Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/e7JQ6IvxfYoUVuFBf8WdcvJF0vk.roa
File: e7JQ6IvxfYoUVuFBf8WdcvJF0vk.roa (raw, json)
Hash identifier: CtUlkLveDCT7B/yEcfqPqRVJv1yhuoQXMteki9N2tiM=
Subject key identifier: 7B:B2:50:E8:8B:F1:7D:8A:14:56:E1:41:7F:C5:9D:72:F2:45:D2:F9
Certificate issuer: /CN=0c66776c3d1767fca95f3aa9ced972d7aea557ee
Certificate serial: 01857142D622BDB840F5D9710D9852D04549
Authority key identifier: 0C:66:77:6C:3D:17:67:FC:A9:5F:3A:A9:CE:D9:72:D7:AE:A5:57:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGZ3bD0XZ_ypXzqpztly166lV-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/e7JQ6IvxfYoUVuFBf8WdcvJF0vk.roa
Signing time: Mon 02 Jan 2023 06:54:43 +0000
ROA not before: Mon 02 Jan 2023 06:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 93.187.64.0/24 maxlen: 24
93.187.67.0/24 maxlen: 24
93.187.65.0/24 maxlen: 24
93.187.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d6:22:bd:b8:40:f5:d9:71:0d:98:52:d0:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c66776c3d1767fca95f3aa9ced972d7aea557ee
Validity
Not Before: Jan 2 06:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bb250e88bf17d8a1456e1417fc59d72f245d2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:d3:dd:01:f3:fe:36:f2:c7:66:c4:8a:00:
13:e6:f2:b5:5c:e5:69:63:3d:ea:21:c1:72:53:63:
ec:cb:aa:68:1f:99:e8:fa:91:df:20:67:84:d6:c7:
a9:9b:bc:f8:86:02:3d:72:dc:24:b4:af:7c:d8:f2:
a7:39:c9:2d:46:fb:ef:ad:c9:10:7d:af:17:8e:a2:
52:08:25:dd:d3:46:ae:d5:47:fa:b5:0b:fd:28:a0:
a7:28:ee:57:68:f9:a4:a2:71:9b:83:a1:c3:d9:48:
1e:d7:cf:72:a5:df:a2:88:36:99:be:1e:f3:42:b2:
f4:af:1b:55:30:9d:1e:56:59:35:73:65:73:ab:81:
91:a1:3b:d0:de:26:5f:b5:5c:ec:b8:0f:44:02:48:
ab:48:04:1b:a6:51:39:e5:5b:12:a9:05:b3:57:50:
07:81:e5:ce:11:dd:c4:03:17:29:3c:1a:8f:73:f0:
51:97:ec:5f:ed:7a:0a:a5:63:22:94:a9:ae:3e:8a:
37:42:3a:f7:fc:90:7f:07:73:bd:2e:9e:8c:83:51:
22:ef:2d:a3:e3:9b:49:83:13:d6:35:a0:f9:32:d7:
74:1b:a8:af:56:9a:d9:64:6d:af:4f:a5:da:aa:0c:
dc:3c:dd:34:8c:fb:98:19:00:d9:c0:0e:25:15:58:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:50:E8:8B:F1:7D:8A:14:56:E1:41:7F:C5:9D:72:F2:45:D2:F9
X509v3 Authority Key Identifier:
keyid:0C:66:77:6C:3D:17:67:FC:A9:5F:3A:A9:CE:D9:72:D7:AE:A5:57:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGZ3bD0XZ_ypXzqpztly166lV-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/e7JQ6IvxfYoUVuFBf8WdcvJF0vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/DGZ3bD0XZ_ypXzqpztly166lV-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:22:ad:a4:ad:f3:ae:93:2e:ae:14:9c:ef:d0:76:18:8c:65:
4a:14:48:20:5c:4b:57:ed:56:d7:65:54:4a:19:a0:c3:7e:84:
d5:6b:c1:2f:f8:be:c5:6d:cd:43:9d:0e:34:75:c5:06:2f:9a:
e4:8a:8a:27:64:84:8e:79:e9:28:e1:55:d4:d4:95:c4:47:90:
21:a0:44:08:80:3b:b8:1d:97:8e:8b:54:55:c4:17:00:08:c1:
3b:10:0f:81:87:1a:b6:83:01:41:bb:23:f3:af:a3:07:44:c9:
53:5e:60:5f:30:11:f4:d5:63:a6:91:72:78:d8:19:cb:a3:8e:
ea:d1:ed:0e:86:25:c1:b0:3f:23:58:8b:d9:3d:18:fd:a7:80:
57:f8:47:cf:0f:34:a2:4a:12:ab:73:6e:08:5b:57:e5:26:0a:
51:5c:ea:29:05:8e:d4:b1:77:22:b6:f3:38:a6:13:37:f6:c9:
1f:6b:58:3c:78:da:66:25:8a:c1:9a:e3:e5:68:6d:01:5e:20:
d5:fa:5b:fe:b4:91:37:3a:4e:a3:b1:93:6b:3a:e3:63:55:19:
a0:be:64:b7:d7:eb:9f:35:68:cd:e7:7b:87:2c:f5:39:be:d1:
b1:af:da:e5:8d:0d:a4:73:33:ec:d5:af:b0:3e:1b:f1:26:7f:
bb:4c:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:55 2023 by rpki-client on console-fra.rpki-client.org