Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/hqPRX3iskqTOxPa5_3QT9aV1xB4.roa
File: hqPRX3iskqTOxPa5_3QT9aV1xB4.roa (raw, json)
Hash identifier: BW1fuQZJPEvJTUe3jThTv+gw7gvAMq/2Zu95sddc3OU=
Subject key identifier: 86:A3:D1:5F:78:AC:92:A4:CE:C4:F6:B9:FF:74:13:F5:A5:75:C4:1E
Certificate issuer: /CN=4674f507f5bff33fc81341623f69195274ae1183
Certificate serial: 0189654A8C91BD1B3B0DD79ACEA933831CD9
Authority key identifier: 46:74:F5:07:F5:BF:F3:3F:C8:13:41:62:3F:69:19:52:74:AE:11:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnT1B_W_8z_IE0FiP2kZUnSuEYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/hqPRX3iskqTOxPa5_3QT9aV1xB4.roa
Signing time: Mon 17 Jul 2023 19:18:51 +0000
ROA not before: Mon 17 Jul 2023 19:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 93.190.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8c:91:bd:1b:3b:0d:d7:9a:ce:a9:33:83:1c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4674f507f5bff33fc81341623f69195274ae1183
Validity
Not Before: Jul 17 19:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86a3d15f78ac92a4cec4f6b9ff7413f5a575c41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:dd:e8:49:bc:37:02:3f:75:12:b5:a7:f0:
26:ff:e0:af:13:a2:42:b2:29:3a:9e:db:ad:a3:a9:
58:61:16:85:b7:bf:47:bc:0c:00:9c:54:6d:1b:8e:
6c:8c:15:a6:9f:3e:d1:af:0b:9f:6f:db:08:d1:3e:
c5:99:f7:2f:21:d0:0e:66:87:7d:db:e4:17:34:46:
a1:5c:18:92:fb:e5:5b:39:33:0b:a4:6d:95:9a:fc:
3a:2a:fd:67:1c:15:07:31:ff:df:0c:69:e0:24:ce:
44:3b:66:5d:41:74:ec:14:ee:1c:9a:f8:3f:12:5c:
67:5a:a6:14:be:42:12:ff:9e:13:71:14:57:40:e4:
fe:84:db:02:f0:de:ff:b5:44:14:51:d6:a1:ca:1e:
0b:56:16:ee:34:29:3b:d0:64:e1:95:ab:26:64:f3:
34:50:30:5e:c6:c3:6b:dc:de:a5:26:5d:fe:48:df:
32:0f:0f:5e:d1:28:2e:d3:5c:8a:41:a7:bb:98:2b:
27:80:2c:fb:be:ce:50:ca:3a:32:58:0f:1e:11:34:
87:ab:c9:a8:4f:e3:26:56:58:84:30:db:be:ff:ce:
05:56:d2:a1:28:8f:7c:57:82:8e:e9:ce:85:60:9f:
d3:5c:01:eb:07:95:63:24:ca:63:bd:ae:f5:3d:67:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A3:D1:5F:78:AC:92:A4:CE:C4:F6:B9:FF:74:13:F5:A5:75:C4:1E
X509v3 Authority Key Identifier:
keyid:46:74:F5:07:F5:BF:F3:3F:C8:13:41:62:3F:69:19:52:74:AE:11:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnT1B_W_8z_IE0FiP2kZUnSuEYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/hqPRX3iskqTOxPa5_3QT9aV1xB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/RnT1B_W_8z_IE0FiP2kZUnSuEYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:27:65:e3:51:0c:e4:b6:4b:01:e0:5d:7a:c1:f4:3f:de:78:
1c:a5:3b:14:e9:be:e7:d9:63:b2:de:3d:9b:8e:e1:07:1c:6f:
20:0c:f4:02:9e:ea:6a:83:29:51:93:04:97:64:94:a2:97:62:
68:4f:36:e4:dd:7a:00:71:f5:2e:7f:6a:26:cd:cd:e4:9e:46:
28:5f:35:4b:23:3f:7b:b5:2c:76:5f:66:4b:a1:2a:d3:ab:af:
80:5d:ac:ae:f1:45:e4:64:62:ee:5c:e7:3a:cf:2f:57:07:e7:
48:5f:63:3a:0b:eb:95:38:bf:e1:28:b6:bc:49:d6:bd:e4:cb:
10:30:bd:75:52:22:21:e6:81:e8:b0:f7:87:de:1d:3a:4f:af:
d8:3b:7a:1f:99:b2:74:35:74:f3:b7:81:5a:7e:ed:53:25:4a:
e6:20:6f:37:4b:18:a0:e4:7b:e0:83:ac:93:b2:46:54:ae:df:
2d:0b:cf:e8:d6:78:4a:e3:c7:f9:3f:86:d0:1c:35:48:fe:24:
c3:81:92:43:ee:2c:bc:33:a8:85:a9:85:a9:97:7c:71:b8:36:
e8:ef:b9:4b:4c:77:e6:fd:f4:4a:ac:a9:81:f4:0d:36:af:67:
58:6e:e1:de:d3:90:eb:16:34:d5:8a:46:d3:b7:82:d3:b5:61:
da:9a:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:01 2024 by rpki-client on console-ams.rpki-client.org