Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/KxgH4zCrj-Fju28MeBM3sSf8AT8.roa
File: KxgH4zCrj-Fju28MeBM3sSf8AT8.roa (raw, json)
Hash identifier: dW7p9BKSG1TizCFFT0c/xrD0N4dy4U7h9IoNWBoj4lA=
Subject key identifier: 2B:18:07:E3:30:AB:8F:E1:63:BB:6F:0C:78:13:37:B1:27:FC:01:3F
Certificate issuer: /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial: 01857139F83B982E332F346234DBD2F39FC7
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/KxgH4zCrj-Fju28MeBM3sSf8AT8.roa
Signing time: Mon 02 Jan 2023 06:45:02 +0000
ROA not before: Mon 02 Jan 2023 06:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41313
IP address blocks: 93.152.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:f8:3b:98:2e:33:2f:34:62:34:db:d2:f3:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
Validity
Not Before: Jan 2 06:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b1807e330ab8fe163bb6f0c781337b127fc013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:76:bc:bf:ed:0e:12:e4:a5:e1:d0:91:02:
fd:d2:80:15:30:6e:b3:52:68:ba:d3:cb:35:b3:bd:
01:1c:9d:a6:97:04:bd:9e:79:c9:69:c3:12:af:af:
4f:3d:a1:81:b6:39:f0:71:a9:fb:26:34:b7:36:02:
4f:f4:9c:ad:f9:da:53:37:cf:83:76:c8:10:ef:bc:
e1:47:e8:87:60:3a:67:98:a8:31:8d:de:0c:fb:0c:
34:fb:95:60:e5:be:48:ad:f5:89:b2:aa:83:fc:a1:
a7:3f:ce:77:75:c1:08:8c:d8:da:ff:2a:45:e1:4d:
f4:7e:33:1d:a3:1e:43:69:74:89:3c:75:05:64:9f:
42:11:1d:81:4e:35:7f:4d:2c:cc:39:8f:a6:9c:0e:
92:2a:1d:8b:92:cd:8f:b1:59:6b:78:a4:92:5b:7f:
fb:4b:fd:64:59:d3:aa:a1:4c:33:16:4e:09:55:b9:
d1:5a:87:55:44:44:5d:e2:d9:a0:0b:8a:cc:65:b8:
3d:48:85:ed:54:d3:dd:1f:31:19:78:32:c0:d6:59:
c9:68:46:13:97:ad:93:d8:59:42:2c:ae:cf:e7:eb:
ab:f4:ec:dc:45:c9:48:41:c5:11:89:ea:34:25:5e:
f5:0f:0b:56:1e:68:32:63:94:b7:44:58:c1:bb:c3:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:07:E3:30:AB:8F:E1:63:BB:6F:0C:78:13:37:B1:27:FC:01:3F
X509v3 Authority Key Identifier:
keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/KxgH4zCrj-Fju28MeBM3sSf8AT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.234.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:c3:6f:86:55:be:51:16:17:ec:31:89:bb:d1:c5:98:51:44:
de:aa:e0:8a:4d:bb:c3:a1:e7:1b:cb:1c:67:ec:97:e5:fa:6f:
0a:2c:6c:39:f7:c8:f7:d0:68:be:b8:8f:2f:5d:5a:ee:0c:fa:
57:db:3b:b2:85:98:66:8f:b2:85:47:54:90:8f:d2:94:5c:bd:
19:a3:02:e9:45:4c:f4:6a:c3:25:08:63:3b:3e:c7:33:25:d5:
45:da:28:ac:dd:46:99:ba:5d:b5:c3:fd:f0:bb:9c:a6:ca:2d:
ff:0d:12:c5:3d:99:a4:a7:f4:42:a8:a6:ad:31:a0:a7:c9:ea:
e0:ff:db:b2:f1:9a:c0:8d:9a:f5:b3:27:50:04:e9:65:8f:93:
b2:9a:53:3d:a0:ec:d0:b6:8c:4b:08:90:89:36:d8:13:8f:e9:
f6:11:fa:9e:2a:b5:06:05:22:ce:d0:2f:da:ad:9e:11:fc:10:
a8:07:60:4e:6a:65:2a:ec:f8:62:16:7a:bf:1b:ef:a1:3b:b1:
9e:0b:ad:a5:79:03:4a:ec:08:22:34:8a:3a:05:eb:5d:24:30:
05:57:fd:f3:55:02:92:5c:1f:44:46:e8:c3:99:52:dc:cc:47:
5b:9c:5f:f5:d3:0b:c8:5d:0c:44:7c:45:32:19:54:13:c5:eb:
c4:cb:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org