Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/hq8U3CJ1CuEWiCPldaW-q_esIiQ.roa
File: hq8U3CJ1CuEWiCPldaW-q_esIiQ.roa (raw, json)
Hash identifier: LWzwCQVRYrf+nsiT2h6sreRcRfLKNDA8qp4BkBBglfI=
Subject key identifier: 86:AF:14:DC:22:75:0A:E1:16:88:23:E5:75:A5:BE:AB:F7:AC:22:24
Certificate issuer: /CN=cb4644ddeb0390b4b648b69bc860942aed9bbb6e
Certificate serial: 0186A2409DF754D8B7D6C78751EC991FC15C
Authority key identifier: CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ZE3esDkLS2SLabyGCUKu2bu24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/hq8U3CJ1CuEWiCPldaW-q_esIiQ.roa
Signing time: Thu 02 Mar 2023 12:16:29 +0000
ROA not before: Thu 02 Mar 2023 12:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43431
IP address blocks: 188.244.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:40:9d:f7:54:d8:b7:d6:c7:87:51:ec:99:1f:c1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4644ddeb0390b4b648b69bc860942aed9bbb6e
Validity
Not Before: Mar 2 12:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86af14dc22750ae1168823e575a5beabf7ac2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:97:ff:d3:6d:cc:f6:57:98:fc:ae:c6:1a:
9f:c3:e1:b4:2b:8b:7e:ab:35:13:c0:ac:8f:2d:f5:
0f:e2:95:7f:94:6b:35:7c:22:c9:ec:44:36:bd:8b:
5e:96:72:68:59:82:e7:4e:a5:d0:a5:7d:58:10:f4:
2e:ef:8e:a6:e9:e9:9b:63:b5:97:25:e5:4e:63:cc:
03:e0:57:e2:c7:b9:74:04:ad:f3:d1:2c:5c:d0:dc:
fc:24:56:3c:6a:ad:28:17:5c:db:9d:03:b6:3a:03:
c1:c0:ea:05:f8:81:a4:52:85:2d:08:4e:fc:1c:2e:
fc:e5:2b:b9:8a:96:e7:d7:49:eb:3d:75:56:ab:d7:
6b:e3:a0:92:65:3b:1b:de:a7:16:51:19:20:5a:6c:
b7:fc:60:38:54:6d:55:0e:b7:e9:68:58:47:3e:60:
d0:ca:42:a6:80:f0:aa:75:70:04:01:86:35:68:63:
9b:a1:62:8e:7b:c4:60:d9:01:be:d4:23:db:8b:63:
51:3e:30:4f:e6:ea:da:14:5c:ed:c2:21:6b:2a:3c:
35:20:99:00:45:1f:85:1e:9e:2f:21:f7:d3:65:e6:
48:8b:46:40:b9:26:40:0e:77:78:bb:c9:5d:88:29:
8a:5a:5e:2e:a8:96:b8:ac:71:90:ae:d2:26:4a:1a:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:14:DC:22:75:0A:E1:16:88:23:E5:75:A5:BE:AB:F7:AC:22:24
X509v3 Authority Key Identifier:
keyid:CB:46:44:DD:EB:03:90:B4:B6:48:B6:9B:C8:60:94:2A:ED:9B:BB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ZE3esDkLS2SLabyGCUKu2bu24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/hq8U3CJ1CuEWiCPldaW-q_esIiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a2db06-42e4-4c76-97d1-418c1e3a9436/1/y0ZE3esDkLS2SLabyGCUKu2bu24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.123.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f3:c9:9a:ad:49:74:99:0b:b5:cd:c0:a6:86:56:d1:46:92:
c8:61:a0:6a:27:f3:bd:52:c8:b7:ee:b3:fe:af:4a:e4:20:4c:
8c:cf:20:36:03:1f:67:1e:60:ab:9f:5d:10:d1:c3:da:2c:c6:
9f:53:9f:1c:7a:34:88:2e:85:88:8f:71:a5:3c:f7:9e:87:0f:
74:ca:1c:4a:09:f2:1e:df:0c:8a:a7:b4:48:d0:37:95:a3:68:
01:b1:a9:49:cb:09:2e:1a:33:dc:d8:79:3b:ee:ec:18:21:30:
bc:3f:98:db:8a:95:6f:7e:57:c2:98:6c:00:60:d7:26:14:45:
95:2a:89:84:02:10:5d:24:d4:dd:e8:40:42:22:ad:a7:2b:a7:
f6:32:34:fa:90:21:ff:d6:e5:af:2f:26:8c:98:97:82:24:55:
29:65:8a:2a:ab:24:bd:ac:40:bd:34:e0:2a:75:1a:76:97:0c:
9d:94:ee:39:91:49:75:92:71:33:08:7e:19:39:01:79:cc:37:
29:83:01:03:15:a9:31:56:27:50:45:0f:84:a0:b2:5c:c0:86:
b3:70:00:e8:d4:d6:e9:5f:0c:34:17:35:39:51:ce:2c:89:a4:
c7:29:ed:69:05:fa:8e:91:a9:b7:9a:45:9d:33:d8:1e:b3:8a:
2c:4b:d1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 06:55:05 2023 by rpki-client on console-ams.rpki-client.org