Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/gu1PHrugI_wcxGI_jC2KPfuszMo.roa
File: gu1PHrugI_wcxGI_jC2KPfuszMo.roa (raw, json)
Hash identifier: qHfh3fyrce5CJG1FB1lOEytvzb/Cizu/9ABQY/LZ5i4=
Subject key identifier: 82:ED:4F:1E:BB:A0:23:FC:1C:C4:62:3F:8C:2D:8A:3D:FB:AC:CC:CA
Certificate issuer: /CN=0c66776c3d1767fca95f3aa9ced972d7aea557ee
Certificate serial: 01857142D6ABC27C678624C1037F50BC8691
Authority key identifier: 0C:66:77:6C:3D:17:67:FC:A9:5F:3A:A9:CE:D9:72:D7:AE:A5:57:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGZ3bD0XZ_ypXzqpztly166lV-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/gu1PHrugI_wcxGI_jC2KPfuszMo.roa
Signing time: Mon 02 Jan 2023 06:54:43 +0000
ROA not before: Mon 02 Jan 2023 06:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39427
IP address blocks: 93.187.64.0/24 maxlen: 24
93.187.67.0/24 maxlen: 24
93.187.65.0/24 maxlen: 24
93.187.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d6:ab:c2:7c:67:86:24:c1:03:7f:50:bc:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c66776c3d1767fca95f3aa9ced972d7aea557ee
Validity
Not Before: Jan 2 06:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ed4f1ebba023fc1cc4623f8c2d8a3dfbacccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:f8:2c:0f:64:40:a6:55:97:4e:e8:c8:c5:
d9:57:a9:4e:73:6d:88:62:91:72:67:25:c8:3e:06:
eb:a2:31:04:e5:0e:52:1a:6d:e8:0f:42:7b:1c:d8:
38:75:22:d3:7b:3b:95:66:96:3b:28:13:05:9c:fd:
8d:ca:5f:27:8a:c2:b7:96:7e:4e:d8:5e:cb:2a:83:
9d:5c:f5:69:cf:c1:e4:3e:b3:9a:8b:d6:dd:8f:0c:
8b:df:67:40:dd:3c:28:7b:3d:32:6e:ae:31:45:17:
cb:b7:18:96:ce:f2:18:02:d8:63:c8:38:72:4f:fa:
62:54:1e:69:f5:aa:86:6f:1e:04:4b:8c:d7:70:71:
35:21:7f:86:ab:5a:d6:86:fd:bb:7e:30:0a:a9:28:
35:5f:29:6a:4f:8c:30:1f:d7:06:74:87:d1:82:ab:
0e:3b:a5:aa:6c:cc:85:57:af:9e:9b:6d:bd:c8:f1:
ee:f0:fe:59:56:68:cd:1e:15:98:c7:a7:cc:aa:e2:
b5:f3:44:b0:d5:99:fe:57:ce:21:76:3c:e1:29:69:
10:bd:d3:f7:4c:e1:27:ef:71:f0:1b:4e:b3:23:7e:
ba:27:35:79:7a:07:c2:61:d5:39:10:d6:73:a5:70:
bd:91:31:d3:34:31:67:bc:bd:ad:09:b0:4c:7d:f8:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:4F:1E:BB:A0:23:FC:1C:C4:62:3F:8C:2D:8A:3D:FB:AC:CC:CA
X509v3 Authority Key Identifier:
keyid:0C:66:77:6C:3D:17:67:FC:A9:5F:3A:A9:CE:D9:72:D7:AE:A5:57:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGZ3bD0XZ_ypXzqpztly166lV-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/gu1PHrugI_wcxGI_jC2KPfuszMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d4d2cf-65a6-416e-be83-3378bd5f5003/1/DGZ3bD0XZ_ypXzqpztly166lV-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:6b:78:08:31:7a:52:54:fc:93:50:37:22:60:32:11:3b:a8:
53:64:23:24:38:af:a0:d2:13:4e:5b:2e:84:1a:e4:3b:3f:a1:
bb:ed:db:ad:91:d6:68:5d:ec:b1:1c:84:b5:e7:11:a3:82:95:
de:d6:9c:e3:7d:b0:43:2e:6b:7f:07:62:cc:23:60:e2:73:6f:
1d:c5:83:b6:ef:ef:33:9e:f5:b9:d6:85:f3:33:69:e3:ea:dd:
a3:5d:3f:32:8e:8c:15:2b:59:07:07:7d:48:b0:2c:3c:c4:eb:
93:11:7b:db:23:03:f2:0a:35:24:17:a7:89:dd:fc:48:79:db:
50:49:f5:57:ef:47:bc:05:34:e1:cb:2f:b3:c5:84:34:79:ec:
a0:78:66:3d:11:f6:51:d1:b3:a8:ab:be:d3:c1:ea:36:41:f2:
aa:b7:32:42:da:40:6e:5c:8b:e6:65:73:27:8c:e4:2b:00:b0:
a1:8b:22:c2:1d:4a:9b:e3:26:9b:eb:5b:e4:19:5d:c9:5d:a5:
f6:96:0e:01:ad:02:e7:f1:43:46:a5:8b:c8:ad:df:a4:75:db:
8d:05:2f:58:5b:5c:84:af:4b:4c:87:46:c0:fa:92:c2:16:71:
7d:2e:a5:d0:f5:7a:b6:3a:62:83:fb:7b:4f:f4:65:b3:65:34:
fb:ea:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:41 2023 by rpki-client on console-ams.rpki-client.org