFk=
Subject key identifier: FE:27:B2:26:FD:84:80:D1:D9:75:81:67:DC:8D:11:FF:4D:D8:0F:8C
Certificate issuer: /CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Certificate serial: 0189DE021765521C5EB67AF71ADD6A503372
Authority key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/_ieyJv2EgNHZdYFn3I0R_03YD4w.roa
Signing time: Thu 10 Aug 2023 05:53:46 +0000
ROA not before: Thu 10 Aug 2023 05:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.64.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:02:17:65:52:1c:5e:b6:7a:f7:1a:dd:6a:50:33:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Validity
Not Before: Aug 10 05:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe27b226fd8480d1d9758167dc8d11ff4dd80f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:61:18:5a:32:f4:5d:82:37:74:4d:d8:50:
05:8c:1b:60:08:26:82:96:26:cd:09:e5:60:93:29:
c1:88:01:cd:44:e3:6c:ab:60:39:c7:20:5c:37:83:
4c:2e:ab:72:f9:65:dc:af:51:01:8f:ca:83:aa:e1:
15:f3:c6:d7:e9:1e:bd:c0:d1:cc:e9:8e:db:c1:8d:
2f:40:0a:79:fb:8a:89:a6:5f:06:d3:19:8a:62:bb:
58:0e:ef:7d:45:61:44:03:a4:15:68:e9:9a:0b:9f:
3c:c3:8c:9c:11:4b:48:89:ea:e5:46:a6:f3:3a:9c:
9f:33:58:ed:18:dc:09:a9:40:ad:f2:c6:6d:07:34:
83:2b:f0:64:95:fb:03:2a:13:bc:af:ab:60:d7:f7:
b6:df:e3:07:d3:99:01:41:fd:cf:12:c3:ad:97:ed:
78:42:25:99:bc:48:45:66:0f:0a:05:b6:2d:36:c9:
e8:4c:a2:94:1f:57:f4:b2:fc:27:e4:6f:b0:03:78:
6d:54:6b:0b:1d:0d:a6:8e:e3:74:a9:e9:58:16:4e:
bc:55:42:4d:bd:9c:5a:ca:30:4c:b1:0e:d8:8a:bb:
ee:a8:7a:5e:15:a9:12:7a:81:ea:cb:b5:f3:f0:d2:
a4:46:44:fc:50:33:6c:e6:08:83:f1:af:32:2f:6f:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:27:B2:26:FD:84:80:D1:D9:75:81:67:DC:8D:11:FF:4D:D8:0F:8C
X509v3 Authority Key Identifier:
keyid:02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/_ieyJv2EgNHZdYFn3I0R_03YD4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
07:34:24:a3:ce:5b:e5:74:0d:1f:a7:2d:51:f0:48:0b:9f:dc:
4e:55:f2:77:44:25:63:00:05:7e:b8:76:1e:a2:19:ed:47:4e:
53:7e:92:de:5b:31:03:2f:47:37:20:ef:bf:55:21:a9:53:1f:
32:dd:36:74:60:27:44:ed:23:f9:a6:c2:38:38:ef:6d:33:c2:
78:2b:f1:97:20:26:23:0c:9e:b5:85:c1:dd:4c:8f:46:aa:41:
ef:47:ea:aa:6c:27:c8:3d:57:48:ed:3e:04:ef:1e:9c:27:8f:
d8:86:ed:35:d1:5f:ed:a5:fa:65:a4:65:1d:40:4b:e0:1f:8f:
3e:07:72:06:77:52:62:18:0f:94:19:b6:d7:75:b3:aa:6e:e8:
6d:71:97:98:a4:ba:62:e4:a4:fe:dc:40:5a:20:7a:1c:e9:cc:
81:c9:54:e0:d5:1a:b7:66:17:71:5d:b2:f7:32:f7:96:d2:62:
7d:4b:16:34:48:b3:b3:c4:05:9e:26:67:ae:ec:5a:2b:3d:b8:
fd:be:97:de:40:bf:42:1d:e7:7d:77:89:98:68:60:e2:54:34:
5e:b3:df:41:6b:9f:bd:f4:c4:d3:8a:28:d2:8c:8b:72:df:5c:
b8:84:08:83:47:0e:85:24:41:f1:b6:98:2a:2c:08:81:4b:58:
a2:65:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 14:21:22 2023 by rpki-client on console-fra.rpki-client.org