Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/s6GQDb_VvUssJCmnmnm0xb8DzqU.roa
File: s6GQDb_VvUssJCmnmnm0xb8DzqU.roa (raw, json)
Hash identifier: /0ZFD/9bXmx9Pr5Vb1kWn8xQYoGoKDdJC9SJY4dUvpY=
Subject key identifier: B3:A1:90:0D:BF:D5:BD:4B:2C:24:29:A7:9A:79:B4:C5:BF:03:CE:A5
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185A1EF318866ABD61DB17472399EBA8F69
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/s6GQDb_VvUssJCmnmnm0xb8DzqU.roa
Signing time: Wed 11 Jan 2023 17:44:45 +0000
ROA not before: Wed 11 Jan 2023 17:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 185.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:ef:31:88:66:ab:d6:1d:b1:74:72:39:9e:ba:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 11 17:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3a1900dbfd5bd4b2c2429a79a79b4c5bf03cea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:e8:5e:31:08:22:58:00:f1:87:cf:e4:79:
01:67:4b:9f:88:d2:45:ba:fc:6a:d3:47:e9:43:6d:
dc:af:1a:35:5f:dc:ff:d5:88:7c:57:92:47:3b:05:
3c:c6:a4:a3:d0:3b:28:93:0d:a5:e3:90:1d:1c:59:
8e:48:89:7b:df:6a:be:49:f0:c5:b7:dc:ae:0a:ec:
84:a6:a6:82:9d:72:33:a8:a6:b3:df:5c:37:3f:5a:
7e:71:48:73:dc:40:92:26:45:8b:1d:44:50:20:4c:
b2:01:ad:49:53:8a:c4:27:f3:3d:4a:cb:75:96:69:
35:b8:7b:32:da:de:f7:f2:a4:8d:31:41:75:b2:40:
ee:ad:1b:cc:88:b0:c6:da:eb:b7:53:2b:91:a5:93:
d2:20:eb:7d:20:02:92:f8:51:76:ec:0a:c1:62:64:
47:89:15:56:9b:7c:a5:74:49:32:ff:3b:08:59:2b:
d4:28:e8:22:1e:7f:5c:72:7b:2b:24:7f:4d:76:5c:
04:a8:75:ee:96:8c:1b:c7:1c:98:ba:b5:1e:a1:11:
33:c2:b6:c8:ea:0a:c7:c1:fd:f4:84:3f:5d:87:f6:
e0:70:fe:b6:b1:8c:5e:13:07:08:05:96:f4:ca:74:
3b:07:87:27:41:6e:ed:d9:d0:ee:ce:f3:ed:ba:a2:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:90:0D:BF:D5:BD:4B:2C:24:29:A7:9A:79:B4:C5:BF:03:CE:A5
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/s6GQDb_VvUssJCmnmnm0xb8DzqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:55:ad:ed:88:b1:8f:ea:06:89:3f:04:ac:fa:80:86:e2:c9:
54:e4:52:9d:ae:97:77:e3:6e:30:68:10:4b:92:03:a7:28:4d:
e4:39:1b:b8:4b:f0:c8:c2:ec:ca:6d:fe:75:f3:9a:d0:89:18:
ec:33:cd:cc:6b:0c:34:03:dc:49:43:9a:99:9b:e4:cd:5a:7f:
d3:70:9d:8c:56:06:83:81:74:ef:a9:4b:17:42:86:35:e8:7d:
25:2a:34:45:5c:8c:3c:71:63:74:1e:89:72:01:a6:68:e7:15:
a2:e0:b4:17:83:41:8b:f7:16:58:92:2e:b4:72:5b:df:26:bb:
ca:88:43:94:bd:46:62:ae:38:20:85:cd:86:75:89:1c:ae:14:
15:de:92:76:21:2d:f6:d4:5b:61:0a:ac:f4:d2:5e:7d:ce:f8:
9c:06:bd:f8:1c:66:64:bf:d8:b5:d7:bf:0a:ae:fe:bc:7f:e5:
ef:cc:e3:a7:04:bd:3f:c3:7d:58:4d:17:9c:87:24:db:61:a8:
6a:a2:86:f4:77:27:8f:83:06:bf:0a:c8:56:73:d9:6d:90:71:
27:36:7c:c0:ae:d6:68:64:d3:2f:3f:3b:c5:ce:99:cb:85:d9:
10:d3:58:c7:55:ae:80:f5:89:42:b8:b3:13:69:b6:05:90:35:
7c:64:5f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org