Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/e_mdzqPwWqsKge945WkUEXaThMs.roa
File: e_mdzqPwWqsKge945WkUEXaThMs.roa (raw, json)
Hash identifier: KTZ/RBWmqgpw7stoTUVjY38MEdcgwYo4rorbHyG8sKc=
Subject key identifier: 7B:F9:9D:CE:A3:F0:5A:AB:0A:81:EF:78:E5:69:14:11:76:93:84:CB
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018BCA096D4DF3E46CB773D2211F7C922541
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/e_mdzqPwWqsKge945WkUEXaThMs.roa
Signing time: Mon 13 Nov 2023 18:54:57 +0000
ROA not before: Mon 13 Nov 2023 18:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136011
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:09:6d:4d:f3:e4:6c:b7:73:d2:21:1f:7c:92:25:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Nov 13 18:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bf99dcea3f05aab0a81ef78e5691411769384cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:25:f3:5c:76:63:c6:ed:fb:07:8d:08:c9:
b8:75:53:6d:c9:ab:31:6b:2f:f8:09:d2:81:12:00:
81:a6:86:49:1d:0a:6d:18:d6:47:66:36:05:38:74:
de:b6:6a:9f:9e:d8:0d:a7:70:a7:2c:23:97:58:5f:
0e:ab:03:4a:30:8e:38:22:a5:32:cd:65:0d:04:e2:
37:d1:2c:78:b0:60:c9:92:fb:66:24:76:58:b7:a8:
88:12:16:9c:ad:9b:47:e8:a3:4b:fb:1f:7d:a3:ed:
1f:01:51:31:74:5b:4c:67:52:2f:a5:04:68:d7:d1:
d9:1a:5c:c3:41:9f:0e:98:97:d9:97:7c:0c:28:f3:
49:bc:09:4a:e7:0c:0d:01:83:fb:1b:60:c2:52:fe:
a6:2d:16:c6:37:e4:47:7f:97:1d:a4:d3:85:e4:55:
0e:a8:74:42:d1:2b:0f:d2:cf:cd:86:ae:fa:f2:e6:
63:92:7c:83:41:45:f2:bd:79:c5:a6:fb:62:47:33:
dc:86:9d:92:ae:b0:18:d3:62:93:8a:a9:0d:9a:a3:
f0:58:a1:92:64:98:f9:78:3f:c1:4e:56:5e:fe:b5:
86:0f:03:a2:05:33:69:91:50:af:6e:d0:96:5f:26:
ac:70:74:da:c1:48:45:34:9f:1b:00:53:fa:53:05:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F9:9D:CE:A3:F0:5A:AB:0A:81:EF:78:E5:69:14:11:76:93:84:CB
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/e_mdzqPwWqsKge945WkUEXaThMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4d:10:33:63:aa:fd:7f:b1:9a:34:91:71:ad:13:c9:74:bd:
61:60:1b:30:12:44:a7:84:57:f9:b1:ee:36:2e:22:21:7f:b9:
59:41:60:85:1c:98:c4:66:23:37:2f:05:6a:de:97:10:fa:c7:
72:8b:d5:eb:0b:25:f1:2b:be:69:08:81:85:a2:10:a8:95:bb:
15:d8:b9:5a:b4:dc:67:02:34:fd:1a:dd:5d:f6:17:f4:41:a0:
77:1c:41:17:67:14:bb:04:91:a5:7a:1d:02:b7:6c:47:95:6f:
6e:99:43:9f:89:b5:7e:e6:12:30:8b:54:55:46:01:24:f7:f7:
e2:d9:98:54:d5:d8:08:a8:6d:85:90:63:9c:b6:24:d8:2d:c1:
8c:e9:4b:f4:7b:cf:d8:fa:49:fa:03:c8:47:41:45:c8:84:03:
5b:58:f5:78:e3:fb:3d:fa:a3:1d:05:41:74:20:25:5b:41:58:
ee:7c:8f:ac:ca:56:3c:e8:65:7b:8f:92:21:9c:a7:f5:39:e2:
3f:02:53:6e:4b:6b:25:3b:57:ca:e9:77:97:01:c3:04:cf:37:
e1:3d:3a:d1:7b:37:f4:8b:80:41:91:92:5a:14:26:ba:35:38:
1e:26:42:2b:8a:65:1f:ff:9c:81:27:22:b9:00:90:83:fa:0a:
f2:72:7b:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvKCW1N8+Rst3PSIR98kiVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTllY2MwOTE0NDE0NmNjMTc1YjU4YTRkZTQwMGM3NjU5
YWU0ZjUwHhcNMjMxMTEzMTg1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmY5OWRjZWEzZjA1YWFiMGE4MWVmNzhlNTY5MTQxMTc2OTM4NGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCMl81x2Y8bt+weNCMm4dVNtyasx
ay/4CdKBEgCBpoZJHQptGNZHZjYFOHTetmqfntgNp3CnLCOXWF8OqwNKMI44IqUy
zWUNBOI30Sx4sGDJkvtmJHZYt6iIEhacrZtH6KNL+x99o+0fAVExdFtMZ1IvpQRo
19HZGlzDQZ8OmJfZl3wMKPNJvAlK5wwNAYP7G2DCUv6mLRbGN+RHf5cdpNOF5FUO
qHRC0SsP0s/Nhq768uZjknyDQUXyvXnFpvtiRzPchp2SrrAY02KTiqkNmqPwWKGS
ZJj5eD/BTlZe/rWGDwOiBTNpkVCvbtCWXyascHTawUhFNJ8bAFP6UwWRawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHv5nc6j8FqrCoHveOVpFBF2k4TLMB8GA1UdIwQY
MBaAFAOZ7MCRRBRswXW1ik3kAMdlmuT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgt
MDg1YzkwMjExY2QwLzEvZV9tZHpxUHdXcXNLZ2U5NDVXa1VFWGFUaE1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgtMDg1YzkwMjExY2Qw
LzEvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV9wMA0G
CSqGSIb3DQEBCwUAA4IBAQCJTRAzY6r9f7GaNJFxrRPJdL1hYBswEkSnhFf5se42
LiIhf7lZQWCFHJjEZiM3LwVq3pcQ+sdyi9XrCyXxK75pCIGFohColbsV2LlatNxn
AjT9Gt1d9hf0QaB3HEEXZxS7BJGleh0Ct2xHlW9umUOfibV+5hIwi1RVRgEk9/fi
2ZhU1dgIqG2FkGOctiTYLcGM6Uv0e8/Y+kn6A8hHQUXIhANbWPV44/s9+qMdBUF0
ICVbQVjufI+sylY86GV7j5IhnKf1OeI/AlNuS2slO1fK6XeXAcMEzzfhPTrRezf0
i4BBkZJaFCa6NTgeJkIrimUf/5yBJyK5AJCD+grycnuE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org