Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/IwLuFWXBmlVJrobsBMDkcfm9X9I.roa
File: IwLuFWXBmlVJrobsBMDkcfm9X9I.roa (raw, json)
Hash identifier: Dt8BO+tQNzKlPZdIakxKsuoJdLbECJSdYU0ReLMIPQ0=
Subject key identifier: 23:02:EE:15:65:C1:9A:55:49:AE:86:EC:04:C0:E4:71:F9:BD:5F:D2
Certificate issuer: /CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Certificate serial: 018572B419039A1785F2D5206DFEE42313A0
Authority key identifier: 62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/IwLuFWXBmlVJrobsBMDkcfm9X9I.roa
Signing time: Mon 02 Jan 2023 13:38:03 +0000
ROA not before: Mon 02 Jan 2023 13:38:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34569
IP address blocks: 93.152.182.0/24 maxlen: 24
93.152.183.0/24 maxlen: 24
93.152.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:19:03:9a:17:85:f2:d5:20:6d:fe:e4:23:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Validity
Not Before: Jan 2 13:38:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2302ee1565c19a5549ae86ec04c0e471f9bd5fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cf:a2:f1:d0:57:de:50:d6:9b:19:9f:6f:b8:
d7:19:c4:20:54:65:d8:46:91:dc:96:67:ff:8b:bf:
55:d2:eb:a5:49:a6:91:9b:fd:f4:5b:05:c8:80:63:
75:70:b8:59:c0:97:32:1d:66:92:c7:66:09:bc:19:
3b:7d:95:70:58:9d:24:12:0b:f5:3e:2b:08:b9:83:
c5:9f:9c:4a:78:f2:4e:6c:4b:29:86:6c:91:fe:5f:
8c:0c:74:b4:f7:49:4e:37:92:68:7f:3e:45:97:5a:
90:0d:ea:7e:e1:93:d4:f3:14:95:79:d0:ae:68:92:
ca:1e:89:6d:c9:4b:a8:d7:f5:90:4f:7d:c3:50:08:
10:19:24:9b:f7:f2:0f:6d:81:14:82:80:d6:da:b3:
02:ce:65:fd:0b:95:26:0c:72:4f:51:98:e2:10:97:
b0:78:a8:85:30:40:30:4e:05:c8:03:fb:26:12:27:
14:ba:12:f5:57:23:3b:c6:65:b1:1c:b7:d1:5e:fd:
21:be:75:58:c2:b2:7b:64:07:f8:30:5d:6d:24:6e:
8b:50:f5:85:ef:9e:73:05:3c:21:56:8b:cd:e0:da:
55:be:ae:e6:e8:49:6a:5c:c7:13:52:46:ba:98:04:
d4:61:e2:68:15:73:28:cc:c2:e6:f0:1a:31:fb:30:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:EE:15:65:C1:9A:55:49:AE:86:EC:04:C0:E4:71:F9:BD:5F:D2
X509v3 Authority Key Identifier:
keyid:62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/IwLuFWXBmlVJrobsBMDkcfm9X9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/Ymo-iOnkZDSUbkaR8W_mvri54Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.182.0/23
93.152.188.0/22
Signature Algorithm: sha256WithRSAEncryption
21:18:29:67:0d:dc:a9:6d:3c:b8:4a:7e:c3:70:85:f6:66:2d:
84:59:17:1f:5f:73:74:23:96:3f:6a:b3:98:51:4d:3b:f1:94:
04:a3:99:8e:41:36:20:37:6c:b5:03:85:c3:e4:62:6f:2c:63:
a9:7b:a2:e7:89:e7:de:91:2b:fe:aa:ab:e8:65:00:04:48:48:
5e:d3:bd:3c:d8:5f:38:91:5f:26:cf:52:ba:a5:1d:4b:22:6d:
bd:80:f6:4a:1a:df:ea:71:63:e6:f0:9f:c3:fa:5b:3b:2f:1a:
af:f2:e8:27:c3:7f:45:c9:13:22:55:42:20:2b:14:32:45:e5:
d8:43:9a:77:0d:00:c3:31:55:cc:28:7c:7c:f2:e5:f0:4a:bc:
4b:e7:29:61:83:59:b1:f5:91:b0:9b:48:88:0d:50:3a:01:37:
7f:e2:22:47:f7:c3:69:43:53:67:ca:46:b8:28:a9:81:15:7b:
76:f5:b6:bd:e6:65:bc:22:7a:dd:18:3d:4a:54:54:67:07:9f:
42:5f:b0:d7:ca:71:d8:a4:9e:24:c3:37:d2:a9:2b:6b:16:0b:
a9:64:41:43:49:4c:52:b2:b4:57:b1:dd:8e:30:6c:62:c2:1c:
4e:d5:95:4f:83:92:b3:0d:1c:46:2b:22:17:61:92:e0:fb:a1:
4b:b6:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:01 2024 by rpki-client on console-ams.rpki-client.org