Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/ERRh0Uez5Mi2oQFQC95FSygGx9k.roa
File: ERRh0Uez5Mi2oQFQC95FSygGx9k.roa (raw, json)
Hash identifier: Q+M6gKPdB2QKoBJG15jJDx3wmoZkfR6lVSaKrjGS8as=
Subject key identifier: 11:14:61:D1:47:B3:E4:C8:B6:A1:01:50:0B:DE:45:4B:28:06:C7:D9
Certificate issuer: /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial: 08914F17
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/ERRh0Uez5Mi2oQFQC95FSygGx9k.roa
Signing time: Sat 01 Jan 2022 15:06:49 +0000
ROA not before: Sat 01 Jan 2022 15:06:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8808
IP address blocks: 93.175.244.0/23 maxlen: 24
93.152.234.0/23 maxlen: 24
2a0d:3b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143740695 (0x8914f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
Validity
Not Before: Jan 1 15:06:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=111461d147b3e4c8b6a101500bde454b2806c7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:b8:f7:62:66:a0:77:54:4a:73:cc:69:69:
e9:29:06:34:19:b5:6b:39:6c:76:68:79:49:ca:4e:
0e:7c:e6:df:b3:20:b8:75:60:63:78:62:a3:4a:2b:
72:94:41:c1:8e:67:e7:f9:97:69:05:86:30:78:b0:
e3:b6:6f:23:ec:76:dc:a4:e1:fc:15:c7:43:c3:cb:
f4:2d:da:4b:71:c7:d6:31:b2:9f:5a:f2:a9:ce:40:
85:36:89:de:27:d2:6c:90:7a:12:e7:1a:9e:72:d9:
f5:ed:96:82:90:5d:99:22:b1:76:36:53:b1:c5:5a:
d8:32:40:33:95:8a:a7:93:51:13:8c:1e:53:12:ee:
86:d9:a5:1f:cc:54:2e:17:aa:b3:f6:cc:ae:ae:e4:
40:7e:01:8a:ca:86:b0:b7:f5:d7:38:0c:4d:4a:a5:
1c:90:a6:99:d8:2b:1e:3a:14:b1:21:f6:42:b6:79:
3d:ba:57:e8:a8:14:e7:78:4d:f9:7a:35:6a:46:c1:
6e:f1:ba:97:1d:df:31:72:18:7e:c6:b8:d4:3f:b3:
4b:89:27:4d:dd:29:66:8f:f4:94:3e:82:78:0f:8b:
9a:4a:8e:d8:9a:01:1e:3f:5e:7d:07:3b:fe:62:eb:
bf:57:56:ce:5c:c1:c0:91:df:e0:65:a4:02:f1:92:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:61:D1:47:B3:E4:C8:B6:A1:01:50:0B:DE:45:4B:28:06:C7:D9
X509v3 Authority Key Identifier:
keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/ERRh0Uez5Mi2oQFQC95FSygGx9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.234.0/23
93.175.244.0/23
IPv6:
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
7d:3b:fa:d2:32:af:17:c2:27:a6:bb:16:59:34:ef:ad:d8:92:
63:45:45:59:d1:a3:a8:93:24:78:02:f8:9f:60:9a:f7:f4:67:
a9:91:71:b3:1b:17:ec:57:dd:c9:ea:77:0a:69:15:c9:71:2f:
21:a0:e9:87:ed:5c:13:e4:90:56:52:0e:4b:fb:1a:08:1f:50:
ac:94:4f:b2:29:dd:e1:34:67:68:25:bc:ee:dd:dc:0a:0c:2e:
ff:c7:bc:df:b4:94:3b:88:aa:53:39:86:2e:c4:55:1e:96:c9:
d7:f1:a5:ac:1c:60:0a:14:5f:36:7e:31:31:6c:0b:84:9a:e9:
08:c4:8f:f7:f6:1b:42:7d:57:39:35:26:bc:8d:fa:ec:9f:23:
76:df:37:1b:9d:6f:44:fa:ea:21:29:33:85:82:ef:b2:96:98:
be:f1:77:9f:7e:19:38:37:b7:d5:a6:83:a1:46:7d:e2:d6:53:
f0:10:95:7b:5a:c9:25:b8:13:d3:91:8f:fc:dd:22:0c:64:fd:
59:94:2b:a4:11:53:08:a5:cf:bd:17:0a:0e:7b:63:c0:82:c7:
3a:1a:73:6c:2a:23:4f:4e:e7:ff:60:84:e3:a0:3e:25:12:f4:
15:9f:47:f1:7f:07:28:b2:44:70:de:7e:ea:68:a2:a2:67:47:
bc:66:05:54
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECJFPFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MTgxMjc3NDRiNGM2NjVjMmVmOWRlYTRkZjg2N2I1NDNhYzY1NjY5MB4XDTIyMDEw
MTE1MDY0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTExNDYxZDE0N2Iz
ZTRjOGI2YTEwMTUwMGJkZTQ1NGIyODA2YzdkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKr3uPdiZqB3VEpzzGlp6SkGNBm1azlsdmh5ScpODnzm37Mg
uHVgY3hio0orcpRBwY5n5/mXaQWGMHiw47ZvI+x23KTh/BXHQ8PL9C3aS3HH1jGy
n1ryqc5AhTaJ3ifSbJB6EucannLZ9e2WgpBdmSKxdjZTscVa2DJAM5WKp5NRE4we
UxLuhtmlH8xULheqs/bMrq7kQH4BisqGsLf11zgMTUqlHJCmmdgrHjoUsSH2QrZ5
PbpX6KgU53hN+Xo1akbBbvG6lx3fMXIYfsa41D+zS4knTd0pZo/0lD6CeA+LmkqO
2JoBHj9efQc7/mLrv1dWzlzBwJHf4GWkAvGScBMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQRFGHRR7PkyLahAVAL3kVLKAbH2TAfBgNVHSMEGDAWgBTRgSd0S0xmXC75
3qTfhntUOsZWaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBZRW5kRXRNWmx3dS1kNmszNFo3VkRyR1Ztay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvYTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8x
L0VSUmgwVWV6NU1pMm9RRlFDOTVGU3lnR3g5ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
YTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8xLzBZRW5kRXRNWmx3
dS1kNmszNFo3VkRyR1Ztay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAV2Y6gMEAV2v9DANBAIAAjAHAwUD
Kg07QDANBgkqhkiG9w0BAQsFAAOCAQEAfTv60jKvF8InprsWWTTvrdiSY0VFWdGj
qJMkeAL4n2Ca9/RnqZFxsxsX7Ffdyep3CmkVyXEvIaDph+1cE+SQVlIOS/saCB9Q
rJRPsind4TRnaCW87t3cCgwu/8e837SUO4iqUzmGLsRVHpbJ1/GlrBxgChRfNn4x
MWwLhJrpCMSP9/YbQn1XOTUmvI367J8jdt83G51vRPrqISkzhYLvspaYvvF3n34Z
ODe31aaDoUZ94tZT8BCVe1rJJbgT05GP/N0iDGT9WZQrpBFTCKXPvRcKDntjwILH
OhpzbCojT07n/2CE46A+JRL0FZ9H8X8HKLJEcN5+6miiomdHvGYFVA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org