Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/vn9vKVJ2Zyi2XXyeQRJzFQtWPTo.roa
File: vn9vKVJ2Zyi2XXyeQRJzFQtWPTo.roa (raw, json)
Hash identifier: 7B+yI5XAfKgZllUyvw2iWtjXosxz8RqSxHnOL2GVtQ4=
Subject key identifier: BE:7F:6F:29:52:76:67:28:B6:5D:7C:9E:41:12:73:15:0B:56:3D:3A
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018A43801EF9C4071B365EB01B28E233DAE6
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/vn9vKVJ2Zyi2XXyeQRJzFQtWPTo.roa
Signing time: Tue 29 Aug 2023 22:53:04 +0000
ROA not before: Tue 29 Aug 2023 22:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 93.95.116.0/24 maxlen: 24
93.95.114.0/24 maxlen: 24
93.95.117.0/24 maxlen: 24
93.95.115.0/24 maxlen: 24
93.95.118.0/24 maxlen: 24
93.95.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:80:1e:f9:c4:07:1b:36:5e:b0:1b:28:e2:33:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Aug 29 22:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be7f6f2952766728b65d7c9e411273150b563d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:be:0f:b9:f3:0c:f7:42:33:f4:73:19:1b:
3d:88:ad:08:e0:3b:db:93:2b:4f:fe:1b:1d:9c:10:
bb:1f:5b:9d:83:c8:33:bc:3f:76:40:2f:95:6e:e1:
73:3e:d4:f0:ab:94:88:1a:91:35:e4:63:94:c4:3f:
42:2f:72:a7:b0:2d:ab:ef:85:1a:54:5a:d8:20:f0:
ec:77:18:20:d0:71:ae:de:67:01:28:81:a2:d8:7e:
3e:cf:6e:ec:ac:99:b2:31:22:be:cf:0d:8d:15:f0:
f9:98:de:af:8d:39:8b:3f:5d:60:4e:ee:9a:b5:5f:
3b:ce:c1:cc:6c:10:f9:c5:56:00:49:01:95:df:26:
1c:a8:5b:ab:8d:7e:6c:b3:4e:9b:8d:e9:15:c9:c6:
37:fd:9f:e0:8c:d8:da:2c:a6:96:57:5b:3a:2d:2b:
50:80:9a:34:fb:40:9e:b2:9f:29:7f:b6:d6:9b:51:
fd:84:2f:2d:63:de:51:3e:68:45:54:14:fd:5b:3d:
ab:31:8a:87:72:de:47:92:3d:c7:1d:c2:c6:77:83:
17:da:eb:a6:ba:45:ed:62:11:c9:e1:e3:46:46:f9:
f4:1f:93:42:00:6a:4a:90:93:3f:de:62:c2:6f:8b:
64:ba:91:a4:ac:01:18:8d:95:00:76:84:91:bf:56:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:6F:29:52:76:67:28:B6:5D:7C:9E:41:12:73:15:0B:56:3D:3A
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/vn9vKVJ2Zyi2XXyeQRJzFQtWPTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0-93.95.119.255
Signature Algorithm: sha256WithRSAEncryption
12:87:d1:f5:c2:d8:70:57:b9:ce:14:a8:a0:6d:ad:eb:75:e9:
68:71:59:bd:10:4c:6c:3f:89:ce:51:d2:e6:48:9b:fa:12:bd:
8f:fb:a4:ea:a0:28:b2:89:0d:65:75:8d:30:c3:4f:b9:18:ef:
66:53:fa:2b:6a:ea:68:85:65:fa:4b:4d:d8:ce:dd:d9:64:e7:
bd:79:b8:bc:5a:1e:3d:50:0a:3e:52:3c:38:44:6e:a3:f8:f0:
0e:56:72:27:4a:0f:3b:31:f1:af:23:1b:aa:71:31:17:f5:6e:
da:5e:b0:cf:28:df:fc:21:2b:d0:91:e6:e1:69:97:05:25:a9:
1f:25:f9:41:d4:c4:1a:4d:e4:cb:a6:73:9c:38:5b:4e:3a:c7:
06:76:82:0d:4f:e7:d1:20:ea:3f:e0:d5:ea:d9:d4:e8:3b:da:
e0:24:97:08:c5:e4:55:ea:2a:c4:32:c0:84:3e:a5:c8:b5:43:
15:4b:76:db:f2:ae:5d:dd:be:88:7e:d8:55:18:0e:6e:b1:c9:
ef:87:9d:91:bf:14:8c:e2:76:cd:48:b2:2f:35:4a:08:81:42:
0b:9e:8d:b4:8f:a6:39:a9:6d:2f:5c:c6:5d:20:75:8c:71:db:
af:08:db:89:14:95:36:f8:e4:44:64:5d:c5:2c:b7:bb:8d:ea:
d2:b6:72:2d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYpDgB75xAcbNl6wGyjiM9rmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTllY2MwOTE0NDE0NmNjMTc1YjU4YTRkZTQwMGM3NjU5
YWU0ZjUwHhcNMjMwODI5MjI1MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTdmNmYyOTUyNzY2NzI4YjY1ZDdjOWU0MTEyNzMxNTBiNTYzZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0i+D7nzDPdCM/RzGRs9iK0I4Dvb
kytP/hsdnBC7H1udg8gzvD92QC+VbuFzPtTwq5SIGpE15GOUxD9CL3KnsC2r74Ua
VFrYIPDsdxgg0HGu3mcBKIGi2H4+z27srJmyMSK+zw2NFfD5mN6vjTmLP11gTu6a
tV87zsHMbBD5xVYASQGV3yYcqFurjX5ss06bjekVycY3/Z/gjNjaLKaWV1s6LStQ
gJo0+0Cesp8pf7bWm1H9hC8tY95RPmhFVBT9Wz2rMYqHct5Hkj3HHcLGd4MX2uum
ukXtYhHJ4eNGRvn0H5NCAGpKkJM/3mLCb4tkupGkrAEYjZUAdoSRv1bRWwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL5/bylSdmcotl18nkEScxULVj06MB8GA1UdIwQY
MBaAFAOZ7MCRRBRswXW1ik3kAMdlmuT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgt
MDg1YzkwMjExY2QwLzEvdm45dktWSjJaeWkyWFh5ZVFSSnpGUXRXUFRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83YWFiMjAtMDZhNC00ZTFjLTk4ZTgtMDg1YzkwMjExY2Qw
LzEvQTVuc3dKRkVGR3pCZGJXS1RlUUF4MldhNVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFdX3ID
BANdX3AwDQYJKoZIhvcNAQELBQADggEBABKH0fXC2HBXuc4UqKBtret16WhxWb0Q
TGw/ic5R0uZIm/oSvY/7pOqgKLKJDWV1jTDDT7kY72ZT+itq6miFZfpLTdjO3dlk
5715uLxaHj1QCj5SPDhEbqP48A5WcidKDzsx8a8jG6pxMRf1btpesM8o3/whK9CR
5uFplwUlqR8l+UHUxBpN5Mumc5w4W046xwZ2gg1P59Eg6j/g1erZ1Og72uAklwjF
5FXqKsQywIQ+pci1QxVLdtvyrl3dvoh+2FUYDm6xye+HnZG/FIzids1Isi81SgiB
QguejbSPpjmpbS9cxl0gdYxx268I24kUlTb45ERkXcUst7uN6tK2ci0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:38 2024 by rpki-client on console-ams.rpki-client.org