Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/UNGnASHte8fNh1cd42lx-NAfdIc.roa
File: UNGnASHte8fNh1cd42lx-NAfdIc.roa (raw, json)
Hash identifier: Cns1tqAaQOdGTAmMx8iNwwXNjc66e3v97lXmgwBeLZE=
Subject key identifier: 50:D1:A7:01:21:ED:7B:C7:CD:87:57:1D:E3:69:71:F8:D0:1F:74:87
Certificate issuer: /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial: 01039E14
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/UNGnASHte8fNh1cd42lx-NAfdIc.roa
Signing time: Sat 01 Jan 2022 13:05:32 +0000
ROA not before: Sat 01 Jan 2022 13:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17014292 (0x1039e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
Validity
Not Before: Jan 1 13:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50d1a70121ed7bc7cd87571de36971f8d01f7487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:33:42:3d:93:fe:3b:4d:79:62:a5:c0:85:
af:3d:ca:04:de:c0:a5:60:d9:b3:a0:40:53:d5:6a:
8d:09:46:38:57:60:eb:a9:4a:de:6c:c6:90:10:c5:
90:75:01:21:8f:45:73:8a:db:c2:77:a3:70:df:8d:
23:3c:55:f9:4d:9f:3c:43:26:12:a0:b2:9d:1c:8d:
85:81:8d:a8:de:36:d4:83:0b:67:8d:7c:39:95:60:
90:a4:a1:72:89:65:27:cc:e1:f9:24:26:91:69:c3:
19:bb:36:cf:2a:09:4c:24:34:4c:07:8b:33:96:47:
d8:97:5f:66:5f:56:57:97:75:fa:09:f4:f9:7a:7e:
3b:dc:a7:51:a9:f7:d6:1d:98:25:44:ab:1d:f0:43:
76:3f:1b:a6:a2:03:c1:b4:04:c6:79:d2:d0:3e:66:
0f:cf:51:e1:4d:db:85:cd:9a:0b:93:e9:b2:e1:41:
58:31:c7:48:de:2c:4f:97:75:d4:9f:d5:5b:89:89:
c8:b7:d5:f4:e9:ae:62:1a:29:95:cf:fb:ed:34:11:
ee:7f:f1:a5:e0:3b:2a:fa:8f:6b:ee:ca:f0:0d:80:
fd:9d:39:97:f2:15:44:e7:30:15:f6:92:ad:16:fa:
15:66:f4:e8:ca:aa:3c:e4:48:e8:17:b7:73:52:2e:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:A7:01:21:ED:7B:C7:CD:87:57:1D:E3:69:71:F8:D0:1F:74:87
X509v3 Authority Key Identifier:
keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/UNGnASHte8fNh1cd42lx-NAfdIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:95:d8:e7:33:ba:81:80:02:5e:80:11:ca:9d:c4:91:f5:0e:
04:7e:6b:d6:98:8a:9e:58:87:26:10:0a:12:d5:43:f4:62:13:
16:8f:55:96:69:01:e4:c6:65:6f:d8:bd:8e:79:f0:f7:92:3b:
0a:37:89:0e:f4:b1:69:22:03:cd:0f:c9:4b:d4:db:cb:1d:44:
b2:30:39:b0:aa:2e:b3:79:e5:01:c8:3f:03:c2:6b:4a:f3:7e:
42:a3:12:fa:b4:fc:92:b1:ad:b2:83:75:0a:92:d6:56:2c:0a:
78:14:6e:23:9f:4b:f6:58:cc:72:be:43:b8:3f:0e:b0:03:01:
ca:eb:b1:9b:06:e2:ad:57:09:d1:49:50:9c:bf:00:65:12:05:
9c:ad:e8:70:53:89:13:d6:ba:91:1b:75:5c:e3:69:42:91:31:
6a:d7:8b:10:49:b9:ad:91:3f:0d:42:7c:76:d0:1e:22:48:1a:
85:d8:89:7a:36:b8:57:a0:5a:21:0c:78:c9:18:95:5d:c2:9b:
62:58:18:86:76:ca:aa:57:a3:db:b6:e0:83:c5:bc:b7:f6:6e:
7a:bb:e9:38:63:b2:33:c2:86:36:f3:f5:1e:a1:b5:02:ee:9d:
5c:88:ba:dc:0f:24:c9:cb:97:97:e0:fa:f8:01:44:a6:e2:e9:
01:e8:b1:86
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQOeFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MzgzYzM4ZTE5M2VjZGUyNzdjYWM4ZjA5ZGE0MTg3ZmFlYmRhNjE2MB4XDTIyMDEw
MTEzMDUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBkMWE3MDEyMWVk
N2JjN2NkODc1NzFkZTM2OTcxZjhkMDFmNzQ4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMH1M0I9k/47TXlipcCFrz3KBN7ApWDZs6BAU9VqjQlGOFdg
66lK3mzGkBDFkHUBIY9Fc4rbwnejcN+NIzxV+U2fPEMmEqCynRyNhYGNqN421IML
Z418OZVgkKShcollJ8zh+SQmkWnDGbs2zyoJTCQ0TAeLM5ZH2JdfZl9WV5d1+gn0
+Xp+O9ynUan31h2YJUSrHfBDdj8bpqIDwbQExnnS0D5mD89R4U3bhc2aC5PpsuFB
WDHHSN4sT5d11J/VW4mJyLfV9OmuYhoplc/77TQR7n/xpeA7KvqPa+7K8A2A/Z05
l/IVROcwFfaSrRb6FWb06MqqPORI6Be3c1IuoWkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRQ0acBIe17x82HVx3jaXH40B90hzAfBgNVHSMEGDAWgBRDg8OOGT7N4nfK
yPCdpBh/rr2mFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1E0UERqaGstemVKM3lzanduYVFZZjY2OXBoWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvY2JiYjI1LWExNzAtNGUyNC1iYjAwLTk3MGUyZDU1NWM0NC8x
L1VOR25BU0h0ZThmTmgxY2Q0Mmx4LU5BZmRJYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
Y2JiYjI1LWExNzAtNGUyNC1iYjAwLTk3MGUyZDU1NWM0NC8xL1E0UERqaGstemVK
M3lzanduYVFZZjY2OXBoWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALxdijANBgkqhkiG9w0BAQsFAAOC
AQEAHJXY5zO6gYACXoARyp3EkfUOBH5r1piKnliHJhAKEtVD9GITFo9VlmkB5MZl
b9i9jnnw95I7CjeJDvSxaSIDzQ/JS9Tbyx1EsjA5sKous3nlAcg/A8JrSvN+QqMS
+rT8krGtsoN1CpLWViwKeBRuI59L9ljMcr5DuD8OsAMByuuxmwbirVcJ0UlQnL8A
ZRIFnK3ocFOJE9a6kRt1XONpQpExateLEEm5rZE/DUJ8dtAeIkgahdiJeja4V6Ba
IQx4yRiVXcKbYlgYhnbKqlej27bgg8W8t/ZuervpOGOyM8KGNvP1HqG1Au6dXIi6
3A8kycuXl+D6+AFEpuLpAeixhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:42 2024 by rpki-client on console-fra.rpki-client.org