Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/Rak8Ti9T_qNvciDfMdvCIeNDnb8.roa
File: Rak8Ti9T_qNvciDfMdvCIeNDnb8.roa (raw, json)
Hash identifier: /iStEflpU1Y4g2bOXH/g5kaImJaHGSWxl8VdBg6LLY0=
Subject key identifier: 45:A9:3C:4E:2F:53:FE:A3:6F:72:20:DF:31:DB:C2:21:E3:43:9D:BF
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018BD91740F6D9A8E6ECEBAC5922A1DC6DF9
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/Rak8Ti9T_qNvciDfMdvCIeNDnb8.roa
Signing time: Thu 16 Nov 2023 17:04:21 +0000
ROA not before: Thu 16 Nov 2023 17:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 93.95.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:17:40:f6:d9:a8:e6:ec:eb:ac:59:22:a1:dc:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Nov 16 17:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a93c4e2f53fea36f7220df31dbc221e3439dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:b1:9b:11:52:00:29:6b:3c:42:37:d6:69:
92:26:a9:2f:89:04:d2:b3:92:93:7c:33:be:32:61:
e3:69:33:e1:5c:f2:44:4e:b5:e0:7c:44:8d:25:70:
31:c2:8e:cc:e1:d9:e0:a0:72:b5:3f:0f:6c:ee:0f:
f4:d0:0a:2c:3b:ad:b3:fe:a9:39:84:4a:0b:d1:c0:
91:92:05:eb:3b:ed:40:0e:40:46:07:11:7c:86:17:
24:3d:75:34:72:a6:b1:b9:13:02:51:08:cf:a9:d9:
d6:05:03:72:04:2d:e6:16:bd:fa:8e:8f:0a:db:d1:
a0:3e:fd:0c:e8:a1:5b:1a:5a:7f:e1:fc:00:f0:ae:
b5:04:84:4f:dc:81:92:a4:80:bf:62:05:6a:4f:8d:
dc:11:7f:57:8c:bb:95:3d:a1:31:7b:48:38:01:e1:
83:ee:30:72:42:b4:37:22:7f:8b:8f:94:aa:9c:58:
be:2c:0c:54:06:01:76:29:6d:ad:52:fc:9e:17:21:
ef:36:b7:10:e9:a3:3e:3a:48:78:77:ca:9a:f9:a5:
67:e8:c8:06:67:cf:d7:1d:5d:4e:1b:e4:6d:d1:1f:
f6:65:a7:ee:d4:2f:b9:52:ba:99:72:96:07:01:08:
4e:16:b1:32:2b:82:0e:26:c8:8d:5c:ee:14:2b:c0:
59:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:3C:4E:2F:53:FE:A3:6F:72:20:DF:31:DB:C2:21:E3:43:9D:BF
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/Rak8Ti9T_qNvciDfMdvCIeNDnb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/24
Signature Algorithm: sha256WithRSAEncryption
66:77:77:fd:a3:8b:f4:72:5d:7f:76:86:c8:15:75:fc:f2:ef:
e1:ab:95:04:89:d5:dd:5b:c0:ed:ed:43:82:21:66:8a:dd:5c:
df:44:71:de:f9:05:23:c0:a7:00:0e:a1:10:f2:eb:be:82:1b:
cf:25:93:f1:d6:53:42:f2:01:32:af:cf:c7:51:6b:e3:a5:d8:
af:9c:e2:d9:05:11:47:0c:b7:29:fc:23:22:b0:92:ef:b6:fd:
9b:57:47:41:64:bb:45:70:b1:5d:8c:da:39:5a:23:f3:aa:c5:
49:f5:50:d0:ab:40:09:00:12:b3:cb:61:43:55:d6:e9:32:2c:
26:83:e9:0a:2f:7d:f4:98:c7:e9:c9:4c:83:c9:96:67:46:f3:
e5:e0:04:a6:97:34:90:5b:5c:54:ef:bf:78:e8:21:a6:84:6e:
20:8b:91:5d:e7:b9:94:2a:39:d8:bf:7a:04:7a:fe:99:18:e7:
87:1d:93:f6:c6:05:17:df:a1:af:66:8a:6e:62:e3:3f:d2:3b:
dd:84:8c:a2:e0:81:75:90:13:bd:00:80:fb:c4:7a:0f:32:21:
e4:72:82:ca:cf:61:34:0f:eb:9e:09:62:fb:f6:5d:15:6c:5a:
6a:bf:11:a0:0e:0c:68:50:92:0f:82:73:5f:dd:98:f2:05:17:
d1:51:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:38 2024 by rpki-client on console-ams.rpki-client.org