Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/M61-cf3jYcoMGjnwLOaQhDxywwM.roa
File: M61-cf3jYcoMGjnwLOaQhDxywwM.roa (raw, json)
Hash identifier: tCvi3hug8z2lNOEKEFV68UcfenPoWi7yLR7elPH2L1Q=
Subject key identifier: 33:AD:7E:71:FD:E3:61:CA:0C:1A:39:F0:2C:E6:90:84:3C:72:C3:03
Certificate issuer: /CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
Certificate serial: 018570D50B673B414072CF5BF69C8178478A
Authority key identifier: 02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/M61-cf3jYcoMGjnwLOaQhDxywwM.roa
Signing time: Mon 02 Jan 2023 04:54:48 +0000
ROA not before: Mon 02 Jan 2023 04:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 88.151.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:0b:67:3b:41:40:72:cf:5b:f6:9c:81:78:47:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
Validity
Not Before: Jan 2 04:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ad7e71fde361ca0c1a39f02ce690843c72c303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:85:22:5a:b4:76:e6:91:75:18:6b:95:58:
32:c9:35:b3:ea:30:05:b9:bd:e2:bd:c4:0f:20:87:
df:9b:65:8a:f9:bb:41:55:3e:ac:2a:aa:71:7c:f6:
5d:d1:f5:60:a1:43:a4:28:60:1b:f5:b5:77:be:21:
12:8f:54:50:75:77:36:9a:c0:a3:42:66:83:e2:3f:
02:8d:12:ea:85:a2:60:c0:af:c3:fb:5d:ae:14:0d:
15:82:39:15:45:a1:0f:9a:a2:1b:0d:3a:e7:60:a5:
c8:c0:6d:c6:66:7b:28:c1:0b:02:9d:e8:30:1b:7c:
f4:f0:b1:15:f6:57:71:f2:bd:ea:52:30:c7:9b:88:
b5:56:54:5e:8f:6a:18:cb:dd:10:d9:13:92:03:44:
37:b2:26:9c:00:f5:16:99:ce:00:4d:fd:cb:23:a9:
dc:91:f6:31:7a:4a:51:7e:16:82:0f:a7:6c:6f:9f:
81:71:6b:36:b5:8d:c4:12:64:32:26:46:98:7b:36:
b1:78:6a:21:f2:6c:a9:66:00:15:70:10:23:54:0e:
3b:ee:54:b3:25:1a:6c:b1:82:5d:82:25:8c:8d:4d:
ee:8b:93:db:29:84:32:8a:5a:60:6f:4a:7e:6b:fc:
47:d7:c3:d7:e8:be:37:a1:e4:16:86:52:43:ec:8a:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:7E:71:FD:E3:61:CA:0C:1A:39:F0:2C:E6:90:84:3C:72:C3:03
X509v3 Authority Key Identifier:
keyid:02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/M61-cf3jYcoMGjnwLOaQhDxywwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.9.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ca:54:d9:04:2a:f0:9d:aa:53:8a:02:33:8f:c7:90:1f:aa:
6b:05:99:fd:b0:a1:6d:d0:3b:b8:8a:84:6a:9f:5c:0c:be:2f:
2b:27:1b:2e:cd:d4:d9:fa:0d:08:70:f3:4c:90:62:17:ec:2a:
17:d9:32:ac:ef:d7:b0:62:ad:d8:12:a5:00:a2:a5:f0:c0:f0:
0c:24:38:ca:d4:c3:62:d3:4e:5d:b3:b3:0d:33:dc:0d:a8:16:
bf:a9:76:be:be:99:05:1a:3f:0a:74:2a:00:c6:59:99:27:99:
fb:f0:2c:cb:9c:fd:16:10:5c:4d:af:cf:16:46:aa:57:43:08:
59:7f:85:55:9f:4d:81:b4:94:65:5f:23:40:ef:13:85:af:e3:
e3:a0:82:4e:90:be:89:5d:49:0b:50:f0:4a:c1:ef:84:cc:6b:
6a:5e:ba:02:18:1d:4b:42:66:63:06:4b:bc:53:6b:c4:48:1f:
af:cf:04:47:f9:98:9a:dd:9c:9a:01:db:92:de:c2:a3:de:9a:
e5:d7:c4:b0:e8:27:6b:11:39:f0:57:7f:db:1a:0c:90:48:d9:
ad:b3:12:ef:b7:fa:26:f4:e7:a8:54:f8:4b:90:f8:3b:9e:01:
7f:af:4e:7f:b6:c2:1a:7f:4f:7c:65:8f:51:f7:53:2c:a9:75:
75:d3:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 13:11:04 2023 by rpki-client on console-fra.rpki-client.org