Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/MMEqKlTn-LFGf5Ie1u1lYUW85wM.roa
File: MMEqKlTn-LFGf5Ie1u1lYUW85wM.roa (raw, json)
Hash identifier: IjustwHJu0leuuISlWIG4pIrgYojVBCpoba5HuUKSx8=
Subject key identifier: 30:C1:2A:2A:54:E7:F8:B1:46:7F:92:1E:D6:ED:65:61:45:BC:E7:03
Certificate issuer: /CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
Certificate serial: 018571D7951BBC33CC9CE828716497458AED
Authority key identifier: 7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/MMEqKlTn-LFGf5Ie1u1lYUW85wM.roa
Signing time: Mon 02 Jan 2023 09:37:11 +0000
ROA not before: Mon 02 Jan 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399641
IP address blocks: 188.93.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:95:1b:bc:33:cc:9c:e8:28:71:64:97:45:8a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
Validity
Not Before: Jan 2 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c12a2a54e7f8b1467f921ed6ed656145bce703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:ae:12:13:73:44:16:92:3b:26:6c:01:fb:
0d:a4:f2:31:64:a3:3a:77:52:05:af:7e:34:f7:85:
90:9a:59:b1:46:29:53:6d:ad:ae:d0:3c:24:fe:60:
77:2e:38:50:d9:35:84:1f:46:2f:05:b6:2b:3f:19:
8e:bc:89:5c:66:a6:f2:e9:98:67:44:bf:36:f9:32:
b2:b6:98:0b:a4:1b:24:82:20:68:9f:49:55:eb:7b:
ff:b4:ab:c9:bc:03:60:ea:f6:18:02:91:73:fa:bc:
37:af:26:54:cc:11:10:f2:03:59:b1:60:ea:32:34:
e3:69:4d:3d:a5:5f:4e:bd:1a:23:14:94:0c:5a:e7:
22:3d:d4:2c:5f:7f:75:93:dc:62:a8:8e:42:11:92:
03:22:07:71:38:9e:13:85:9a:f1:5d:59:fe:a2:81:
02:95:4b:8a:44:74:1a:80:81:17:60:30:17:91:15:
0e:49:34:d8:1e:e4:55:60:9d:33:8b:c9:ca:2f:70:
0f:fa:12:05:f5:45:b7:4c:1c:47:e0:93:e2:ab:e0:
0f:b4:36:54:b1:15:b0:22:73:a6:75:fb:59:8b:7c:
2b:76:9b:0e:cf:52:13:ef:3c:2b:72:4b:15:30:f5:
11:c3:b7:27:51:35:bc:51:8a:d7:ab:fe:7b:25:a6:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:2A:2A:54:E7:F8:B1:46:7F:92:1E:D6:ED:65:61:45:BC:E7:03
X509v3 Authority Key Identifier:
keyid:7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/MMEqKlTn-LFGf5Ie1u1lYUW85wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:63:57:29:9a:2c:1d:9f:cc:90:a8:b4:ce:72:36:7a:9a:ee:
a7:a2:40:6c:0e:c8:f4:92:73:9b:ea:88:9d:0d:b8:16:20:c3:
80:e5:24:81:44:ab:8a:6e:4f:28:ce:e5:f3:18:e0:4e:ef:03:
8f:ed:25:19:19:7e:b7:a7:b5:08:69:cc:8c:43:d7:3c:c3:39:
02:16:e2:e8:a5:d1:93:b8:17:2b:76:40:15:dd:5e:de:27:73:
7c:0e:1b:ae:d2:6a:c8:0b:73:0a:5a:96:48:a1:67:15:94:83:
d9:61:63:de:63:fe:a5:76:6a:72:f0:fd:c9:27:9f:9a:2c:d0:
3a:73:7d:d3:c3:dc:f7:3d:9e:5c:3f:19:55:8f:99:9f:3a:e2:
e0:fc:71:25:7d:26:c6:7c:6b:6c:15:4e:82:fe:a7:de:10:f0:
f9:44:7d:e4:4c:28:b9:cb:85:10:3e:4a:37:65:23:66:d8:e4:
17:f8:c9:bf:3f:db:e3:c3:25:a4:b1:b9:bc:45:95:ea:f4:d1:
e2:78:2c:71:24:d4:4d:a6:97:e7:55:d9:69:a5:01:3d:de:48:
e7:00:ed:b8:a8:9b:62:42:9c:03:6e:58:9a:83:f7:bb:64:f8:
74:a4:d5:2f:55:47:ae:0b:62:b8:27:ba:ae:d6:0d:e1:86:76:
a9:b8:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 12:51:59 2023 by rpki-client on console-ams.rpki-client.org