Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/lemsqTf7FBtlyXZVtTzYihmKIGc.roa
File: lemsqTf7FBtlyXZVtTzYihmKIGc.roa (raw, json)
Hash identifier: ys6VgqJqfoSM1hPJYd1HmiapClGC5OiDfSnIxbz2BU0=
Subject key identifier: 95:E9:AC:A9:37:FB:14:1B:65:C9:76:55:B5:3C:D8:8A:19:8A:20:67
Certificate issuer: /CN=399688ba8fe2baf62d39d1924b4c628e9541672d
Certificate serial: 018B6BE236D38FB4BDDEB5C9E6A0B9B0EB04
Authority key identifier: 39:96:88:BA:8F:E2:BA:F6:2D:39:D1:92:4B:4C:62:8E:95:41:67:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZaIuo_iuvYtOdGSS0xijpVBZy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/lemsqTf7FBtlyXZVtTzYihmKIGc.roa
Signing time: Thu 26 Oct 2023 12:07:49 +0000
ROA not before: Thu 26 Oct 2023 12:07:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34907
IP address blocks: 188.93.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:e2:36:d3:8f:b4:bd:de:b5:c9:e6:a0:b9:b0:eb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399688ba8fe2baf62d39d1924b4c628e9541672d
Validity
Not Before: Oct 26 12:07:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95e9aca937fb141b65c97655b53cd88a198a2067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:39:91:18:2e:e0:71:87:fa:ad:bf:87:02:
de:65:e3:8b:99:e3:60:48:bc:1b:42:0c:96:3a:50:
56:ab:3b:70:bf:2b:93:fd:91:15:ee:f1:a0:7d:6a:
22:2f:bc:c2:97:79:f8:20:ae:52:6c:d8:56:ad:0d:
2b:69:6a:b8:b7:54:20:9c:4c:b4:c0:87:30:ed:1c:
dd:5f:35:ed:ba:da:33:3d:35:df:d0:ad:db:49:dd:
df:33:ec:f3:79:a5:cd:9d:00:ab:94:1c:5f:37:f4:
fd:75:96:77:4c:b7:b0:4a:e6:21:0e:98:20:3e:f2:
68:e0:47:5b:2c:9d:29:c7:28:24:4a:67:4e:41:da:
c4:cd:60:1a:5e:47:93:23:22:c5:98:45:44:54:68:
8b:03:7f:7c:ce:cd:1b:95:7a:5e:01:c8:5f:36:93:
c4:56:e4:d7:13:1d:c5:1f:88:af:69:cc:c7:7d:4b:
68:12:33:c5:31:58:b1:7c:f0:37:09:0d:fc:42:eb:
87:a4:31:4b:3f:d1:5b:3b:e3:31:66:29:00:12:bf:
f4:e3:3c:6f:4c:2a:7a:6c:5f:8b:ae:3c:84:e7:06:
ff:0c:1f:ff:c8:93:d1:32:58:e4:96:52:93:4c:68:
98:5b:7f:85:90:91:92:b6:32:44:11:da:9b:99:ba:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:AC:A9:37:FB:14:1B:65:C9:76:55:B5:3C:D8:8A:19:8A:20:67
X509v3 Authority Key Identifier:
keyid:39:96:88:BA:8F:E2:BA:F6:2D:39:D1:92:4B:4C:62:8E:95:41:67:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZaIuo_iuvYtOdGSS0xijpVBZy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/lemsqTf7FBtlyXZVtTzYihmKIGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/OZaIuo_iuvYtOdGSS0xijpVBZy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
38:15:82:7e:af:f7:21:c1:b8:15:2d:cf:a0:e2:05:11:42:db:
d8:7a:f6:4a:27:ce:5c:81:b8:ba:91:43:a4:bc:5e:1b:b9:f5:
0a:ed:10:1b:58:2e:b7:9f:4c:67:f9:92:58:c7:c9:37:f0:68:
00:97:93:b3:d6:54:de:74:c9:7b:08:ec:56:62:fb:f3:ea:a7:
82:71:d4:50:0f:10:dd:8d:46:6d:e0:21:02:47:4c:97:72:d6:
c8:04:9d:12:51:86:2f:98:e8:c3:ed:0a:46:96:dd:e6:78:f5:
20:01:f2:64:c2:3c:17:90:07:24:58:9c:9a:9e:e9:67:f3:5f:
73:f3:19:21:27:ce:cc:33:00:ad:ac:c1:b3:fd:c1:a9:7d:30:
a4:5d:da:51:c6:9c:e9:ea:16:4a:08:28:bc:bb:d3:38:f2:a6:
05:23:ba:67:ff:bc:d8:3f:e3:69:50:93:e4:50:d8:ae:43:2d:
bd:9b:70:f9:85:f0:eb:a1:a1:f3:54:04:68:51:ea:74:b4:53:
b6:d3:00:bb:48:4c:ce:ae:b1:79:ac:d7:53:11:30:84:87:0e:
5d:70:9e:8b:9d:ac:34:c7:98:a2:cd:fd:1d:d1:6f:df:66:2d:
27:9e:c9:a3:e4:67:c7:20:3d:1f:05:8c:1c:e9:33:00:01:99:
80:ee:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 16:25:07 2023 by rpki-client on console-fra.rpki-client.org