Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/m2M-TfbCIZJYhBlz_Q0u6gch4HQ.roa
File: m2M-TfbCIZJYhBlz_Q0u6gch4HQ.roa (raw, json)
Hash identifier: 9S5m7ufCHOu2pIBb2xUXsoxzbdhk0otek+PGsgQDQqU=
Subject key identifier: 9B:63:3E:4D:F6:C2:21:92:58:84:19:73:FD:0D:2E:EA:07:21:E0:74
Certificate issuer: /CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Certificate serial: 018AD5B9A24A5DB3F587878342AA154F4D81
Authority key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/m2M-TfbCIZJYhBlz_Q0u6gch4HQ.roa
Signing time: Wed 27 Sep 2023 08:20:27 +0000
ROA not before: Wed 27 Sep 2023 08:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.227.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:b9:a2:4a:5d:b3:f5:87:87:83:42:aa:15:4f:4d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Validity
Not Before: Sep 27 08:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b633e4df6c2219258841973fd0d2eea0721e074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:1a:4e:c3:cf:1c:75:23:98:b4:a5:e2:4a:
1e:ff:b6:d7:56:1f:8e:bf:d7:78:2c:d3:ea:88:aa:
db:db:c0:61:93:b5:dd:aa:af:d9:75:2f:87:4d:12:
64:45:90:84:d9:a0:04:e2:c6:46:76:dc:bb:84:2c:
c8:74:13:81:a3:61:e2:f0:fc:5a:71:16:7b:b5:92:
a6:d9:46:78:ff:17:9b:9d:4c:31:28:6a:d5:47:db:
34:c4:0a:b0:35:7b:81:b4:08:44:ae:fd:f0:a8:99:
ba:cb:17:18:37:b7:23:3b:78:e5:05:4c:97:28:25:
b8:16:14:64:cd:70:07:a9:06:df:cf:e0:3e:2e:28:
87:0b:ca:2b:39:b4:ea:4b:02:ed:3f:e8:a5:81:36:
7d:2c:dd:49:31:79:a2:83:61:dc:1d:dc:65:9b:56:
71:7d:9c:62:a6:61:66:80:fe:b0:5a:d0:c6:fd:69:
60:94:d1:4a:8b:36:a8:8f:23:f3:35:5d:93:2c:2a:
af:c7:45:23:7e:62:07:37:11:53:4a:86:f8:b7:6d:
93:5b:20:44:52:5e:44:db:17:10:7e:8c:49:4c:a3:
85:ae:12:28:41:34:eb:d0:3d:40:35:d2:a7:10:63:
e8:68:88:92:38:e4:0d:a7:04:57:cd:fd:39:b5:21:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:3E:4D:F6:C2:21:92:58:84:19:73:FD:0D:2E:EA:07:21:E0:74
X509v3 Authority Key Identifier:
keyid:58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/m2M-TfbCIZJYhBlz_Q0u6gch4HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.196.0/22
Signature Algorithm: sha256WithRSAEncryption
31:df:ac:7a:fd:82:78:80:95:65:9a:57:af:82:da:3c:74:bf:
23:17:88:06:25:1c:37:da:18:b5:ca:0a:1f:04:45:55:88:15:
d3:a0:36:1f:b3:dc:b8:21:4d:ee:c1:d7:84:22:05:48:99:ae:
f2:fb:03:0e:36:dd:b0:e3:3f:8b:b1:fa:21:42:47:fa:02:58:
f7:8b:7e:03:49:bc:71:05:50:17:b4:c5:f3:16:5f:a5:ba:de:
8c:10:fa:55:04:90:96:7c:9a:f3:e4:7e:00:82:31:5a:36:5c:
78:23:07:e8:05:af:cc:e8:9a:91:cf:3e:be:0b:7a:6c:55:37:
98:2a:72:97:8f:b4:cf:ba:6b:a2:e2:64:e3:15:e7:59:1a:a0:
ee:98:1c:28:ad:91:0a:10:a6:06:6e:06:d2:7c:c5:61:24:3f:
81:d5:d6:eb:ec:7a:ce:65:f7:d1:93:b4:52:43:80:b6:3f:0a:
5c:ff:2b:7d:70:0b:28:41:16:a6:74:83:0f:25:42:e4:39:24:
36:4c:9d:ca:df:37:f4:b4:2a:53:04:35:c5:68:ac:6c:7f:94:
da:04:96:f9:c1:59:cd:0e:79:46:02:e0:6e:cd:d4:b7:fd:8b:
68:a5:af:e1:9e:63:2c:ad:4d:c6:10:a3:f1:8f:50:79:d1:bc:
c2:29:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org