Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/tr04G7JOABnX4C1Et-MI19PH0ys.roa
File: tr04G7JOABnX4C1Et-MI19PH0ys.roa (raw, json)
Hash identifier: H+lo3nSWNFnOaKOhf/HSFP2XIbesJdHvqXNggWhjeGc=
Subject key identifier: B6:BD:38:1B:B2:4E:00:19:D7:E0:2D:44:B7:E3:08:D7:D3:C7:D3:2B
Certificate issuer: /CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Certificate serial: 01857169AD31C9DE0959AA213A540406A306
Authority key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/tr04G7JOABnX4C1Et-MI19PH0ys.roa
Signing time: Mon 02 Jan 2023 07:37:09 +0000
ROA not before: Mon 02 Jan 2023 07:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 188.64.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ad:31:c9:de:09:59:aa:21:3a:54:04:06:a3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Validity
Not Before: Jan 2 07:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6bd381bb24e0019d7e02d44b7e308d7d3c7d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:41:08:16:98:0b:81:fb:3f:da:1d:cf:d0:
4e:a4:31:ca:ed:72:e7:ea:4a:d9:22:64:dd:60:44:
6e:40:af:1a:e8:00:81:46:fa:bf:f1:01:21:9b:bb:
43:fc:56:6b:61:2e:3e:71:5e:41:35:da:08:71:80:
cb:37:84:11:dc:78:09:c3:df:e0:80:2c:30:05:e1:
6f:9a:24:cc:25:d5:0d:52:c0:2b:d9:92:38:e0:27:
ad:a2:7f:9b:37:18:9a:69:80:2e:fb:ab:b2:b5:41:
51:73:9c:54:51:3b:4a:f7:41:1c:4b:bb:11:ef:70:
db:33:e5:35:dd:c4:60:c1:ce:85:60:29:c5:d8:84:
15:77:d9:84:e8:39:29:a5:ef:e6:18:5b:68:2f:92:
10:a6:e1:6d:c4:4e:4c:7b:4c:12:c6:7c:fb:82:99:
c2:55:bc:11:87:76:71:e0:67:4d:d3:48:3b:85:28:
26:aa:c9:98:15:f4:05:67:aa:2a:f2:6a:13:97:70:
46:6c:b5:56:46:3b:63:45:b5:4b:62:41:df:39:7f:
79:2f:9e:03:65:5a:64:d8:25:b4:67:4e:f8:44:07:
3d:de:46:a3:b0:45:79:5d:0f:bd:bb:fd:61:48:cf:
7d:ca:89:a9:6d:5b:20:71:1e:2c:a7:6b:e4:5d:49:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:38:1B:B2:4E:00:19:D7:E0:2D:44:B7:E3:08:D7:D3:C7:D3:2B
X509v3 Authority Key Identifier:
keyid:02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/tr04G7JOABnX4C1Et-MI19PH0ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a0:7b:05:54:85:3b:6a:b3:fb:57:a5:35:26:7c:2e:7b:b2:
be:80:71:9e:ad:91:c4:f0:b4:18:1d:95:af:1a:53:e2:79:a2:
95:a6:58:5a:75:e7:95:d5:2d:c7:e2:bb:b5:93:3f:fa:78:b9:
09:95:5f:42:35:ce:23:0b:c3:0c:ea:80:84:0d:17:52:01:f2:
7f:a8:ea:93:28:20:c7:b3:33:02:a6:dc:2c:93:0f:69:da:f8:
ab:86:09:8c:c4:af:dd:14:91:c0:66:af:19:87:c1:16:bc:9f:
fb:86:15:b7:fa:96:bb:a7:b3:29:d3:a6:54:71:3a:90:83:22:
4e:c0:05:44:1f:22:50:5f:b6:b4:6a:66:73:4f:62:a4:13:76:
2a:a5:52:48:e1:92:e3:75:bf:7a:13:4a:2e:98:92:51:06:50:
96:99:e8:d5:3e:59:78:ac:9b:0b:a4:3a:b0:13:c8:63:81:6e:
3e:04:a8:0f:8e:20:c5:57:0f:18:99:ec:df:fa:f6:e9:7e:e7:
e4:a6:c9:a8:b6:07:9c:81:34:9c:d9:4e:2b:12:51:0a:63:6e:
2e:d0:ed:42:84:06:88:a9:53:73:86:36:26:e2:f9:dd:3a:9c:
09:ad:88:a9:db:2c:1b:4f:41:20:f9:b0:70:c9:98:03:ef:90:
20:ab:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:56 2025 by rpki-client