Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6c7f30-665b-4c4f-8b71-e5db8af845af/1/I_cI-8KSfFVRFaBtHt3XfpkjNL8.roa
File: I_cI-8KSfFVRFaBtHt3XfpkjNL8.roa (raw, json)
Hash identifier: KLXylhR3x0gPZKKfr4G7rEJh2HuhAWNx4/w+X9fb/4g=
Subject key identifier: 23:F7:08:FB:C2:92:7C:55:51:15:A0:6D:1E:DD:D7:7E:99:23:34:BF
Certificate issuer: /CN=9b9ec6fce3747c4be102e1fc5dac167f71fe8698
Certificate serial: 01896478EB7D200640EC7993A75E7A69A250
Authority key identifier: 9B:9E:C6:FC:E3:74:7C:4B:E1:02:E1:FC:5D:AC:16:7F:71:FE:86:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m57G_ON0fEvhAuH8XawWf3H-hpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6c7f30-665b-4c4f-8b71-e5db8af845af/1/I_cI-8KSfFVRFaBtHt3XfpkjNL8.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 88.151.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:eb:7d:20:06:40:ec:79:93:a7:5e:7a:69:a2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b9ec6fce3747c4be102e1fc5dac167f71fe8698
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23f708fbc2927c555115a06d1eddd77e992334bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:53:31:d6:ff:00:e0:9c:ab:ff:06:36:59:
8b:f8:02:31:c2:10:b9:7b:d7:7a:5e:9b:bf:03:4d:
2f:94:1a:ff:24:a9:af:c9:9f:1b:2f:c4:e2:f2:66:
35:0c:4d:0b:67:f8:36:8e:70:c3:68:75:1f:b8:fb:
76:68:9e:99:e6:3e:b5:1b:e4:db:53:74:45:c7:df:
66:34:28:41:b8:7a:38:1a:73:bb:59:4c:b7:dc:6b:
9d:47:73:f6:b3:43:cd:ce:ff:20:d4:0d:06:c7:74:
a1:a7:68:00:fe:c0:44:d8:bf:af:0e:b2:85:47:b9:
07:12:20:4c:f1:a1:51:06:cc:ca:df:1b:60:e1:e1:
00:28:80:bd:04:60:41:95:21:a6:b6:82:f2:0e:86:
a2:dd:a4:fa:32:94:b8:e7:03:8c:31:1d:21:fe:cd:
73:c9:42:c1:05:54:fb:37:1e:0b:fe:7d:4f:f8:01:
2c:39:d7:14:a7:02:a9:88:72:21:38:b8:6b:9a:03:
88:0b:cf:38:28:ff:f8:60:f8:fe:6e:41:79:8f:15:
c6:39:37:4b:72:57:2b:ea:2b:56:fe:5e:f0:8a:3a:
07:4c:2f:39:40:c9:97:c8:5e:ad:88:14:09:da:ee:
9a:05:ba:9c:1f:f5:12:76:17:cf:5e:a2:bd:b9:23:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F7:08:FB:C2:92:7C:55:51:15:A0:6D:1E:DD:D7:7E:99:23:34:BF
X509v3 Authority Key Identifier:
keyid:9B:9E:C6:FC:E3:74:7C:4B:E1:02:E1:FC:5D:AC:16:7F:71:FE:86:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m57G_ON0fEvhAuH8XawWf3H-hpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6c7f30-665b-4c4f-8b71-e5db8af845af/1/I_cI-8KSfFVRFaBtHt3XfpkjNL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6c7f30-665b-4c4f-8b71-e5db8af845af/1/m57G_ON0fEvhAuH8XawWf3H-hpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b8:f3:dc:55:af:d4:d2:0a:e9:7a:78:85:47:85:4b:1b:16:
f1:43:ba:26:bc:3b:6c:91:45:0a:16:9e:67:5c:5a:90:86:f4:
21:3f:a3:95:9c:49:2e:c3:68:79:94:65:fc:42:0d:eb:72:2b:
bd:2c:a4:fd:88:61:e3:24:67:e8:9b:7e:6a:76:87:1c:b5:03:
52:89:83:45:50:b7:5e:ba:25:ee:99:df:fa:39:54:95:84:0b:
76:5b:63:3d:ac:81:55:d0:f0:65:29:11:ed:15:69:aa:c8:57:
94:c6:bd:95:4c:a3:2f:34:37:34:b4:76:6a:10:75:a3:de:c5:
fb:99:05:2c:55:46:2d:bc:4e:da:94:72:21:b7:13:7b:9b:a5:
2d:35:a6:d5:35:74:76:f1:2c:80:1c:6e:fb:41:a8:12:e4:03:
3f:07:48:7f:d8:71:95:27:51:ad:70:39:6c:8f:d8:44:cb:72:
fb:11:43:22:4b:63:9c:9c:96:e6:c2:d6:63:24:74:40:82:83:
d4:4a:b3:0d:92:42:61:34:ce:1f:99:0b:91:46:84:6b:ac:12:
80:36:9e:1a:7b:b0:88:1b:4d:63:98:b8:c2:d2:5c:5d:aa:0f:
9d:6c:61:dc:ee:40:23:79:02:3d:fa:7f:d3:ab:8e:e9:f6:d1:
84:2b:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net