Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/bPUpJhZL9cz4i0X_q9n-B1oMjnA.roa
File: bPUpJhZL9cz4i0X_q9n-B1oMjnA.roa (raw, json)
Hash identifier: Cx8L+JkxjCgts11JLvt/lWKIm0XPCaUIyp52OzP07V8=
Subject key identifier: 6C:F5:29:26:16:4B:F5:CC:F8:8B:45:FF:AB:D9:FE:07:5A:0C:8E:70
Certificate issuer: /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial: 0CD317
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/bPUpJhZL9cz4i0X_q9n-B1oMjnA.roa
Signing time: Thu 03 Feb 2022 16:57:18 +0000
ROA not before: Thu 03 Feb 2022 16:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 188.208.103.0/24 maxlen: 24
94.176.214.0/23 maxlen: 23
62.192.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840471 (0xcd317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Validity
Not Before: Feb 3 16:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cf52926164bf5ccf88b45ffabd9fe075a0c8e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:4c:70:e6:45:e8:c6:7c:98:c6:a2:c6:9d:
4c:a5:c0:03:c1:c9:de:8b:fe:8c:d6:8e:7e:34:24:
cb:51:1e:45:10:3b:56:0a:72:bc:6a:1b:b9:ff:5a:
2a:67:9f:51:59:f6:fa:6d:a8:a0:db:75:e8:71:e0:
ac:ee:09:5f:da:98:04:cb:7e:7d:60:ed:64:13:7e:
75:38:4d:7f:ae:cb:cd:d9:40:55:2e:98:ce:7a:e0:
c9:3d:eb:2b:0d:73:55:9c:06:70:c8:08:da:90:7f:
a6:29:0c:61:71:e7:9b:b0:7e:8b:60:b6:92:96:36:
b0:7d:9a:3b:60:42:92:14:f7:6a:8a:d7:57:40:28:
cc:d1:59:a4:01:b8:95:49:72:76:a9:4c:be:d8:7f:
ae:72:13:8d:46:c9:da:50:ae:87:28:ac:fb:b7:2a:
90:3b:a8:d1:7d:0e:dd:2a:8e:d2:4c:7c:3b:ce:e6:
a1:11:d2:68:9e:83:8c:c7:22:a9:18:b1:02:d6:16:
f8:69:e2:e7:01:85:4e:6a:45:ce:ea:a0:09:b2:85:
e4:bc:51:48:c1:05:d5:e4:b0:66:36:17:d3:ef:83:
39:c3:d4:d7:f7:de:cf:4f:b8:36:df:15:1f:54:40:
cc:78:ef:d5:48:9b:84:6c:8e:71:37:68:25:62:4c:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:29:26:16:4B:F5:CC:F8:8B:45:FF:AB:D9:FE:07:5A:0C:8E:70
X509v3 Authority Key Identifier:
keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/bPUpJhZL9cz4i0X_q9n-B1oMjnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
94.176.214.0/23
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
44:38:14:c4:36:57:13:68:ca:6c:e0:79:1a:6f:1d:bc:64:50:
89:96:8a:5c:bd:de:cc:5c:42:33:e5:77:98:2c:b6:a5:08:b1:
27:d4:67:ad:ee:7e:ef:05:d2:59:b5:b6:03:e4:7f:00:88:d2:
ee:c2:2d:a2:83:fd:df:d7:d9:e7:d4:c7:9d:80:c4:a3:6d:af:
d9:0f:51:13:55:14:ae:c3:6d:a3:6b:4b:e5:78:d9:94:a9:4e:
f0:83:5f:d2:6d:2a:87:fe:b6:d1:d7:2d:c2:d1:84:0d:4f:bf:
d4:aa:68:e3:99:8c:cf:19:92:81:76:66:26:e9:14:6a:9f:86:
e9:ea:2d:1a:c8:cd:22:27:02:3e:ec:5a:aa:f9:9b:8b:93:28:
0b:61:dc:41:c0:50:31:34:ce:23:f9:ab:1e:5e:d5:f9:af:89:
59:26:a7:0b:87:ec:ab:b3:80:07:6f:8d:f4:e2:fd:7b:df:33:
09:9b:a5:5c:3b:7e:e3:3a:c1:ce:88:95:02:8a:99:99:d7:07:
05:bb:98:75:88:94:62:28:24:59:b8:0d:e7:44:e0:3d:1f:c6:
a8:65:29:29:6a:10:ab:27:0d:9a:0e:d2:40:98:5e:9c:b4:b6:
5b:13:99:ab:d6:b3:0d:a8:a6:2f:45:e7:8c:54:e8:9b:a0:1e:
8c:13:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-fra.rpki-client.org