Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/oV8MB49A7-JOqPhYzSfDF9-7mDY.roa
File: oV8MB49A7-JOqPhYzSfDF9-7mDY.roa (raw, json)
Hash identifier: G7VLXoi8q7TO020sOt67cYA7uffIp6Dyu4pB/twfCvo=
Subject key identifier: A1:5F:0C:07:8F:40:EF:E2:4E:A8:F8:58:CD:27:C3:17:DF:BB:98:36
Certificate issuer: /CN=195ab84268c904c825a4f09eb040d1f72e112331
Certificate serial: 0189654ABFDC43BF2126D04EDF30F88FC128
Authority key identifier: 19:5A:B8:42:68:C9:04:C8:25:A4:F0:9E:B0:40:D1:F7:2E:11:23:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVq4QmjJBMglpPCesEDR9y4RIzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/oV8MB49A7-JOqPhYzSfDF9-7mDY.roa
Signing time: Mon 17 Jul 2023 19:19:04 +0000
ROA not before: Mon 17 Jul 2023 19:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 88.151.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:bf:dc:43:bf:21:26:d0:4e:df:30:f8:8f:c1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195ab84268c904c825a4f09eb040d1f72e112331
Validity
Not Before: Jul 17 19:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a15f0c078f40efe24ea8f858cd27c317dfbb9836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:08:58:54:78:f9:7a:23:bd:33:27:c6:95:
a1:05:b4:90:d1:3e:9d:fd:7f:4d:98:5c:80:75:c5:
08:a0:47:14:d4:af:b6:5d:39:8b:10:04:65:28:fa:
f4:f8:23:ce:db:a6:87:a8:bf:b1:d1:b8:d5:27:c6:
0b:77:7d:4d:9e:36:62:aa:ee:c6:e2:66:2d:b6:98:
8f:30:0d:55:1d:ca:41:f2:b7:40:35:47:08:10:36:
c2:a9:cf:1d:a7:2d:13:7d:17:9c:1d:6e:1b:00:e8:
82:81:7e:51:54:83:90:b8:bd:ef:7d:d5:0a:d8:5c:
a6:fa:5c:08:7d:2c:8a:ac:97:bb:2a:56:17:2d:72:
57:3c:2f:a4:3e:e2:51:98:9a:c5:4b:85:58:28:44:
b2:c5:d1:24:80:0d:4f:4f:79:d7:31:f9:48:68:a9:
c8:38:13:e9:76:86:d1:2d:61:e5:dc:32:89:ec:12:
42:e2:ce:82:ef:2f:8e:3d:58:2d:8e:49:00:4e:83:
82:5a:91:53:01:c8:c4:c9:7b:dd:d0:0e:70:f3:2b:
59:0a:b1:bc:f3:7d:10:da:29:d8:ba:3c:52:d5:d8:
1d:c8:e3:49:68:fe:a9:74:fb:79:b8:8d:65:0a:a8:
01:40:3c:98:df:35:52:dd:63:b1:e2:c1:1f:70:ca:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:0C:07:8F:40:EF:E2:4E:A8:F8:58:CD:27:C3:17:DF:BB:98:36
X509v3 Authority Key Identifier:
keyid:19:5A:B8:42:68:C9:04:C8:25:A4:F0:9E:B0:40:D1:F7:2E:11:23:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVq4QmjJBMglpPCesEDR9y4RIzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/oV8MB49A7-JOqPhYzSfDF9-7mDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3cdcde-2cfb-4430-bbe5-47abd76ea672/1/GVq4QmjJBMglpPCesEDR9y4RIzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:74:3b:78:c2:05:63:93:9c:53:c9:37:63:84:42:af:97:0d:
61:c2:3f:1c:ed:61:f7:10:f4:52:b2:9c:2c:96:b1:e5:7d:00:
35:ac:11:ed:6a:c2:55:0e:aa:d2:94:48:5f:47:75:47:8b:c7:
99:21:cd:ec:ad:de:e2:57:b9:3f:ff:0e:96:e5:e0:2b:fa:38:
ad:80:df:92:1f:27:1d:d1:1a:dc:02:a6:5c:10:3e:06:95:c5:
3c:75:c3:95:2a:24:05:61:8f:b8:84:a3:17:ee:b9:38:39:6a:
66:9c:38:41:15:86:cd:6b:f2:62:19:30:14:3f:20:7b:7d:65:
02:05:39:ab:b3:37:91:2f:db:27:dd:3d:b5:7b:f8:10:31:23:
ef:05:ea:31:d1:b2:24:39:54:56:c0:2d:60:03:e9:f4:c6:02:
61:c8:6c:58:46:a4:0b:0e:36:c2:0c:fb:c4:f0:51:a2:12:7b:
1a:5e:99:df:b0:ce:e4:c7:c0:58:4c:58:3c:33:4c:18:f6:3a:
57:98:ea:cc:1e:1c:83:f7:0e:97:3c:30:cf:f4:8a:aa:48:a7:
9c:07:6e:d1:d7:84:7c:34:78:ca:d0:79:e8:79:cd:1b:1b:d6:
93:34:bf:78:8e:f0:38:9a:23:41:f7:9d:cd:05:d7:01:7e:3a:
2e:6f:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 07:20:47 2023 by rpki-client on console-fra.rpki-client.org