Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/jcn2tdUB8Nq2olNYFe3J62IpX5s.roa
File: jcn2tdUB8Nq2olNYFe3J62IpX5s.roa (raw, json)
Hash identifier: clMGpL9ufWtIElr3O2cWkdmYkRAE/nsz4fJZVae4oSA=
Subject key identifier: 8D:C9:F6:B5:D5:01:F0:DA:B6:A2:53:58:15:ED:C9:EB:62:29:5F:9B
Certificate issuer: /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial: 08DE624D
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/jcn2tdUB8Nq2olNYFe3J62IpX5s.roa
Signing time: Sun 06 Feb 2022 14:12:02 +0000
ROA not before: Sun 06 Feb 2022 14:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8808
IP address blocks: 93.175.244.0/23 maxlen: 24
93.152.234.0/23 maxlen: 24
2a0d:3b40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148791885 (0x8de624d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
Validity
Not Before: Feb 6 14:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8dc9f6b5d501f0dab6a2535815edc9eb62295f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:66:73:58:52:f6:30:7c:4f:52:7e:c7:b3:
39:57:c1:42:29:28:c8:19:34:8a:59:7b:ea:b8:20:
0f:73:fc:1f:69:d6:d2:7e:f1:dc:91:53:ad:ce:35:
5a:9f:d3:f1:b8:47:74:a9:eb:dc:78:55:8c:72:a4:
af:ea:a5:78:7a:56:29:7c:74:d6:c9:3c:13:d2:da:
fe:54:25:3a:49:b1:ee:66:68:1a:53:0f:b0:5c:cf:
72:be:bb:49:1d:40:7f:69:62:40:a2:cd:3f:1f:34:
cf:5b:31:9d:2c:5e:21:f2:c6:de:8e:60:6c:ca:95:
f8:52:0c:62:a7:73:6d:ec:c2:fd:00:06:fd:37:72:
ac:90:72:fd:72:1b:a4:60:3c:5c:18:88:2e:bb:bc:
e3:bc:32:56:06:27:1e:0a:8e:54:16:07:87:31:16:
f7:30:65:71:08:e4:bd:a3:e4:74:15:d1:e0:54:06:
b9:21:f5:21:50:66:d9:42:d2:a9:f3:da:27:63:41:
86:fe:e5:52:ef:f9:01:5c:07:23:fc:25:c4:9e:ea:
e4:4d:1d:f0:f3:45:9b:e5:df:63:a8:ae:ec:d0:a1:
68:46:71:82:a5:b3:48:b7:3e:0e:95:32:86:5b:91:
e7:18:ec:b4:38:18:0b:8f:50:7c:01:78:bf:cb:c0:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:F6:B5:D5:01:F0:DA:B6:A2:53:58:15:ED:C9:EB:62:29:5F:9B
X509v3 Authority Key Identifier:
keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/jcn2tdUB8Nq2olNYFe3J62IpX5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.234.0/23
93.175.244.0/23
IPv6:
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
a3:8b:d7:c8:c9:d4:66:01:f4:78:4d:e5:28:5a:98:9b:72:86:
8e:3b:37:09:fd:56:2c:7c:18:ee:35:db:27:7d:9c:f5:c1:08:
04:0e:e1:aa:a8:a7:d9:2c:2f:47:b7:0e:b2:6f:fc:44:75:46:
4a:4b:f8:84:d0:d1:93:cc:cf:81:1a:d5:0a:51:13:5c:41:52:
71:99:b6:93:99:e5:4c:9f:5a:52:7d:d4:1f:b5:61:90:19:24:
fc:20:05:d1:b7:ad:ad:bb:2c:70:91:4b:1b:f9:95:9e:c4:12:
18:ca:f2:f1:3a:37:ef:10:2d:c2:e9:5c:f7:3b:e5:f1:e2:4f:
2e:09:e7:76:b3:78:d4:44:5f:c0:1d:7d:1f:4d:d4:c4:30:ad:
b3:4d:e8:30:15:35:7f:4f:66:dd:5c:2a:93:43:7a:03:7c:dc:
95:d6:91:a3:e6:6a:71:68:41:8e:46:7a:93:ad:7b:1d:f8:79:
f4:3d:44:76:85:8e:c3:e2:c9:6a:a3:dc:b6:65:d9:63:17:a1:
3b:31:21:d1:3e:c5:4a:cb:dd:d6:a9:b5:e9:33:de:e5:3a:f8:
fa:5d:73:4a:63:b7:b0:df:1b:a9:77:c3:64:4a:82:40:39:9b:
aa:fd:e9:2f:37:58:df:3b:f4:ea:dc:3e:50:7d:53:79:26:b9:
a6:6f:5e:38
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECN5iTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MTgxMjc3NDRiNGM2NjVjMmVmOWRlYTRkZjg2N2I1NDNhYzY1NjY5MB4XDTIyMDIw
NjE0MTIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGRjOWY2YjVkNTAx
ZjBkYWI2YTI1MzU4MTVlZGM5ZWI2MjI5NWY5YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK5uZnNYUvYwfE9SfsezOVfBQikoyBk0ill76rggD3P8H2nW
0n7x3JFTrc41Wp/T8bhHdKnr3HhVjHKkr+qleHpWKXx01sk8E9La/lQlOkmx7mZo
GlMPsFzPcr67SR1Af2liQKLNPx80z1sxnSxeIfLG3o5gbMqV+FIMYqdzbezC/QAG
/TdyrJBy/XIbpGA8XBiILru847wyVgYnHgqOVBYHhzEW9zBlcQjkvaPkdBXR4FQG
uSH1IVBm2ULSqfPaJ2NBhv7lUu/5AVwHI/wlxJ7q5E0d8PNFm+XfY6iu7NChaEZx
gqWzSLc+DpUyhluR5xjstDgYC49QfAF4v8vAnrcCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSNyfa11QHw2raiU1gV7cnrYilfmzAfBgNVHSMEGDAWgBTRgSd0S0xmXC75
3qTfhntUOsZWaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBZRW5kRXRNWmx3dS1kNmszNFo3VkRyR1Ztay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvYTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8x
L2pjbjJ0ZFVCOE5xMm9sTllGZTNKNjJJcFg1cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
YTRiZGEyLWU1MDctNDA3YS1hMmJiLTc1YzkzN2JmMWRhMC8xLzBZRW5kRXRNWmx3
dS1kNmszNFo3VkRyR1Ztay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAV2Y6gMEAV2v9DANBAIAAjAHAwUD
Kg07QDANBgkqhkiG9w0BAQsFAAOCAQEAo4vXyMnUZgH0eE3lKFqYm3KGjjs3Cf1W
LHwY7jXbJ32c9cEIBA7hqqin2SwvR7cOsm/8RHVGSkv4hNDRk8zPgRrVClETXEFS
cZm2k5nlTJ9aUn3UH7VhkBkk/CAF0betrbsscJFLG/mVnsQSGMry8To37xAtwulc
9zvl8eJPLgnndrN41ERfwB19H03UxDCts03oMBU1f09m3Vwqk0N6A3zcldaRo+Zq
cWhBjkZ6k617Hfh59D1EdoWOw+LJaqPctmXZYxehOzEh0T7FSsvd1qm16TPe5Tr4
+l1zSmO3sN8bqXfDZEqCQDmbqv3pLzdY3zv06tw+UH1TeSa5pm9eOA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org