Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/9EkzCsNzw33ls28jYd-eXlnszus.roa
File: 9EkzCsNzw33ls28jYd-eXlnszus.roa (raw, json)
Hash identifier: bHXy9IZU8l0rJz60xbNTvfLcZedg4eyzV/2/ztDn024=
Subject key identifier: F4:49:33:0A:C3:73:C3:7D:E5:B3:6F:23:61:DF:9E:5E:59:EC:CE:EB
Certificate issuer: /CN=6fa3168603731f2a0c9102b6a5a2e4426ad057ad
Certificate serial: 018964C05271C4E277D5420B9D0DAD04E501
Authority key identifier: 6F:A3:16:86:03:73:1F:2A:0C:91:02:B6:A5:A2:E4:42:6A:D0:57:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MWhgNzHyoMkQK2paLkQmrQV60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/9EkzCsNzw33ls28jYd-eXlnszus.roa
Signing time: Mon 17 Jul 2023 16:47:52 +0000
ROA not before: Mon 17 Jul 2023 16:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 94.103.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:52:71:c4:e2:77:d5:42:0b:9d:0d:ad:04:e5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa3168603731f2a0c9102b6a5a2e4426ad057ad
Validity
Not Before: Jul 17 16:47:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f449330ac373c37de5b36f2361df9e5e59ecceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:69:bb:8a:b9:24:5f:c1:59:76:17:3b:64:
86:c9:5b:e5:d1:ac:ef:94:0c:84:54:3c:c1:90:27:
77:a5:4f:6f:e8:0e:04:c9:66:d5:30:0b:48:54:1a:
21:cb:f1:fd:5d:77:b5:22:84:1f:13:7a:f8:ac:be:
e3:34:b8:91:a0:57:fc:8d:67:af:cc:43:c1:a0:c8:
04:6d:8c:0d:7e:ff:2d:9d:68:af:1c:a2:e4:f8:53:
a8:54:24:fb:a8:a3:a6:03:a0:6d:fe:b1:32:e5:f5:
c1:b2:8f:b1:31:03:46:8e:dd:b0:f0:40:3f:fb:78:
32:6c:24:46:b6:ba:70:3a:45:3a:b4:0e:79:9d:2f:
00:0b:24:fa:9c:21:26:a9:41:4c:e2:2f:f7:1f:63:
aa:6f:31:d8:68:4e:75:23:71:0f:b6:e8:9f:b3:7d:
82:49:d8:34:4d:4c:cc:45:1b:e0:57:86:9f:9e:17:
c8:ec:db:32:6e:7f:d2:b7:54:34:35:a7:5f:a9:25:
1e:b7:2a:42:1b:6e:7f:77:39:8a:d3:73:e5:75:52:
7f:c2:0a:cb:6e:96:1e:b0:6c:5c:a3:30:d5:cf:62:
45:c1:d0:00:99:3b:b1:17:b7:19:8e:fe:dc:56:92:
ba:03:8f:8c:5b:e6:00:72:da:84:81:3e:42:f1:73:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:49:33:0A:C3:73:C3:7D:E5:B3:6F:23:61:DF:9E:5E:59:EC:CE:EB
X509v3 Authority Key Identifier:
keyid:6F:A3:16:86:03:73:1F:2A:0C:91:02:B6:A5:A2:E4:42:6A:D0:57:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MWhgNzHyoMkQK2paLkQmrQV60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/9EkzCsNzw33ls28jYd-eXlnszus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/b6MWhgNzHyoMkQK2paLkQmrQV60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:eb:9d:fe:a8:9e:cc:56:e3:7a:ae:92:75:b3:17:ca:44:b7:
86:e9:64:b3:76:39:84:6e:de:c3:4d:be:a4:f0:64:33:0e:46:
66:98:67:05:48:f4:35:30:70:26:5d:a0:28:8d:72:81:99:3e:
4d:3d:00:78:a9:e7:78:a3:ca:9b:ae:83:40:eb:a1:21:9f:bf:
75:d1:a4:b9:db:f8:23:4e:4e:c1:62:b8:bc:14:fa:85:68:cf:
ce:fe:68:07:37:0a:29:81:36:72:a5:6b:ed:db:7e:7e:e5:98:
e9:bd:d2:e0:59:c2:1f:cb:14:ba:d8:2b:db:94:7d:31:32:99:
2c:b6:a0:72:d0:c5:3b:47:3b:7d:29:cf:4e:85:aa:c2:8c:67:
cc:2c:bc:3a:86:19:97:21:44:89:9c:54:6c:c3:ef:19:59:49:
85:7f:64:d8:8e:04:c3:24:4f:b5:65:ac:eb:02:e8:f1:3d:48:
de:be:44:71:a2:25:c1:7c:49:42:97:dd:2a:19:6b:23:3d:11:
dd:40:05:3f:26:0f:ab:20:b2:2b:99:d9:ed:fc:ef:21:c2:d5:
3a:fa:03:fa:b8:08:82:14:3d:2d:af:01:c6:6d:0c:a0:66:fd:
0b:a7:21:d3:b4:2a:fa:ee:84:1c:dc:24:6a:94:1c:29:65:ce:
50:1b:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org