Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B2mMVsFy2RR09FkoK3tKsXxVC7E.roa
File: B2mMVsFy2RR09FkoK3tKsXxVC7E.roa (raw, json)
Hash identifier: lJF3Qaje4qslrNOHpEoSDkct7ySwnD8Z78AlPKcemlY=
Subject key identifier: 07:69:8C:56:C1:72:D9:14:74:F4:59:28:2B:7B:4A:B1:7C:55:0B:B1
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD525B6E4A50B31E4AED7E697CDB0F2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B2mMVsFy2RR09FkoK3tKsXxVC7E.roa
Signing time: Mon 02 Jan 2023 00:15:17 +0000
ROA not before: Mon 02 Jan 2023 00:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48556
IP address blocks: 188.241.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:25:b6:e4:a5:0b:31:e4:ae:d7:e6:97:cd:b0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07698c56c172d91474f459282b7b4ab17c550bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:90:81:6e:bf:61:8d:42:f0:55:83:30:e6:
e6:10:ed:84:38:38:9e:77:df:83:cb:10:55:c5:cd:
d7:96:f0:97:14:73:98:f7:e9:65:61:ff:5c:2c:5e:
3f:7c:6d:c0:04:0d:e8:6a:53:a8:4a:61:0f:dd:e8:
da:33:2d:50:71:9d:0a:13:72:29:00:a1:f2:23:98:
ae:fe:38:8e:c9:c6:11:e2:df:d4:00:8e:4a:ec:47:
5b:ea:9b:46:e0:32:ea:cf:5f:dd:ce:66:30:b0:c0:
a0:3d:61:7e:18:ef:bd:08:e7:5b:cd:9f:4d:91:e8:
15:3e:b2:c1:3b:dd:22:00:a5:49:58:13:53:1c:50:
14:bb:6c:0d:d8:42:c7:3e:e8:eb:f7:b4:e5:85:ae:
2f:85:4c:fc:ad:47:a4:bf:25:c9:1c:22:4d:77:39:
dd:c4:d6:b8:69:47:c1:8e:e3:c9:0f:ad:93:af:cb:
b8:e3:47:cc:e7:29:44:7a:d2:a3:22:7b:d3:e8:aa:
8b:34:e4:a2:de:d8:91:6f:8c:28:23:c5:b9:86:e8:
4a:3b:c9:4d:d0:ea:73:98:b0:96:bd:e3:48:01:08:
eb:92:81:3e:01:32:3c:7c:ef:94:ad:f1:86:90:b5:
7e:04:ea:54:09:c6:bd:c2:7d:98:8e:bf:65:86:63:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:69:8C:56:C1:72:D9:14:74:F4:59:28:2B:7B:4A:B1:7C:55:0B:B1
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/B2mMVsFy2RR09FkoK3tKsXxVC7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.109.0/24
Signature Algorithm: sha256WithRSAEncryption
21:33:ea:52:3b:a2:05:9c:16:2e:3a:b0:e2:f7:6a:6f:2f:13:
15:03:97:a1:15:73:11:04:d5:11:26:e8:b5:1e:0e:7d:dd:ef:
8b:2d:51:8f:7a:80:18:bb:67:51:24:13:8f:a1:10:4d:de:72:
c4:58:72:0d:ac:c8:ae:b6:d4:c4:17:90:42:c4:36:03:b4:c2:
2a:24:3f:99:a5:30:c1:c1:ef:98:4d:30:fc:ed:e7:ad:85:d1:
03:93:3e:30:74:3b:a4:df:63:18:66:d1:d5:1e:fa:bc:cb:cf:
3e:69:23:99:90:c9:b1:c0:3f:43:c3:80:5e:bc:30:25:d3:0a:
b6:3c:53:67:12:1f:5d:c4:84:07:5d:9c:3a:54:56:87:e0:4a:
66:e3:48:71:96:1b:ca:d6:e7:5d:0b:60:11:58:13:f4:53:00:
91:01:49:cb:a3:3c:46:c6:98:5a:11:f3:0c:c9:e4:20:d3:2a:
b7:4a:7f:7a:64:41:b3:06:ea:5f:07:81:78:dc:64:c5:5b:e1:
9d:41:3d:fb:de:e4:05:d0:a4:97:ce:52:f8:cf:19:7a:cc:e5:
9c:be:fc:2a:d4:f3:17:22:47:5d:de:e5:a2:7d:82:86:31:4f:
e9:72:b7:cd:a5:9f:c2:a8:17:c8:a3:e9:82:ea:a7:88:5c:1c:
e8:6b:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:03 2025 by rpki-client