Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/fCckaQSACwM_pWQU7JNgl6hJ91I.roa
File: fCckaQSACwM_pWQU7JNgl6hJ91I.roa (raw, json)
Hash identifier: Hx6lPPDCEdO/+cs/0Has4RDWErc+PGuN6sysIj/VGOQ=
Subject key identifier: 7C:27:24:69:04:80:0B:03:3F:A5:64:14:EC:93:60:97:A8:49:F7:52
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018A4236876EF7568CE86D5E606E40CA6628
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/fCckaQSACwM_pWQU7JNgl6hJ91I.roa
Signing time: Tue 29 Aug 2023 16:53:04 +0000
ROA not before: Tue 29 Aug 2023 16:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 93.95.114.0/24 maxlen: 24
93.95.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:36:87:6e:f7:56:8c:e8:6d:5e:60:6e:40:ca:66:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Aug 29 16:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c27246904800b033fa56414ec936097a849f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:7f:36:1f:c1:59:aa:02:34:cc:b2:b1:9e:
54:f4:43:c7:28:cd:85:8e:01:19:0c:db:4b:54:b9:
7f:6e:ce:e0:3a:c2:db:62:01:37:6f:f7:e0:50:82:
8e:bb:82:09:b6:35:8c:46:64:00:08:df:76:2d:3e:
f4:17:44:e4:20:34:19:73:8b:36:22:c6:1d:fd:0f:
26:e1:8a:ce:97:3b:51:24:d5:2b:8e:3a:25:3e:87:
41:e8:ca:60:0e:6d:ff:5a:02:b7:f8:43:45:5f:fd:
de:76:cf:ce:7a:2c:a5:06:02:19:4e:0d:88:ce:c5:
6b:b0:7c:e3:b3:a3:5c:bf:9b:50:1d:d9:84:9c:f0:
d5:08:dc:e6:e1:69:8c:03:6e:7b:ca:5b:94:dd:e7:
1a:3a:c0:74:69:65:7b:0c:b5:c5:1f:c3:78:8e:9a:
a7:52:eb:a6:48:0c:4b:47:a2:93:b9:52:c9:60:29:
0c:0c:57:e8:e8:14:63:09:91:9b:e4:7a:90:6e:70:
7d:5b:5d:37:b1:b9:8a:c8:a8:3e:8c:b0:8e:63:01:
e3:d5:81:1c:da:31:4b:a3:b2:e3:5c:1b:f4:d8:e8:
06:75:ed:58:18:17:c3:71:61:e6:28:05:b4:44:de:
b5:d5:a3:30:7d:7a:38:64:b0:c6:bc:c0:97:64:81:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:27:24:69:04:80:0B:03:3F:A5:64:14:EC:93:60:97:A8:49:F7:52
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/fCckaQSACwM_pWQU7JNgl6hJ91I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6e:4d:16:ff:38:fe:24:31:83:de:d5:2d:7c:57:db:55:c3:
67:35:59:46:1d:b8:51:7d:0b:ef:8a:8f:34:f0:87:f7:2b:44:
9d:9a:bc:bf:6e:98:ce:80:25:21:72:87:7e:af:1c:da:5f:28:
4e:e2:ee:4e:c7:52:cb:ea:2f:c3:2b:08:38:f4:e6:c0:89:2b:
1c:6a:eb:21:03:66:c1:f6:3d:4d:1f:d4:13:d8:8f:de:f3:51:
50:15:0c:d4:5f:95:60:f1:1e:b4:97:eb:b8:30:42:f4:91:77:
20:2d:fd:b4:2b:15:3b:74:0e:ae:e3:4b:c9:78:27:c4:9d:78:
5b:fd:cb:fb:cb:c8:1b:7c:df:2a:d9:16:29:a0:c7:18:37:69:
2d:1f:fc:65:3a:5a:6d:34:cc:a7:58:78:04:f6:ec:fb:1c:1e:
81:9d:18:84:da:32:3c:49:dd:dc:87:1e:10:fa:15:8d:66:10:
44:45:07:e8:cd:39:b4:2b:e9:b4:d8:75:fd:c9:6c:1c:0e:a0:
fb:0b:78:51:48:a8:59:d5:12:1a:56:b6:51:23:f3:59:4c:8a:
e5:0e:95:e4:c4:da:82:5a:02:e2:a3:33:79:07:35:6f:28:e8:
4a:ec:46:a7:46:53:30:fc:21:b6:46:d7:c7:ef:b9:fd:d7:bd:
64:c9:af:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpCNodu91aM6G1eYG5AymYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTllY2MwOTE0NDE0NmNjMTc1YjU4YTRkZTQwMGM3NjU5
YWU0ZjUwHhcNMjMwODI5MTY1MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzI3MjQ2OTA0ODAwYjAzM2ZhNTY0MTRlYzkzNjA5N2E4NDlmNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Z/Nh/BWaoCNMyysZ5U9EPHKM2F
jgEZDNtLVLl/bs7gOsLbYgE3b/fgUIKOu4IJtjWMRmQACN92LT70F0TkIDQZc4s2
IsYd/Q8m4YrOlztRJNUrjjolPodB6MpgDm3/WgK3+ENFX/3eds/OeiylBgIZTg2I
zsVrsHzjs6Ncv5tQHdmEnPDVCNzm4WmMA257yluU3ecaOsB0aWV7DLXFH8N4jpqn
UuumSAxLR6KTuVLJYCkMDFfo6BRjCZGb5HqQbnB9W103sbmKyKg+jLCOYwHj1YEc
2jFLo7LjXBv02OgGde1YGBfDcWHmKAW0RN611aMwfXo4ZLDGvMCXZIHW7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwnJGkEgAsDP6VkFOyTYJeoSfdSMB8GA1UdIwQY
MBaAFAOZ7MCRRBRswXW1ik3kAMdlmuT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgt
MDg1YzkwMjExY2QwLzEvZkNja2FRU0FDd01fcFdRVTdKTmdsNmhKOTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgtMDg1YzkwMjExY2Qw
LzEvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXV9yMA0G
CSqGSIb3DQEBCwUAA4IBAQBxbk0W/zj+JDGD3tUtfFfbVcNnNVlGHbhRfQvvio80
8If3K0Sdmry/bpjOgCUhcod+rxzaXyhO4u5Ox1LL6i/DKwg49ObAiSscaushA2bB
9j1NH9QT2I/e81FQFQzUX5Vg8R60l+u4MEL0kXcgLf20KxU7dA6u40vJeCfEnXhb
/cv7y8gbfN8q2RYpoMcYN2ktH/xlOlptNMynWHgE9uz7HB6BnRiE2jI8Sd3chx4Q
+hWNZhBERQfozTm0K+m02HX9yWwcDqD7C3hRSKhZ1RIaVrZRI/NZTIrlDpXkxNqC
WgLiozN5BzVvKOhK7EanRlMw/CG2RtfH77n9171kya+T
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org