Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/g32gta9UUQsvHkDdJ9-J30T4nNI.roa
File: g32gta9UUQsvHkDdJ9-J30T4nNI.roa (raw, json)
Hash identifier: Bwrbg41f02j7EM89nwwzuB/5AT38NcUvlkWhCM1iBEU=
Subject key identifier: 83:7D:A0:B5:AF:54:51:0B:2F:1E:40:DD:27:DF:89:DF:44:F8:9C:D2
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018B19FBD3A330B55102D973C517F10F0B49
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/g32gta9UUQsvHkDdJ9-J30T4nNI.roa
Signing time: Tue 10 Oct 2023 14:26:55 +0000
ROA not before: Tue 10 Oct 2023 14:26:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:fb:d3:a3:30:b5:51:02:d9:73:c5:17:f1:0f:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Oct 10 14:26:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=837da0b5af54510b2f1e40dd27df89df44f89cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:a5:fe:aa:f6:41:a5:6c:cf:9d:15:5b:3c:
46:fb:57:76:2b:bc:19:b5:b5:6d:fc:23:26:1b:4f:
3a:ac:12:0d:f4:c7:40:88:4d:1d:51:8a:07:7a:fd:
ea:77:5b:6d:6c:cb:9a:6a:af:ee:06:3e:c6:b8:39:
79:ac:fa:cc:b0:38:43:03:37:e8:28:bf:95:8c:6f:
69:3b:cd:c1:94:a6:c0:c2:f3:69:21:7c:04:e6:b6:
5c:8e:0b:5f:ac:8a:43:a9:b5:04:1a:b4:58:07:90:
78:06:ca:2c:06:7e:4b:37:5f:92:18:79:96:7c:4b:
8a:b1:ed:2f:58:ef:55:1e:b0:df:73:9b:ca:1d:ae:
7e:5d:b4:2b:04:76:2e:20:65:f6:7b:56:75:d9:c1:
de:11:48:f0:f3:34:a5:c8:20:d4:ff:c0:4e:67:91:
d0:ba:29:19:b6:fe:4f:55:a0:69:52:e2:37:dc:90:
74:ee:fa:ec:e5:8d:dd:cf:e9:09:40:6b:48:9d:97:
e3:be:c8:4b:a8:ee:d4:04:68:f1:49:cf:95:86:01:
5c:79:8e:fd:f9:c7:ff:22:54:29:82:ec:54:47:b1:
97:55:ea:22:c2:59:c9:2c:e6:19:b2:bf:4f:72:8d:
5b:7d:16:a5:45:93:e0:b6:0c:0d:e4:89:1d:ce:2a:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:A0:B5:AF:54:51:0B:2F:1E:40:DD:27:DF:89:DF:44:F8:9C:D2
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/g32gta9UUQsvHkDdJ9-J30T4nNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
74:13:6f:d6:3f:d5:33:f8:62:7a:41:57:9a:c1:a6:60:e6:df:
ba:89:b5:fb:08:cc:34:42:40:30:80:6c:de:cb:ca:aa:f7:1b:
79:21:64:cd:2b:91:96:22:ce:59:fd:21:d4:9a:3c:51:82:57:
6a:2f:46:b6:d5:db:dd:09:84:7a:6b:98:8d:a1:62:27:eb:8b:
e2:41:8a:06:88:e7:6e:a6:a0:d1:b9:af:ae:0f:e7:2b:40:38:
1c:4a:93:ae:b3:c3:b5:83:15:98:ce:f4:86:f9:7d:7c:ca:43:
47:fb:b9:f4:3a:c1:67:60:76:17:99:e6:e3:60:ef:8b:ae:2c:
0e:44:c7:c5:39:0f:ec:e7:7c:22:96:d6:34:10:c3:cf:bf:39:
52:8e:2e:47:09:12:0f:b9:46:f3:04:5b:12:9c:7b:48:14:b8:
4c:b6:c1:92:49:46:38:1b:e0:8f:66:f6:24:c0:31:72:e8:b6:
b4:5c:79:ec:73:0d:f9:e5:7d:30:2e:fa:47:77:89:6d:c6:29:
75:00:d8:83:37:03:d9:72:bd:cf:a6:59:cc:33:2d:01:9c:67:
33:d7:3d:f5:6b:31:e8:03:7f:7c:9f:c2:77:f2:68:52:a5:58:
ba:37:77:53:ff:51:da:d2:8a:e7:fd:a0:5f:8f:1b:3c:b3:3b:
8c:4a:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org