Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/KEO3nuJ9gJCoRVhL9gceW9OSl2M.roa
File: KEO3nuJ9gJCoRVhL9gceW9OSl2M.roa (raw, json)
Hash identifier: 4fptjiJZxHQpCKLcmsmsR7ss3cighMJAW3YcyxtKE6I=
Subject key identifier: 28:43:B7:9E:E2:7D:80:90:A8:45:58:4B:F6:07:1E:5B:D3:92:97:63
Certificate issuer: /CN=da01323efafee332064e278b97cb8d1f9d8fef79
Certificate serial: 018BC9BD7083E96CB03F275D9F4CFBA66E81
Authority key identifier: DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/KEO3nuJ9gJCoRVhL9gceW9OSl2M.roa
Signing time: Mon 13 Nov 2023 17:31:57 +0000
ROA not before: Mon 13 Nov 2023 17:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 188.244.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:bd:70:83:e9:6c:b0:3f:27:5d:9f:4c:fb:a6:6e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da01323efafee332064e278b97cb8d1f9d8fef79
Validity
Not Before: Nov 13 17:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2843b79ee27d8090a845584bf6071e5bd3929763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:6a:2b:93:d2:c9:4f:47:e6:12:ae:35:8e:
50:05:79:64:48:49:18:84:6b:de:06:67:db:71:f3:
17:d2:43:0f:10:aa:d9:17:46:82:58:75:48:81:be:
44:95:54:7b:3a:52:5a:60:29:8e:05:c1:23:9d:18:
01:8c:3e:6e:11:ae:a2:01:21:4d:3e:98:6d:5b:11:
86:f1:8c:63:57:36:b1:c4:32:7d:3f:2d:5d:87:2d:
d3:7a:fe:53:e2:e5:a7:d4:53:79:cc:1b:f0:32:52:
03:0b:1c:54:3c:9f:f4:10:44:00:b0:fe:f1:36:df:
6d:19:79:44:d2:76:94:07:8c:2f:81:c8:65:b8:23:
5d:82:fa:0b:e0:fd:9c:16:bf:99:82:f1:ba:ba:53:
f9:83:3c:2b:36:ba:a6:c7:85:1b:13:c1:28:b1:71:
92:0a:d6:16:3c:56:18:16:8c:6b:c3:51:cf:78:6e:
23:38:8c:dc:2c:40:5b:96:01:dd:41:5f:46:99:c1:
6e:d5:60:2e:19:dc:65:ec:b5:c6:46:fa:fe:2e:28:
5f:de:6a:2b:7d:d7:12:2d:2d:0a:25:4f:69:27:eb:
19:61:e7:3c:2c:04:a0:4d:1e:8d:ca:40:91:d7:0a:
db:20:78:76:fb:f5:f9:c6:6f:4a:54:fc:d1:2b:f2:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:43:B7:9E:E2:7D:80:90:A8:45:58:4B:F6:07:1E:5B:D3:92:97:63
X509v3 Authority Key Identifier:
keyid:DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/KEO3nuJ9gJCoRVhL9gceW9OSl2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
09:72:53:ee:9a:30:db:b5:4c:94:c8:62:31:2f:f8:78:d4:14:
c1:4e:ec:d0:8e:ea:eb:ff:4f:d5:a5:fd:44:80:bf:f9:6b:b2:
be:e9:41:86:1c:b6:1b:ae:bc:92:b5:de:4a:d2:3b:97:b7:72:
b1:a4:0a:24:8e:4a:7d:54:83:3f:6f:59:b9:7a:e1:8b:ab:70:
33:25:62:28:12:55:74:37:f1:94:46:20:20:d5:04:74:22:8b:
47:48:68:bd:eb:e1:8c:95:27:1a:95:53:01:04:3d:d6:57:5e:
8a:40:84:fe:ca:15:32:22:f4:aa:61:ee:24:c6:93:b6:a5:e5:
80:b1:e7:47:f8:e0:ab:7d:ef:d4:af:d2:74:63:0f:49:50:bf:
5f:d3:6c:45:52:7e:3a:ed:3d:cd:d8:81:bb:d6:60:62:7d:42:
d5:84:74:58:8c:7c:ba:27:1d:bf:b3:30:bd:e4:23:7a:dd:32:
be:7d:0f:c1:f2:f3:f3:7e:df:72:7a:60:a2:4d:1e:82:70:bd:
17:51:0b:64:3c:97:60:ee:54:3a:37:c8:fd:5b:b0:b0:ef:05:
5e:4d:fe:9e:1c:ad:10:f5:c4:2c:50:01:f5:d1:ca:49:ca:bc:
a1:ae:d2:e1:e0:da:9f:4e:78:b8:ce:1c:f9:1a:2e:f0:29:96:
7a:02:e6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:39 2025 by rpki-client