Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/H6bj5Dv30x7qYrzLW8BZKHdFm3s.roa
File: H6bj5Dv30x7qYrzLW8BZKHdFm3s.roa (raw, json)
Hash identifier: dHZfqJk4NWe4E6X+wabJRgptxR+DBcmOVoVUFAGcWhY=
Subject key identifier: 1F:A6:E3:E4:3B:F7:D3:1E:EA:62:BC:CB:5B:C0:59:28:77:45:9B:7B
Certificate issuer: /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial: 018AB8C1193E66BC7496FACE6FA3CFBC1E57
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/H6bj5Dv30x7qYrzLW8BZKHdFm3s.roa
Signing time: Thu 21 Sep 2023 17:19:37 +0000
ROA not before: Thu 21 Sep 2023 17:19:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:c1:19:3e:66:bc:74:96:fa:ce:6f:a3:cf:bc:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
Validity
Not Before: Sep 21 17:19:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fa6e3e43bf7d31eea62bccb5bc0592877459b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:2f:47:c3:17:f5:e7:70:42:1c:81:2b:c5:
c7:a5:70:f9:56:f0:c3:79:3c:5a:8c:17:35:d9:bd:
7a:fd:28:d9:bc:f1:3f:67:ed:a0:48:f0:bf:a6:01:
fa:d1:19:00:b5:0e:bd:43:ee:c7:c6:16:65:16:4c:
0d:72:4c:f1:35:1c:5d:36:7a:d8:f8:11:e2:ac:91:
08:79:86:d0:d6:68:85:99:45:21:84:8c:98:f7:c5:
e3:3c:d1:9a:fd:42:2e:1a:8d:24:74:c0:57:e0:b5:
0d:f0:9d:13:bc:ae:a7:3a:30:d4:a9:a1:0d:93:63:
a0:c8:98:37:dc:b9:ff:03:f9:b2:2a:d8:7e:c2:58:
9a:6d:60:63:3e:48:9b:f8:56:64:7c:71:8f:e3:22:
73:d7:a7:70:58:41:5d:b7:cb:cd:f9:3b:9d:14:d6:
d5:61:08:91:b7:18:bb:22:81:15:e7:9c:01:6a:5f:
ad:e7:9b:9a:c7:c0:c9:8b:a1:68:78:fe:8b:78:a7:
8e:3a:a9:bf:ae:ac:3f:30:7a:39:25:30:cc:a3:13:
f2:fd:8d:40:5d:fc:88:33:1d:d4:2e:08:2e:0a:4a:
2c:e5:c3:41:c8:3d:1a:c1:e1:c3:96:46:92:6d:1b:
89:3f:1f:f6:d0:f0:83:4c:c2:bd:39:3d:a7:b1:0a:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:E3:E4:3B:F7:D3:1E:EA:62:BC:CB:5B:C0:59:28:77:45:9B:7B
X509v3 Authority Key Identifier:
keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/H6bj5Dv30x7qYrzLW8BZKHdFm3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
43:04:8b:23:7d:f7:49:cc:73:d2:97:67:06:41:39:a5:79:47:
ef:bb:36:93:7c:be:39:25:84:dc:7f:ea:23:f6:c0:d7:e1:72:
ff:22:45:41:88:ab:a3:41:ea:f5:70:25:91:f9:1f:f6:9e:67:
25:6f:2a:ae:d8:d2:70:cb:a7:4b:6e:6b:9c:36:f9:c0:48:c8:
37:cc:1f:4c:ea:20:13:11:8e:68:e9:58:f0:c6:bc:c1:3f:dc:
0f:0c:b1:3f:c1:09:90:a5:62:c9:17:70:75:25:84:83:8e:72:
24:43:76:73:ff:33:58:b5:fb:04:ac:8a:2e:e2:18:1a:df:43:
05:73:d0:31:6a:5c:f0:4c:7c:ea:df:7c:2a:73:7f:34:5f:2b:
45:70:bd:db:88:ac:f6:dc:0f:e9:c0:10:cb:64:6a:eb:87:09:
97:ea:7f:c2:a3:06:43:7b:44:d1:ac:b8:46:cc:fe:b4:04:c7:
8c:c4:7e:09:15:63:f5:10:d6:01:06:dd:8e:8c:38:cc:fd:0e:
07:10:5c:4e:a5:77:06:b0:31:20:d2:60:04:5d:aa:e1:74:e0:
a2:82:4a:de:e9:51:ad:6f:71:e3:78:23:ee:d4:63:ef:a1:99:
ea:ee:e4:ba:e7:f5:4a:1f:72:78:9f:11:21:ee:ea:9e:3f:e0:
7d:17:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:00:35 2025 by rpki-client