Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/iLHu3OwXRtjneJ9LQVA-jqgZfgs.roa
File: iLHu3OwXRtjneJ9LQVA-jqgZfgs.roa (raw, json)
Hash identifier: F4gZrSs6ErHdAJRelxDhUBbkCbJ9gJUzRAjmxbyw95U=
Subject key identifier: 88:B1:EE:DC:EC:17:46:D8:E7:78:9F:4B:41:50:3E:8E:A8:19:7E:0B
Certificate issuer: /CN=651698c0cd983797915e7d793fb6d18c481e84c5
Certificate serial: 0188068F38B2B72B7D07A79429B427DC2209
Authority key identifier: 65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/iLHu3OwXRtjneJ9LQVA-jqgZfgs.roa
Signing time: Wed 10 May 2023 16:47:09 +0000
ROA not before: Wed 10 May 2023 16:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199865
IP address blocks: 178.211.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:8f:38:b2:b7:2b:7d:07:a7:94:29:b4:27:dc:22:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651698c0cd983797915e7d793fb6d18c481e84c5
Validity
Not Before: May 10 16:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88b1eedcec1746d8e7789f4b41503e8ea8197e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:10:78:1c:a7:ae:a9:d6:80:bb:94:e5:07:
87:40:12:72:95:98:2d:1e:b4:8c:32:a6:ee:7f:31:
26:f0:60:80:3c:9d:29:40:6c:8e:c9:8f:f8:5f:49:
31:f8:ac:71:b1:0b:35:86:26:62:58:a3:16:00:62:
5f:7b:fd:11:0d:ea:2c:9f:50:c8:62:c6:67:16:a0:
7d:df:5a:de:6e:b8:63:d8:b6:16:08:d9:06:3c:a7:
f7:a9:66:b4:11:99:e7:2b:81:91:4e:61:6c:89:d3:
47:33:37:af:7a:c8:30:e3:e1:65:3e:74:ad:da:a4:
65:53:b9:c4:95:06:82:10:d4:94:91:fa:fd:7d:ef:
6e:e7:aa:13:5e:82:a2:4a:aa:35:30:5b:44:f8:3a:
33:94:2d:4a:c3:14:9d:4e:43:bf:b5:5c:ca:58:f3:
aa:88:00:39:8c:01:a3:1f:ae:99:89:09:f9:38:8f:
e7:2f:5f:a6:d5:86:77:0e:ac:25:55:fb:c5:0d:17:
6a:39:fe:5e:32:37:ef:4f:5a:88:a8:1c:23:cf:5d:
ba:d3:f3:5f:d7:bd:a9:be:4b:94:7e:39:62:37:61:
af:63:43:1c:8f:a4:3c:7c:69:65:65:01:e6:23:9c:
fe:61:ab:63:16:aa:bc:81:4f:4c:55:f9:a4:2f:cd:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:EE:DC:EC:17:46:D8:E7:78:9F:4B:41:50:3E:8E:A8:19:7E:0B
X509v3 Authority Key Identifier:
keyid:65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/iLHu3OwXRtjneJ9LQVA-jqgZfgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.132.0/24
Signature Algorithm: sha256WithRSAEncryption
38:33:64:06:fe:11:ec:4b:74:25:d8:a8:05:44:16:ee:93:fd:
b5:53:68:fd:07:97:1a:da:1d:38:1c:80:5f:ef:f8:63:ba:71:
6b:81:c9:73:67:1e:11:6f:a3:26:b0:66:1e:72:36:f1:e1:0e:
06:2a:45:0f:91:7d:20:7a:8f:10:66:74:b5:a8:4f:81:19:e0:
df:eb:e0:a3:fa:ac:8d:60:71:00:5f:dd:67:2a:8d:cf:a5:63:
c1:09:03:86:0c:d8:cf:e0:18:da:e4:9e:59:be:da:0f:49:a7:
50:7e:b8:91:f8:ed:01:15:1d:a7:7b:62:c8:3e:ca:63:9c:c9:
20:39:b7:90:da:13:63:7a:9c:13:e0:1c:2c:19:58:64:d4:ff:
e9:36:74:47:e8:b8:35:ae:70:34:2a:82:53:3d:eb:e1:a0:c9:
3e:49:f6:92:7e:61:df:23:a1:08:a4:62:82:37:1c:52:2c:91:
94:14:d4:18:12:68:68:9b:16:ef:e3:fb:7a:77:18:6e:d7:7b:
2e:56:bf:5b:3e:8f:e2:bd:31:56:75:d1:b9:f3:e2:aa:0a:f1:
4d:ef:ed:ac:71:6e:67:14:1c:f1:d6:68:85:75:2e:d7:52:6f:
29:67:78:8d:aa:90:1e:e4:82:4f:06:87:8c:15:32:68:66:48:
de:68:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org