Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/S2z1YDanPmR8PcYV3Zc-uSM0Qgc.roa
File: S2z1YDanPmR8PcYV3Zc-uSM0Qgc.roa (raw, json)
Hash identifier: fP9OQEKdYmvtvqgjiEb0zkgi0J6UmVL/4QjbIkOmlUg=
Subject key identifier: 4B:6C:F5:60:36:A7:3E:64:7C:3D:C6:15:DD:97:3E:B9:23:34:42:07
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018BD9156B522310D52F5F7B70027569BB2A
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/S2z1YDanPmR8PcYV3Zc-uSM0Qgc.roa
Signing time: Thu 16 Nov 2023 17:02:21 +0000
ROA not before: Thu 16 Nov 2023 17:02:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 93.95.118.0/24 maxlen: 24
93.95.117.0/24 maxlen: 24
93.95.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d9:15:6b:52:23:10:d5:2f:5f:7b:70:02:75:69:bb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Nov 16 17:02:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b6cf56036a73e647c3dc615dd973eb923344207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:a2:ac:b5:59:d6:9c:9a:23:bf:f4:fb:ac:
b9:50:5e:59:df:14:43:41:b2:b6:d6:12:61:d1:d6:
99:bf:86:b2:8e:70:5d:05:f0:3d:41:69:93:fd:67:
60:56:59:f4:bf:25:ce:61:c0:de:32:da:ae:99:be:
3f:61:27:61:15:1b:a4:cf:86:25:de:44:d6:5a:95:
dd:be:48:54:5c:52:b6:e9:34:5d:1f:5d:d4:61:f6:
53:93:de:b0:b8:3c:2d:80:6d:6f:9a:bf:2c:41:86:
6a:c7:e6:c2:c4:1d:2a:c0:7f:52:09:22:7f:83:4d:
8f:e1:6f:e3:a7:69:65:0f:22:b5:d1:b7:46:b4:99:
e5:ae:a1:5f:8f:ff:8c:0f:8d:44:0b:85:6e:e0:98:
9b:84:06:f1:7a:95:ed:ff:bc:3c:c9:77:a2:16:34:
78:6d:35:ac:04:0e:f4:f8:ce:b6:28:ba:a4:56:4f:
18:89:f2:49:b3:49:6f:b7:a3:c2:47:99:d2:77:12:
4d:9f:b7:a1:46:dc:a9:84:7d:03:12:0b:84:04:b9:
92:26:b2:31:c0:fb:2d:5e:5f:e3:11:cf:54:db:90:
8e:4b:14:41:90:08:97:5b:6b:38:66:31:49:16:bb:
02:f8:ba:3f:f8:2e:2b:21:7f:2b:de:7f:03:75:67:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:F5:60:36:A7:3E:64:7C:3D:C6:15:DD:97:3E:B9:23:34:42:07
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/S2z1YDanPmR8PcYV3Zc-uSM0Qgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0-93.95.119.255
Signature Algorithm: sha256WithRSAEncryption
87:a8:68:28:14:5f:58:8e:50:0e:e0:08:69:9d:07:fe:2d:b4:
8e:6e:45:34:e7:b3:d5:a1:be:bf:8d:6b:67:12:15:17:d3:c1:
58:40:36:94:a2:df:4e:eb:74:d1:4b:99:ee:be:df:e7:d9:30:
dd:63:2b:8a:57:ab:3d:01:9e:9c:17:76:ba:c7:46:d0:42:e0:
82:3c:5f:21:81:d1:3d:ab:be:60:76:a8:d7:69:6b:81:0b:de:
56:30:08:a9:ca:43:07:a2:a7:0d:6f:1d:ee:c2:90:c5:a4:d8:
bf:8a:59:d2:91:e7:94:49:cb:b9:43:87:0c:b1:3d:8c:6d:ac:
6c:af:27:84:db:1f:9a:1c:f0:1e:eb:f4:0b:88:89:d0:42:b1:
cf:ad:b9:eb:d9:9c:78:c0:81:15:2c:83:05:c7:e7:be:78:34:
ab:44:ee:f4:83:92:4a:95:28:54:49:26:e1:77:16:79:7a:d8:
b5:0b:78:9b:0f:d6:eb:8e:03:4d:0f:14:6c:47:11:aa:ca:8e:
30:f8:d1:ca:2d:2a:8c:92:2d:70:3e:72:e9:e5:7a:7e:97:14:
7c:6c:15:8b:30:e9:52:f5:1e:95:bc:f3:d7:93:2c:8f:f0:20:
76:9b:f8:0f:b0:96:cc:5e:d5:18:16:f4:bf:59:7e:12:1d:51:
b7:66:67:12
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYvZFWtSIxDVL197cAJ1absqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTllY2MwOTE0NDE0NmNjMTc1YjU4YTRkZTQwMGM3NjU5
YWU0ZjUwHhcNMjMxMTE2MTcwMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjZjZjU2MDM2YTczZTY0N2MzZGM2MTVkZDk3M2ViOTIzMzQ0MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo66irLVZ1pyaI7/0+6y5UF5Z3xRD
QbK21hJh0daZv4ayjnBdBfA9QWmT/WdgVln0vyXOYcDeMtqumb4/YSdhFRukz4Yl
3kTWWpXdvkhUXFK26TRdH13UYfZTk96wuDwtgG1vmr8sQYZqx+bCxB0qwH9SCSJ/
g02P4W/jp2llDyK10bdGtJnlrqFfj/+MD41EC4Vu4JibhAbxepXt/7w8yXeiFjR4
bTWsBA70+M62KLqkVk8YifJJs0lvt6PCR5nSdxJNn7ehRtyphH0DEguEBLmSJrIx
wPstXl/jEc9U25COSxRBkAiXW2s4ZjFJFrsC+Lo/+C4rIX8r3n8DdWejowIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEts9WA2pz5kfD3GFd2XPrkjNEIHMB8GA1UdIwQY
MBaAFAOZ7MCRRBRswXW1ik3kAMdlmuT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgt
MDg1YzkwMjExY2QwLzEvUzJ6MVlEYW5QbVI4UGNZVjNaYy11U00wUWdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgtMDg1YzkwMjExY2Qw
LzEvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdX3UD
BANdX3AwDQYJKoZIhvcNAQELBQADggEBAIeoaCgUX1iOUA7gCGmdB/4ttI5uRTTn
s9Whvr+Na2cSFRfTwVhANpSi307rdNFLme6+3+fZMN1jK4pXqz0BnpwXdrrHRtBC
4II8XyGB0T2rvmB2qNdpa4EL3lYwCKnKQweipw1vHe7CkMWk2L+KWdKR55RJy7lD
hwyxPYxtrGyvJ4TbH5oc8B7r9AuIidBCsc+tuevZnHjAgRUsgwXH5754NKtE7vSD
kkqVKFRJJuF3Fnl62LULeJsP1uuOA00PFGxHEarKjjD40cotKoySLXA+cunlen6X
FHxsFYsw6VL1HpW889eTLI/wIHab+A+wlsxe1RgW9L9ZfhIdUbdmZxI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org