Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/gLhrPpPR8ivmGTY6yS9cqfvrncU.roa
File: gLhrPpPR8ivmGTY6yS9cqfvrncU.roa (raw, json)
Hash identifier: /YHr8kMjL60j2OOao7K9YrqZr5h8vvbclv95IQ5i8wc=
Subject key identifier: 80:B8:6B:3E:93:D1:F2:2B:E6:19:36:3A:C9:2F:5C:A9:FB:EB:9D:C5
Certificate issuer: /CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
Certificate serial: 01891AF78AEA3209AC60FDBFF6DDC2246D1A
Authority key identifier: FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/gLhrPpPR8ivmGTY6yS9cqfvrncU.roa
Signing time: Mon 03 Jul 2023 08:56:17 +0000
ROA not before: Mon 03 Jul 2023 08:56:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 188.95.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:f7:8a:ea:32:09:ac:60:fd:bf:f6:dd:c2:24:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
Validity
Not Before: Jul 3 08:56:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b86b3e93d1f22be619363ac92f5ca9fbeb9dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:32:23:01:85:19:ec:3b:df:26:aa:03:aa:
b0:2f:e2:af:13:e0:48:df:2b:e7:8b:53:a2:c7:2e:
39:7b:09:b1:60:1e:55:93:32:87:08:fd:77:95:25:
f8:22:d1:49:95:56:fe:49:40:9b:32:2b:24:64:b2:
99:8f:a8:40:d7:56:58:ce:8e:a5:00:bc:ab:53:f4:
90:75:d1:2d:b9:84:f0:4a:db:92:73:48:44:7e:5d:
a9:7e:cc:02:2a:5b:1a:94:ca:88:32:60:d5:85:ff:
6e:bd:cf:2a:2f:20:23:a5:67:0b:2f:25:e5:fb:56:
90:bf:14:36:ce:2f:3b:a7:b7:5f:84:b4:ca:df:66:
de:ab:bb:8f:75:44:d3:d3:51:51:a2:10:48:25:a1:
72:6a:d8:3d:0f:3a:22:d1:24:49:4f:18:e3:3a:99:
17:3f:5e:d8:58:16:eb:f1:c1:c1:60:6d:d3:e9:58:
f7:fe:84:9f:06:05:96:4c:93:0e:95:f4:3f:7e:a7:
e3:7a:28:f1:28:74:b9:ea:ee:09:3c:a7:40:f2:f0:
76:a2:81:15:68:6e:c4:83:41:c3:22:fe:ab:e7:e6:
79:cc:1f:3d:4a:b2:64:5a:c2:0f:00:cf:64:17:bc:
4f:77:5d:5b:4a:83:d3:b7:6d:ac:c5:42:2a:23:a0:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B8:6B:3E:93:D1:F2:2B:E6:19:36:3A:C9:2F:5C:A9:FB:EB:9D:C5
X509v3 Authority Key Identifier:
keyid:FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/gLhrPpPR8ivmGTY6yS9cqfvrncU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d6:40:9a:16:be:6b:3f:e7:ee:6d:7e:db:0d:53:ad:ca:fc:
65:b1:5f:e5:2f:f2:62:ad:5f:5e:d5:d1:e3:52:6e:34:06:f2:
55:8d:ed:12:44:80:de:bd:1d:3b:bb:47:21:ab:c6:92:1d:4a:
d8:0e:39:89:31:9d:5c:9e:ba:b5:b3:db:c7:1f:b8:33:bc:aa:
ca:cc:58:e8:dc:a0:45:f6:14:4f:5d:41:cc:51:5d:61:bb:76:
6a:a1:6a:d1:30:22:dc:da:38:89:5d:6d:5b:2f:77:15:e6:cc:
ed:29:e7:92:af:8e:19:e0:7d:47:41:bd:82:a2:3b:08:ab:d0:
ef:f3:2f:05:2e:69:7b:0a:40:17:9c:04:45:30:af:7e:9d:8c:
70:c3:f1:52:b5:0b:95:a4:f5:b7:b3:16:79:c6:3d:a6:bc:81:
1e:92:fb:16:84:3c:fe:bc:8a:71:28:ae:91:af:86:b6:13:90:
17:d2:81:14:58:7c:8b:63:f2:3e:a3:d1:b7:ac:05:ab:b4:66:
31:da:e6:90:fa:8e:82:af:34:72:e5:ba:d6:03:6b:65:6e:48:
16:cf:d1:6a:01:32:08:45:0f:8e:bc:72:af:4d:a3:0b:3a:67:
47:c6:61:a8:c3:a8:a3:ed:70:75:a1:c2:b1:86:ae:01:78:c5:
fa:15:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 12:34:12 2023 by rpki-client on console-fra.rpki-client.org