Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/H7hSLwlnkYw88w9EehKkQbYzm8Y.roa
File: H7hSLwlnkYw88w9EehKkQbYzm8Y.roa (raw, json)
Hash identifier: eARxbg+UgxlmJB9Bdi4f5GGyPuH7++4YGO5Ra0JewQA=
Subject key identifier: 1F:B8:52:2F:09:67:91:8C:3C:F3:0F:44:7A:12:A4:41:B6:33:9B:C6
Certificate issuer: /CN=d57c4f76e5f97038e94c8f446aca8313035d3ed8
Certificate serial: 0188303D75444F388E99FA52A311BCD8DC97
Authority key identifier: D5:7C:4F:76:E5:F9:70:38:E9:4C:8F:44:6A:CA:83:13:03:5D:3E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XxPduX5cDjpTI9EasqDEwNdPtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/H7hSLwlnkYw88w9EehKkQbYzm8Y.roa
Signing time: Thu 18 May 2023 19:01:54 +0000
ROA not before: Thu 18 May 2023 19:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 88.151.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:3d:75:44:4f:38:8e:99:fa:52:a3:11:bc:d8:dc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c4f76e5f97038e94c8f446aca8313035d3ed8
Validity
Not Before: May 18 19:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fb8522f0967918c3cf30f447a12a441b6339bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:b4:b8:06:8f:d2:6c:91:5f:ac:83:7c:83:
f9:fe:77:95:9c:4f:92:a4:83:69:df:27:4b:07:2f:
04:81:22:87:b1:57:29:12:8a:a5:ea:d3:5f:e6:7f:
3c:91:83:50:90:38:0d:53:47:dd:1c:a7:20:cc:0b:
86:86:2f:b3:a4:e4:9b:79:6d:fa:a3:c6:06:b3:c6:
ee:93:65:d9:53:cc:a7:b9:02:76:18:c0:68:bb:e1:
ac:da:16:1d:c2:ed:44:13:f9:65:19:13:d3:28:bf:
00:36:a6:88:bd:64:48:f1:34:87:6b:74:4b:84:5b:
3e:bb:13:f6:45:18:6c:37:5c:c2:70:d8:d1:a6:f2:
16:db:ab:43:12:ef:b1:2f:6b:87:e4:19:20:9f:ce:
17:b5:0f:93:e0:e7:fb:29:81:76:9b:ae:68:b9:87:
d9:b3:50:e2:9d:ca:f9:53:a6:05:f4:6d:ba:29:df:
8b:6f:28:1f:57:e3:17:cf:6a:c0:a0:24:2e:fc:81:
6e:c5:29:9a:93:8c:07:44:72:16:c2:9b:ff:24:ba:
0e:11:6b:bd:e8:e1:ce:84:ca:30:e2:34:57:c8:96:
7f:8b:75:b8:ec:74:92:16:4f:fa:7d:b7:e1:7e:36:
44:d6:ce:a8:fc:70:cb:d0:e4:b5:0b:fc:a8:5d:ea:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:52:2F:09:67:91:8C:3C:F3:0F:44:7A:12:A4:41:B6:33:9B:C6
X509v3 Authority Key Identifier:
keyid:D5:7C:4F:76:E5:F9:70:38:E9:4C:8F:44:6A:CA:83:13:03:5D:3E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XxPduX5cDjpTI9EasqDEwNdPtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/H7hSLwlnkYw88w9EehKkQbYzm8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/1XxPduX5cDjpTI9EasqDEwNdPtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:16:4f:12:7a:7d:f9:77:8a:21:6e:b4:48:e9:0c:03:9d:d1:
87:6c:e0:dc:d6:36:f7:0a:ab:50:d5:60:ab:2e:68:da:22:7d:
94:f8:4b:f7:aa:09:88:90:6f:59:dc:d9:e1:2a:a2:d9:f8:dd:
aa:9e:78:18:02:05:a5:3b:81:a5:6b:e1:ca:dc:1d:b3:91:55:
91:61:87:8e:b2:53:7e:14:f5:bf:4e:c9:cb:2a:c9:c2:01:f9:
50:01:0c:d3:67:2b:ca:79:3e:d1:eb:ca:7e:2a:e2:f7:ee:4d:
7f:4b:76:bc:6d:14:82:bf:7c:64:53:0e:45:66:3e:2c:81:32:
8a:53:0c:75:e2:75:b3:b3:f6:5d:b5:05:46:91:a5:f9:66:e2:
70:5f:a1:fa:d4:8a:54:05:d1:92:17:c4:59:ad:9d:45:3b:85:
38:ac:fd:ee:73:84:3c:13:88:16:e2:40:13:ed:a2:4d:36:a7:
f3:d6:99:ca:a6:13:e5:f0:69:80:c7:8d:24:b7:4e:8f:51:f5:
74:56:8e:97:e8:5b:dd:67:86:cd:05:6f:73:48:38:51:ee:1d:
1a:8b:13:35:19:c0:a5:84:76:f8:08:37:87:d3:b9:f4:53:e5:
1a:99:c0:8e:5a:14:66:da:8e:20:91:5c:12:e2:38:fa:87:da:
bf:b7:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org