Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/f8TgZKKbKTMYnXsSy9ESa9Iz4gA.roa
File: f8TgZKKbKTMYnXsSy9ESa9Iz4gA.roa (raw, json)
Hash identifier: zEg6rK0IIFIaqe8r/W8zHcGGjVp9KvqHGZXjdQZbNwI=
Subject key identifier: 7F:C4:E0:64:A2:9B:29:33:18:9D:7B:12:CB:D1:12:6B:D2:33:E2:00
Certificate issuer: /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial: 018572F12FD97DED0414C312BF4648756AFF
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/f8TgZKKbKTMYnXsSy9ESa9Iz4gA.roa
Signing time: Mon 02 Jan 2023 14:44:46 +0000
ROA not before: Mon 02 Jan 2023 14:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.93.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:2f:d9:7d:ed:04:14:c3:12:bf:46:48:75:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
Validity
Not Before: Jan 2 14:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc4e064a29b2933189d7b12cbd1126bd233e200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d7:ae:a9:4f:34:1d:48:9c:a7:6f:3f:cb:3a:
34:a2:84:7e:0f:9a:6d:45:3b:9e:a3:c4:e0:9c:57:
71:69:9e:d3:7c:4a:a1:ec:4e:43:20:f9:4d:fa:2c:
ff:47:89:ea:88:0d:00:e4:f3:b5:2f:3d:1c:7c:89:
7e:2d:34:8b:02:f9:81:d4:65:51:5e:90:d2:92:85:
02:b4:02:68:5b:58:f1:84:3c:a1:32:a3:3a:43:2e:
a6:e7:53:26:ba:90:a4:47:1a:b6:78:a5:45:7a:f0:
59:87:92:1e:4b:71:78:a0:b7:99:83:21:b2:12:4f:
5e:3f:1d:66:9e:41:90:31:09:5e:20:e3:6c:fa:e8:
e7:d3:7c:4b:52:5f:c4:e6:fc:9d:41:04:38:01:96:
35:72:b8:41:f7:67:25:fa:1a:af:b0:0a:43:f4:30:
7a:2d:b7:eb:32:0b:90:8f:15:d7:f4:f4:63:ae:46:
37:ba:29:93:c9:9c:da:fe:4c:20:47:71:77:89:33:
d6:26:ef:4d:47:f8:6b:9d:96:51:06:a6:a0:e1:0f:
50:d4:db:40:b7:91:38:43:4d:f6:8e:e9:5e:a5:9c:
1e:4c:4b:91:b0:c0:13:29:df:04:c4:56:3a:8a:9d:
c5:a3:5c:6c:19:3a:5f:01:84:8e:c3:75:81:24:b2:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C4:E0:64:A2:9B:29:33:18:9D:7B:12:CB:D1:12:6B:D2:33:E2:00
X509v3 Authority Key Identifier:
keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/f8TgZKKbKTMYnXsSy9ESa9Iz4gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6a:a8:ad:40:3d:fc:b1:33:ff:51:99:6d:1c:a9:ed:9e:bd:
6f:f7:d7:ef:1b:ac:04:b8:cd:4b:db:b2:78:5c:15:12:20:a9:
4c:33:de:eb:3c:05:4f:6f:84:3a:12:28:2e:97:d9:18:19:0d:
41:fb:61:9c:7e:39:38:e8:d8:e1:2e:ec:2d:8c:b9:0e:52:e1:
63:3f:12:60:cc:0d:f3:5d:56:7a:3c:00:50:be:00:08:ae:3f:
da:72:e0:e2:71:5f:63:d5:e3:e2:e9:53:0b:41:2c:60:db:23:
ed:5f:4a:68:19:2f:50:9d:7f:de:47:a7:a0:9e:1f:91:1d:2f:
6a:1c:02:f7:a6:5a:03:fe:86:15:7d:d3:a6:93:ab:a4:8b:1f:
ae:d8:b5:1b:4d:77:df:44:98:ad:f1:00:fb:93:ec:cd:8b:5b:
be:eb:56:e3:f1:b7:4d:08:1f:de:e5:47:af:a5:0b:1a:af:cc:
d3:7c:af:ad:7f:39:fd:89:95:e9:d5:3e:5c:db:07:90:83:9d:
ed:e7:fc:d3:f3:51:b0:6b:60:8b:c6:a0:fe:d9:06:a1:2c:75:
45:3b:10:0e:b9:f3:00:88:50:81:2b:32:bd:1d:77:a2:3f:c1:
b0:25:3c:00:fb:fe:be:7b:f6:30:fd:d5:bf:9a:b1:2e:9f:09:
54:15:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:58 2024 by rpki-client on console-ams.rpki-client.org