Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/3ZzevIkCJGQA9a-Cd_-AMLpU4co.roa
File: 3ZzevIkCJGQA9a-Cd_-AMLpU4co.roa (raw, json)
Hash identifier: wCdd7/Qhy5I0o16xeXqGIFDZi0gmahMH+W/fz/miUWc=
Subject key identifier: DD:9C:DE:BC:89:02:24:64:00:F5:AF:82:77:FF:80:30:BA:54:E1:CA
Certificate issuer: /CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Certificate serial: 018BB37D0781A4386BC4DD7E0313EB65D28E
Authority key identifier: A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/3ZzevIkCJGQA9a-Cd_-AMLpU4co.roa
Signing time: Thu 09 Nov 2023 09:49:57 +0000
ROA not before: Thu 09 Nov 2023 09:49:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 188.93.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:7d:07:81:a4:38:6b:c4:dd:7e:03:13:eb:65:d2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6d53dcc251871823f2006e62256f8e97687c5a5
Validity
Not Before: Nov 9 09:49:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd9cdebc8902246400f5af8277ff8030ba54e1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:78:5c:ca:fb:dc:52:b5:45:eb:a1:6c:b6:
36:9b:7f:15:19:ac:bc:6c:11:37:9a:88:10:0b:32:
d7:e3:79:24:1c:5b:cd:f1:4f:b6:cf:a3:ea:6c:87:
20:6c:65:30:a4:b7:fa:f4:8c:a6:a3:12:30:98:19:
7a:e8:b0:56:a6:ba:72:43:91:27:b0:54:32:32:6d:
e4:98:c3:62:a3:53:df:81:1f:17:c5:ca:21:30:9c:
78:1f:74:c3:80:2a:2d:73:25:18:b3:17:9c:16:53:
a5:7b:a2:b1:51:d8:db:0a:16:3d:e7:34:97:2b:2c:
87:00:de:a2:49:90:ee:60:84:70:72:4b:d3:c9:8e:
a5:e0:79:52:81:b6:5f:93:c2:c1:96:16:3e:0f:7c:
5b:f8:cb:76:7e:9e:67:ac:ce:cb:b6:43:0f:2d:d4:
53:65:9b:b5:5e:43:40:a9:69:e1:fd:29:d0:79:60:
7c:e4:5e:e5:b1:9d:c6:db:ee:a0:f1:e4:a2:80:2c:
3a:34:f7:87:48:53:b5:49:ac:f4:97:bf:d4:73:2a:
30:a7:c1:be:a9:dc:c8:e4:fa:04:ba:23:f0:93:9c:
f5:37:1d:24:c8:82:dd:28:03:df:ff:5a:f8:57:1b:
60:91:7a:9e:cd:b5:62:6e:3e:1f:a1:c4:d5:ee:d9:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:DE:BC:89:02:24:64:00:F5:AF:82:77:FF:80:30:BA:54:E1:CA
X509v3 Authority Key Identifier:
keyid:A6:D5:3D:CC:25:18:71:82:3F:20:06:E6:22:56:F8:E9:76:87:C5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptU9zCUYcYI_IAbmIlb46XaHxaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/3ZzevIkCJGQA9a-Cd_-AMLpU4co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7c218b-78b8-4a68-8928-84c797961f33/1/ptU9zCUYcYI_IAbmIlb46XaHxaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.141.0/24
Signature Algorithm: sha256WithRSAEncryption
24:22:83:94:34:c4:b8:ec:45:a7:96:e5:40:5c:ee:a6:39:2d:
46:8a:63:6e:bc:9f:58:71:47:6f:fb:c7:db:9a:8a:d2:d3:74:
2d:17:eb:de:2f:10:7f:21:4c:c6:f4:89:6f:27:8d:5d:3f:e6:
3a:46:a6:4d:c7:57:ca:7f:8c:0c:8f:c9:d0:48:b8:11:37:92:
ff:59:d1:b8:b4:e5:fe:03:4f:b8:b7:a0:4f:91:d4:83:e0:39:
d1:32:3a:e1:3f:f5:3b:4a:1e:9a:48:79:e9:69:11:67:ad:ce:
06:b8:08:47:3c:6e:5d:57:53:eb:5a:88:4c:6e:24:d9:e4:4a:
c8:0f:32:1b:b8:07:eb:1f:91:fc:6d:fa:b3:e2:4e:39:b5:48:
c5:9c:48:b4:ab:97:84:56:ec:a6:e4:e1:0d:51:24:50:3e:4f:
0d:c2:29:58:1b:a9:4c:d3:88:fb:f7:2d:c0:8e:8c:7d:0d:44:
6e:82:29:9a:0c:c7:42:fd:b8:69:91:4a:ef:83:56:e2:59:02:
5f:bf:ce:a6:05:b4:f7:0d:2e:ee:a7:63:40:64:ee:99:e7:2a:
8a:89:9d:91:68:97:13:f5:64:2f:e5:af:a8:94:81:43:55:1b:
de:6d:4a:75:e7:9b:ac:10:a8:92:7a:55:22:02:c9:a4:99:a9:
f9:66:4a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:17 2025 by rpki-client