Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/3bfZb3hs27KmtGPN6xqMVkVnDhM.roa
File: 3bfZb3hs27KmtGPN6xqMVkVnDhM.roa (raw, json)
Hash identifier: cjtdHqnAYqz6FqVF9OkbWjz4voyu8Er7jL8L924ceQA=
Subject key identifier: DD:B7:D9:6F:78:6C:DB:B2:A6:B4:63:CD:EB:1A:8C:56:45:67:0E:13
Certificate issuer: /CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
Certificate serial: 01856FA6D7450FE7E97BECC8144E9166B14A
Authority key identifier: EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/3bfZb3hs27KmtGPN6xqMVkVnDhM.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 188.244.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d7:45:0f:e7:e9:7b:ec:c8:14:4e:91:66:b1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab6714d719181ebfccd5dcde6cd6295d778ded9
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddb7d96f786cdbb2a6b463cdeb1a8c5645670e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:1c:92:8b:c3:39:64:f5:28:eb:df:f7:2b:
db:93:f7:a7:73:ba:ff:84:1a:b3:80:b1:a0:54:41:
a8:55:45:c2:f8:ed:63:11:12:1d:06:9b:63:28:21:
18:6e:f1:30:f4:54:38:dc:e7:c7:73:74:47:df:cd:
a1:1b:c6:ed:d6:14:c4:0f:4f:63:66:10:0d:db:75:
fa:28:db:0f:09:32:d2:d6:9a:29:ca:23:34:6f:2b:
ac:96:be:86:98:84:83:a5:9c:09:9e:0d:91:7b:ce:
d5:94:1c:82:99:3e:4f:26:30:4f:67:0c:fa:b2:cb:
9c:c4:0e:ac:21:50:af:b0:e4:39:ef:04:26:b4:3b:
ab:c2:07:8b:06:0f:e1:a3:e5:62:6d:7d:07:29:60:
1c:9f:9c:93:f0:9d:0d:36:38:64:e9:3b:5a:e9:a5:
39:15:c5:0a:5b:f1:42:1d:17:bd:bf:df:c9:87:db:
36:69:fd:a2:58:53:55:cc:63:42:fb:7b:6c:e5:3c:
f7:02:04:b2:34:7e:51:58:07:e6:37:ea:a1:c4:2b:
3d:df:be:05:fc:23:9e:a5:2b:90:c2:6f:45:7f:7f:
6b:e4:9f:6c:0b:1d:b1:34:cc:d4:4c:30:55:e0:07:
36:cb:54:1a:d3:da:e9:e9:be:bf:61:b4:00:52:45:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:D9:6F:78:6C:DB:B2:A6:B4:63:CD:EB:1A:8C:56:45:67:0E:13
X509v3 Authority Key Identifier:
keyid:EA:B6:71:4D:71:91:81:EB:FC:CD:5D:CD:E6:CD:62:95:D7:78:DE:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rZxTXGRgev8zV3N5s1ildd43tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/3bfZb3hs27KmtGPN6xqMVkVnDhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/717273-6b83-47c2-a343-c5824e422e21/1/6rZxTXGRgev8zV3N5s1ildd43tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:36:ee:8b:28:76:88:45:b6:62:b0:cd:9b:9e:8d:3e:c3:fc:
32:21:82:98:90:5e:6b:bf:4d:e9:c1:93:71:40:af:91:ee:5a:
d8:28:aa:80:2d:5f:4b:95:26:90:0b:6e:33:a7:83:8a:8a:13:
55:79:3e:bb:95:34:3b:97:e3:ad:b1:60:4a:13:5e:0b:e5:68:
ad:86:8b:c1:37:01:81:44:39:b2:44:e9:0a:5c:03:a4:01:f0:
bc:63:e3:b8:e8:47:49:07:c5:bb:19:ab:41:ba:21:9a:57:41:
bc:9d:37:30:a6:b8:fc:95:f7:61:69:ec:3d:7e:ed:29:a2:3a:
98:54:77:99:19:a3:46:cb:e4:8d:9b:7c:a9:ff:34:71:b7:ab:
6b:32:1e:38:c5:1c:39:b5:09:57:02:bd:7a:de:40:5b:f0:ab:
e6:47:84:b4:53:d0:dc:05:77:c2:9a:20:41:c5:d2:14:f2:39:
b6:ab:03:94:0a:14:86:73:20:05:45:af:eb:e9:50:ae:fb:37:
76:59:8b:d8:71:06:58:ea:fb:2d:0e:88:21:ed:07:7a:ff:9c:
36:6b:e7:c8:a7:fb:59:db:9f:8e:bc:46:89:4e:81:eb:ae:61:
bc:ab:cb:a4:a6:b0:6f:7a:07:b6:70:d6:aa:f7:46:a4:fb:19:
e5:c0:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:57 2024 by rpki-client on console-fra.rpki-client.org