Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/m2ZSENRFEiWQp4Qf8hx8wgJjaKA.roa
File: m2ZSENRFEiWQp4Qf8hx8wgJjaKA.roa (raw, json)
Hash identifier: Cl68yFhQndyJyYSfVE7PZb/llKFGRcgC7Zje5nCA8jg=
Subject key identifier: 9B:66:52:10:D4:45:12:25:90:A7:84:1F:F2:1C:7C:C2:02:63:68:A0
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018A43801E8E3BAFF2D07F447F18D210D240
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/m2ZSENRFEiWQp4Qf8hx8wgJjaKA.roa
Signing time: Tue 29 Aug 2023 22:53:04 +0000
ROA not before: Tue 29 Aug 2023 22:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 93.95.118.0/24 maxlen: 24
93.95.117.0/24 maxlen: 24
93.95.116.0/24 maxlen: 24
93.95.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:80:1e:8e:3b:af:f2:d0:7f:44:7f:18:d2:10:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Aug 29 22:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b665210d445122590a7841ff21c7cc2026368a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:70:27:26:2a:af:dd:ef:c3:8b:fb:ef:61:
21:7f:37:ad:a8:ca:51:47:61:e0:ff:cf:ae:ce:2b:
84:bd:eb:94:24:f5:26:02:b3:bf:24:1a:0a:ca:f7:
e3:7d:1b:80:fd:7b:be:e8:bc:6a:fc:3b:31:ea:40:
78:40:f4:26:ee:ad:b1:52:03:e9:3f:0b:c8:16:bc:
cf:20:e7:9b:b1:21:51:e5:f8:d5:1d:72:ff:2f:75:
42:cf:90:44:ac:c0:d0:da:62:53:ef:1e:fe:62:07:
65:b0:f6:09:cb:6d:64:79:e9:4c:23:9e:f5:45:0f:
f8:0d:c6:d4:bc:bb:07:c2:c0:aa:05:bf:6b:b6:83:
0e:15:9c:8b:22:aa:44:5b:8f:fd:52:f0:75:dc:72:
de:c6:e8:b6:6b:8b:30:d0:0a:8a:38:c2:b8:ee:f2:
da:42:61:f7:f9:64:b8:48:e7:d3:66:a1:64:40:5b:
10:63:0d:e9:b5:b9:0d:1c:1b:53:e2:35:d4:5e:53:
c4:9e:98:48:a1:c6:a5:32:6a:b1:e9:6b:d3:1c:6b:
0f:ed:51:22:0b:f4:b6:3a:a2:fe:ac:97:b6:a6:90:
07:a9:df:71:48:e9:d7:d5:9a:70:87:53:76:5b:f4:
15:61:22:06:15:6f:4f:f6:b8:77:89:b4:ac:09:0d:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:52:10:D4:45:12:25:90:A7:84:1F:F2:1C:7C:C2:02:63:68:A0
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/m2ZSENRFEiWQp4Qf8hx8wgJjaKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:0e:89:5f:ae:91:00:21:c3:b1:b7:b1:f2:da:92:c5:c1:07:
15:4b:f5:96:95:75:7d:46:ed:49:be:bb:f0:1a:c8:5d:65:51:
f4:58:3d:0c:4e:b1:cf:ad:b2:85:9b:4e:fc:d6:b9:2f:12:a1:
7f:7e:68:fc:90:c9:a8:cb:6a:f1:e3:fc:8b:2b:9b:5d:a5:bd:
16:c8:7c:db:a9:1c:67:18:87:86:8c:0a:c5:30:ed:dd:2c:d6:
dd:09:58:99:ed:29:8a:64:b2:dd:2c:4b:5e:62:58:85:95:76:
55:16:19:b1:82:80:01:e6:7b:6a:1b:e2:6f:17:61:55:29:5f:
24:d2:ef:54:38:d8:84:d9:83:d0:b9:60:26:30:cf:1e:54:4e:
58:c5:1a:3b:4b:50:70:e6:be:c8:47:cf:94:4c:c9:f0:d4:aa:
7d:2b:64:69:28:df:20:d6:c1:33:13:b3:2b:78:6d:69:20:9d:
ac:6e:27:8f:c1:92:6b:59:44:4f:9d:5f:e8:6e:49:b8:53:38:
51:0e:50:27:66:17:1e:41:05:8a:3c:6f:40:3b:b2:d0:3f:66:
eb:bc:8b:ef:6b:73:7d:a4:a3:d7:b6:e0:6d:5c:e1:07:dc:54:
c1:ce:2a:28:90:83:15:ed:f9:c9:9d:a3:4a:c4:f2:69:b5:9f:
1d:1d:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:38 2024 by rpki-client on console-ams.rpki-client.org