Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/iet9qdWDjOeIvOKyDQASHpRyCvo.roa
File: iet9qdWDjOeIvOKyDQASHpRyCvo.roa (raw, json)
Hash identifier: bneA61OV1IPK5TPLxb0gFLzl9WTeGSV5sc4MqHlhG4c=
Subject key identifier: 89:EB:7D:A9:D5:83:8C:E7:88:BC:E2:B2:0D:00:12:1E:94:72:0A:FA
Certificate issuer: /CN=8c3988516b1e6820b436a849f7c20df3192a48aa
Certificate serial: 0185719551B53DAE89BE59D3A3876FF024AB
Authority key identifier: 8C:39:88:51:6B:1E:68:20:B4:36:A8:49:F7:C2:0D:F3:19:2A:48:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDmIUWseaCC0NqhJ98IN8xkqSKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/iet9qdWDjOeIvOKyDQASHpRyCvo.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209725
IP address blocks: 88.218.124.0/24 maxlen: 24
88.218.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:51:b5:3d:ae:89:be:59:d3:a3:87:6f:f0:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3988516b1e6820b436a849f7c20df3192a48aa
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89eb7da9d5838ce788bce2b20d00121e94720afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:a8:f9:e1:68:dc:52:cd:36:a2:be:e7:4b:
a7:53:44:73:57:e8:a4:4b:c4:a2:82:96:fa:79:09:
54:32:50:af:74:69:1c:4a:63:f8:f2:c1:8b:f1:b3:
53:ab:2d:ae:7d:b4:71:df:97:c8:4f:7a:ab:24:5d:
47:a4:dd:53:e6:98:43:9c:2d:a0:07:26:6f:8b:25:
94:6c:28:06:c4:70:d4:88:c7:7f:78:c4:b2:c7:47:
69:09:4f:f7:cf:44:94:71:11:34:bd:c7:b4:d7:de:
55:d8:3d:d1:11:02:78:23:89:3a:08:a2:9f:87:f6:
a6:93:4b:ad:1b:00:ec:b7:31:8c:df:08:e0:04:89:
fc:dd:47:ac:36:1f:c9:5e:48:2b:10:eb:d5:e2:88:
13:f3:e8:a5:1f:61:e4:3f:5c:80:dd:97:30:04:50:
2a:1b:63:5c:93:02:b0:24:f7:be:6e:4a:eb:24:74:
c0:8b:fe:b6:9d:96:c2:12:b2:8b:af:6e:81:ab:55:
8d:45:e5:4a:02:79:2d:56:06:af:db:7c:b4:5f:30:
7d:55:ac:9b:eb:a6:bd:78:c2:58:1e:65:ac:0a:20:
8d:1f:72:5a:20:f7:80:e1:7d:ed:36:41:55:8a:c1:
dc:6c:65:c9:42:a0:94:f9:bf:26:7c:a5:a9:17:d9:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:7D:A9:D5:83:8C:E7:88:BC:E2:B2:0D:00:12:1E:94:72:0A:FA
X509v3 Authority Key Identifier:
keyid:8C:39:88:51:6B:1E:68:20:B4:36:A8:49:F7:C2:0D:F3:19:2A:48:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDmIUWseaCC0NqhJ98IN8xkqSKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/iet9qdWDjOeIvOKyDQASHpRyCvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7d606a-12e3-4dae-9d0c-0eadebd52955/1/jDmIUWseaCC0NqhJ98IN8xkqSKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.124.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d9:49:81:ce:6c:51:0f:be:16:4d:cc:c4:d2:a3:74:5a:3f:
12:89:2d:37:80:ad:50:7f:93:4f:df:5b:ee:28:e2:b1:ab:28:
b4:31:37:1e:03:f8:f3:d5:84:77:a6:fc:49:72:c7:2f:91:4b:
43:d5:6d:a0:9a:cd:91:33:ef:df:24:fd:e6:05:72:fc:d9:92:
2c:c1:df:c6:2e:aa:ed:fb:80:67:ff:25:2d:90:4a:13:c7:d7:
aa:be:34:47:50:8e:82:95:97:e4:ff:c2:af:52:d0:49:20:77:
0f:cd:6d:e7:a7:da:8a:65:c4:a2:9c:d8:52:6b:3b:ee:34:2c:
39:f6:24:04:63:14:77:f8:dc:29:ef:08:57:4c:54:f3:6f:ca:
44:e3:23:7e:d3:de:64:11:b7:a2:7e:90:e9:8e:de:db:1b:61:
cd:30:da:87:0a:06:1b:09:9e:64:41:5a:18:89:b1:99:b6:17:
fb:ef:7e:75:c9:9a:f1:0f:29:65:99:af:20:8d:63:68:dc:08:
d5:d0:2b:34:7a:c6:15:72:b5:9d:b3:84:20:e4:41:66:50:97:
15:38:07:71:23:59:69:5c:1d:c6:bd:b1:56:5f:a6:c3:2b:d7:
fd:1b:e1:7b:8b:d4:d8:bd:6a:89:a9:d9:a1:a5:7d:18:86:d8:
21:cd:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:37 2024 by rpki-client on console-ams.rpki-client.org