Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/hSq-GLsrMqDK58R6rgv_FRLDvFE.roa
File: hSq-GLsrMqDK58R6rgv_FRLDvFE.roa (raw, json)
Hash identifier: SrWpUmgfgWhgYcOylksegcrzvlEcEqbHx64kkKh9IM4=
Subject key identifier: 85:2A:BE:18:BB:2B:32:A0:CA:E7:C4:7A:AE:0B:FF:15:12:C3:BC:51
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 018BB90BC23B23736D8272AB4B0B58579EB1
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/hSq-GLsrMqDK58R6rgv_FRLDvFE.roa
Signing time: Fri 10 Nov 2023 11:43:57 +0000
ROA not before: Fri 10 Nov 2023 11:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209193
IP address blocks: 93.191.114.0/24 maxlen: 24
93.191.113.0/24 maxlen: 24
2a06:a546::/31 maxlen: 31
2a06:a544::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:0b:c2:3b:23:73:6d:82:72:ab:4b:0b:58:57:9e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Nov 10 11:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=852abe18bb2b32a0cae7c47aae0bff1512c3bc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:4e:36:4a:f9:51:da:b8:12:42:9a:ab:fb:
63:5b:58:de:71:29:f4:5f:46:7f:0b:38:b2:7d:5d:
99:48:1e:b9:38:06:51:e1:8c:74:c8:ee:21:3a:1c:
24:c1:40:17:2e:1c:2a:13:bf:5b:11:36:64:f5:69:
24:35:f4:bf:c3:c0:c8:ae:32:3d:90:4d:8e:55:43:
5f:8e:37:65:63:72:50:b9:e1:45:05:b5:61:d6:1e:
0e:bc:f8:9a:69:76:6a:eb:2d:f2:7f:f7:f6:fa:81:
10:e6:4f:fc:7d:73:1c:ce:26:16:12:6b:32:88:00:
33:d2:9e:c3:bd:33:46:4c:7f:ee:82:b7:e9:48:a6:
60:97:66:d9:be:3e:1a:89:7b:5e:c6:74:27:84:8a:
34:5b:fb:18:62:96:c3:3c:7e:eb:a5:60:1a:bd:a5:
d9:7f:4d:dd:60:08:8f:c5:b2:e9:b2:71:3f:59:72:
43:26:a9:54:84:3c:0e:de:9e:76:17:93:fd:e5:ec:
66:29:36:3b:9c:f6:d4:84:42:f6:8d:d8:9e:48:d3:
33:22:6e:70:80:40:bd:c7:5f:3e:f4:b0:c7:ff:d6:
d6:fa:4c:22:b6:e9:4e:51:99:28:42:0c:38:47:fb:
4c:08:33:19:95:a4:b1:bf:54:41:fc:5c:47:28:a6:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2A:BE:18:BB:2B:32:A0:CA:E7:C4:7A:AE:0B:FF:15:12:C3:BC:51
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/hSq-GLsrMqDK58R6rgv_FRLDvFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.113.0-93.191.114.255
IPv6:
2a06:a544::/30
Signature Algorithm: sha256WithRSAEncryption
57:74:ca:5b:0f:69:3d:73:2a:c2:3e:f7:3e:a8:68:ab:5a:b2:
ed:1b:b4:7e:8c:06:80:34:ae:30:b2:47:d2:64:83:58:31:b5:
1f:02:72:b9:f1:6e:54:77:44:cc:5c:4f:28:3c:56:d9:43:26:
05:21:30:52:9e:f1:50:cc:c3:09:45:87:06:78:66:8b:0a:f2:
e0:97:b8:a6:b7:68:52:3c:a0:f1:80:5f:8c:39:f9:04:07:1d:
15:35:b5:43:14:de:be:7e:83:b5:2c:cd:6f:11:c2:37:45:ca:
68:e5:a1:34:8b:b9:a3:c3:d8:0e:c0:a7:cf:f9:bf:ba:93:55:
2e:62:8f:e9:62:81:86:40:89:72:41:da:81:19:3a:b8:e7:6a:
47:a7:f5:21:85:a8:fd:38:f8:96:fa:98:12:c8:10:db:3b:45:
88:4f:bc:bb:8a:12:b4:9f:47:07:80:9c:9e:75:83:a8:26:4d:
db:bc:78:1b:2a:79:09:6b:0e:d5:01:98:b8:90:c7:b8:42:94:
30:1c:54:c5:29:0b:4c:34:68:1d:01:2d:aa:c1:ec:07:45:75:
4d:75:24:62:8c:e1:c0:8b:24:e1:0f:a0:bf:9e:b5:13:af:3e:
6c:ec:51:40:cf:be:55:4d:42:b7:f8:0c:e0:78:1e:93:df:04:
b6:56:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:11 2025 by rpki-client