Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/OgsaULOfXZ2zfGxYzOTOAZM45aM.roa
File: OgsaULOfXZ2zfGxYzOTOAZM45aM.roa (raw, json)
Hash identifier: rcMV347SNskmeluwO6hCBgebyPACq+EsagBiYPr/5D4=
Subject key identifier: 3A:0B:1A:50:B3:9F:5D:9D:B3:7C:6C:58:CC:E4:CE:01:93:38:E5:A3
Certificate issuer: /CN=7fcf7c648b4a65720adf0066641ac30f5f07a512
Certificate serial: 0189654ABFAD9E2FAA16482658D4B56E84AD
Authority key identifier: 7F:CF:7C:64:8B:4A:65:72:0A:DF:00:66:64:1A:C3:0F:5F:07:A5:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f898ZItKZXIK3wBmZBrDD18HpRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/OgsaULOfXZ2zfGxYzOTOAZM45aM.roa
Signing time: Mon 17 Jul 2023 19:19:04 +0000
ROA not before: Mon 17 Jul 2023 19:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 93.190.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:bf:ad:9e:2f:aa:16:48:26:58:d4:b5:6e:84:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcf7c648b4a65720adf0066641ac30f5f07a512
Validity
Not Before: Jul 17 19:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0b1a50b39f5d9db37c6c58cce4ce019338e5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9d:d3:96:1f:99:b6:4d:90:df:0e:11:48:32:
5a:70:92:e3:27:67:95:52:c7:cb:6b:2a:92:2e:ed:
04:64:e0:76:ce:cb:d1:00:ec:a0:1c:2d:30:4c:a4:
af:74:83:8a:5b:da:d4:b4:3e:6c:ba:ae:4c:b3:1a:
40:a3:0b:bf:d7:ed:57:28:ef:8d:75:bd:7d:a2:b4:
32:b2:19:88:22:7d:9d:cf:5c:6c:68:a0:9b:a4:04:
01:84:38:c8:56:b8:40:4a:01:34:cc:c8:93:59:db:
59:66:4d:44:d5:54:dd:78:87:11:24:58:80:40:e0:
10:38:37:90:16:f0:cd:e7:30:4e:a3:02:f5:bc:d0:
ec:80:b7:a0:47:51:06:98:9f:ad:00:1c:1e:bc:ee:
c4:c5:19:3b:aa:26:e5:be:84:ce:9d:4b:7a:67:90:
1b:f4:a6:d8:22:e4:75:f7:5d:b4:2b:e5:ec:a4:8e:
29:f1:e5:ce:a9:7a:77:c3:45:0e:5d:7f:33:0c:dd:
b3:d5:78:fa:d7:d7:6e:3b:ff:68:7e:ef:26:1e:8c:
e4:e2:ac:4e:f4:8b:ad:e0:d6:92:28:57:32:89:d0:
4a:fe:52:90:97:f8:be:0e:10:f7:1d:fc:6c:3d:7d:
17:fd:58:1a:bc:5f:79:cd:b7:81:fc:96:38:1d:96:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0B:1A:50:B3:9F:5D:9D:B3:7C:6C:58:CC:E4:CE:01:93:38:E5:A3
X509v3 Authority Key Identifier:
keyid:7F:CF:7C:64:8B:4A:65:72:0A:DF:00:66:64:1A:C3:0F:5F:07:A5:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f898ZItKZXIK3wBmZBrDD18HpRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/OgsaULOfXZ2zfGxYzOTOAZM45aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/f898ZItKZXIK3wBmZBrDD18HpRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c6:d0:cc:2f:01:28:0a:f9:18:4c:4e:f1:90:62:c9:eb:03:
16:2d:44:df:9e:b4:41:d0:bd:dc:3c:54:81:5f:04:06:c2:a3:
3a:4f:10:1f:ec:bb:95:c9:74:a6:0b:ff:50:95:8e:2a:f5:aa:
b3:d9:f9:de:d2:52:ba:32:31:9d:e7:3f:22:04:bf:b8:e3:d7:
87:0b:f5:7e:d2:f1:c6:5d:5f:a2:72:c9:eb:9c:44:13:c5:43:
2b:df:9a:51:d6:be:14:19:a8:dc:1e:50:62:93:86:0f:60:15:
2a:91:50:95:c9:a1:63:e1:26:71:69:b0:4b:ba:31:e4:b5:91:
04:84:c8:2a:b9:60:de:10:e9:ac:ce:de:e7:c0:cf:e6:8c:e5:
e6:88:a9:9e:e3:31:28:3e:58:cd:12:ce:a9:a2:24:5c:b7:57:
2f:2f:91:42:6f:14:bf:d2:93:51:f3:bc:76:31:e3:d2:27:ce:
ed:7b:c4:71:65:d5:46:5d:bf:49:9b:dc:f1:a2:7b:ae:ea:72:
7d:c5:4f:4d:98:bc:8a:41:f0:b5:f4:82:bf:ca:bb:a0:b5:96:
d4:2d:df:60:b4:11:bb:9d:bc:8e:99:66:62:21:0e:dc:f7:2c:
d7:36:68:75:60:35:ba:69:30:47:d0:08:75:eb:fa:e9:21:b5:
84:1b:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:55 2024 by rpki-client on console-fra.rpki-client.org