Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/mfKU8kqBAOw9WuQcjJn6UD_KaOA.roa
File: mfKU8kqBAOw9WuQcjJn6UD_KaOA.roa (raw, json)
Hash identifier: XCinILuCooWLCvwYpPj298oejEFxEmKNtYSSjNIJDqM=
Subject key identifier: 99:F2:94:F2:4A:81:00:EC:3D:5A:E4:1C:8C:99:FA:50:3F:CA:68:E0
Certificate issuer: /CN=d251a73c2a9bb6f9d5c88e0b39888c8a95c57f82
Certificate serial: 01891DEB5F2FDCC2EF989CABAB622592B1FF
Authority key identifier: D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lGnPCqbtvnVyI4LOYiMipXFf4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/mfKU8kqBAOw9WuQcjJn6UD_KaOA.roa
Signing time: Mon 03 Jul 2023 22:41:51 +0000
ROA not before: Mon 03 Jul 2023 22:41:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 178.23.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1d:eb:5f:2f:dc:c2:ef:98:9c:ab:ab:62:25:92:b1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251a73c2a9bb6f9d5c88e0b39888c8a95c57f82
Validity
Not Before: Jul 3 22:41:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f294f24a8100ec3d5ae41c8c99fa503fca68e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:4c:9d:5e:5e:08:1f:bd:57:e7:58:1c:cc:
9e:f7:2e:7c:e1:c4:b4:6d:56:cc:a7:ac:70:00:ef:
3c:71:e9:9a:72:d5:3b:00:28:72:37:54:a1:6e:0f:
d5:cb:e1:60:46:5b:aa:e1:b2:32:4b:b3:ac:62:5b:
e7:30:dc:9b:90:ab:e7:ea:20:e4:4c:2f:76:ce:78:
51:92:bf:c0:f5:9a:58:ab:54:b3:57:f3:2e:25:cc:
b1:86:48:fc:3a:b6:c8:ff:f4:e6:54:81:dc:3f:77:
1f:8d:bc:d5:de:26:80:36:18:cf:cc:ca:5e:95:3d:
4f:6c:b4:20:a9:f7:54:90:8f:3f:60:e4:90:fb:95:
f0:e2:03:01:ff:76:08:5f:ad:dd:11:07:c3:55:d9:
12:54:53:2c:4e:47:45:66:30:ff:e4:2a:58:b3:4c:
4f:4a:66:a4:76:f5:9a:d1:32:97:4a:85:ab:3f:81:
43:b3:3b:b1:3b:f4:0b:ff:4b:9e:20:7d:95:96:54:
d4:53:ad:7e:45:ef:01:88:00:0f:9c:73:76:0f:49:
5d:af:13:18:a5:2e:48:40:7e:03:a3:fd:03:75:1b:
f4:9d:84:69:7c:1e:85:9d:d6:51:7d:7b:89:28:d7:
93:9f:e8:6f:07:f1:6c:a6:5f:f6:a7:d6:4b:bd:a6:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F2:94:F2:4A:81:00:EC:3D:5A:E4:1C:8C:99:FA:50:3F:CA:68:E0
X509v3 Authority Key Identifier:
keyid:D2:51:A7:3C:2A:9B:B6:F9:D5:C8:8E:0B:39:88:8C:8A:95:C5:7F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lGnPCqbtvnVyI4LOYiMipXFf4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/mfKU8kqBAOw9WuQcjJn6UD_KaOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/de08a1-f083-4340-af3e-bfe801a45f1e/1/0lGnPCqbtvnVyI4LOYiMipXFf4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.188.0/24
Signature Algorithm: sha256WithRSAEncryption
30:86:e7:be:bb:be:76:bc:7a:72:fd:db:32:c6:1f:98:ec:38:
a8:b4:33:16:f4:b0:3c:59:76:58:60:56:98:a4:a1:ed:b2:00:
4e:18:da:a9:1a:22:26:58:a4:f0:ca:12:48:57:ae:d8:cd:69:
19:1e:87:dc:c2:cc:59:3d:64:d8:50:44:7c:42:8a:6a:10:7e:
e0:29:11:77:7f:fd:07:f9:0e:d6:85:33:f5:9f:17:f7:04:02:
68:5a:c9:62:22:ee:0f:e1:24:58:ac:c2:1a:89:f9:4c:4c:53:
7a:be:49:c0:e2:26:9f:a6:27:c8:99:92:ae:b2:41:46:54:a1:
61:a2:94:68:08:c5:e7:89:78:fe:0c:21:9c:2e:db:29:6e:86:
9c:35:38:2b:95:20:73:52:57:0d:ce:45:3a:e6:63:fa:a8:d4:
da:59:1a:de:0c:9a:1d:ba:33:2d:60:be:37:94:48:f0:49:83:
2c:58:29:f5:06:17:fe:1e:03:71:6e:84:97:3f:14:12:15:cc:
68:5d:7f:ab:d9:3b:03:7c:b5:24:5a:5b:54:81:cf:65:5c:cc:
52:e8:05:a4:7b:ac:2d:26:d0:b8:8e:55:57:6b:d5:93:c4:af:
1a:55:62:48:6c:c9:68:bb:b0:e8:a7:f5:ad:64:68:47:6a:b5:
7d:d6:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 09:35:34 2023 by rpki-client on console-fra.rpki-client.org