Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/CL3A3JAdH-QthSdCzs99dz9NvH8.roa
File: CL3A3JAdH-QthSdCzs99dz9NvH8.roa (raw, json)
Hash identifier: QDhM4f+9XUWr13F0eAdLEpGAfTBmsdN9XjGgauvv36E=
Subject key identifier: 08:BD:C0:DC:90:1D:1F:E4:2D:85:27:42:CE:CF:7D:77:3F:4D:BC:7F
Certificate issuer: /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial: 0189870C8C8A0C8BF02D007202DAA2A2E025
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/CL3A3JAdH-QthSdCzs99dz9NvH8.roa
Signing time: Mon 24 Jul 2023 08:38:13 +0000
ROA not before: Mon 24 Jul 2023 08:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 188.214.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:0c:8c:8a:0c:8b:f0:2d:00:72:02:da:a2:a2:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Validity
Not Before: Jul 24 08:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08bdc0dc901d1fe42d852742cecf7d773f4dbc7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:7f:61:ac:99:2f:52:4c:84:39:ff:a2:24:
1d:9c:66:d0:fe:f3:6b:a1:a3:7d:bc:17:07:3b:6e:
d8:4c:1f:1c:a1:07:a6:b2:69:0f:74:1e:1f:53:19:
52:eb:31:58:8c:37:56:bf:24:df:f0:64:44:4a:0b:
b4:53:40:f2:8f:54:83:b3:f5:29:35:10:19:39:93:
54:09:37:cd:4c:18:f7:47:4d:6e:ab:58:6b:51:c3:
50:4c:79:ac:ee:4a:8b:58:5c:39:f6:ef:a8:b1:43:
7d:0f:25:c5:d0:c2:99:ad:a5:40:6d:71:5d:8f:3b:
20:cd:fc:e9:88:3c:7c:ca:34:8d:1b:cd:11:2f:bb:
ea:9d:50:54:01:a8:e7:2c:bb:0e:39:a8:c8:bd:f8:
53:95:17:dd:cf:4c:d4:c7:87:7a:eb:0f:69:2b:b7:
04:96:16:4e:14:72:66:33:7b:19:0c:53:55:d0:a9:
34:21:ce:84:6b:9f:b7:41:4b:ff:b5:c6:60:cf:3d:
4b:77:12:45:f2:1c:37:8a:a0:f3:5d:b6:f8:4d:d0:
03:33:f5:47:c8:b9:5e:47:ed:f3:84:4f:8a:2e:ea:
93:c6:41:57:36:51:1b:c9:2d:66:0b:ea:7c:4e:fc:
9c:14:df:03:b1:21:55:f4:2b:92:a2:ee:9e:9b:52:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:C0:DC:90:1D:1F:E4:2D:85:27:42:CE:CF:7D:77:3F:4D:BC:7F
X509v3 Authority Key Identifier:
keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/CL3A3JAdH-QthSdCzs99dz9NvH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a8:4d:c6:d9:c5:ac:d6:8e:4f:0a:96:32:80:f6:95:71:d9:
27:fe:3e:cd:31:7b:dc:7a:dd:28:3d:0a:9e:4b:39:7a:99:81:
57:d1:80:e8:53:d9:53:12:0c:fb:a4:a7:d3:d5:f6:21:9c:e9:
89:28:4a:7a:36:76:c3:65:6f:d9:56:ae:87:01:86:b5:a1:71:
04:3f:45:44:0f:7a:48:34:a9:9a:61:94:d2:55:8a:ee:94:f9:
76:ef:31:b9:f2:b1:d1:c9:ef:1b:a2:ee:87:5f:8f:1d:f0:19:
14:11:db:4a:15:03:28:be:69:e4:bf:fa:99:fa:ef:56:ae:bd:
ab:2f:d0:7a:1d:84:43:bb:64:fd:a0:48:92:f8:30:5d:3e:13:
74:c3:8f:74:1b:24:a3:9f:fa:6f:e1:fb:c7:82:df:be:f3:80:
a8:d5:7f:d6:fd:4b:a9:4c:9b:db:5f:db:12:e8:a4:fe:d4:25:
e4:28:9d:fa:3d:6c:72:2d:48:bc:54:85:8d:37:68:a3:f1:4d:
77:51:52:6e:a4:7d:f8:d7:0a:ee:23:6a:b6:52:70:d8:0c:77:
d2:ea:12:fb:7a:eb:91:34:f4:52:93:f1:4b:78:eb:3f:17:95:
6d:d0:2c:ef:21:69:40:6c:c4:af:80:f1:ee:65:ff:7c:4a:13:
47:fd:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:06 2024 by rpki-client on console-ams.rpki-client.org