Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/e1_QFFrxHDp2jMshvVktZlphxEo.roa
File: e1_QFFrxHDp2jMshvVktZlphxEo.roa (raw, json)
Hash identifier: +oEMfBJ5w8p+iEKAkA14j0wjtDhV3AcUvedeI+326iM=
Subject key identifier: 7B:5F:D0:14:5A:F1:1C:3A:76:8C:CB:21:BD:59:2D:66:5A:61:C4:4A
Certificate issuer: /CN=e4e64a2cfb1042b7926202c58ffc49b0a6542243
Certificate serial: 018A8401440D104555A4742E9BD509B033B1
Authority key identifier: E4:E6:4A:2C:FB:10:42:B7:92:62:02:C5:8F:FC:49:B0:A6:54:22:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OZKLPsQQreSYgLFj_xJsKZUIkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/e1_QFFrxHDp2jMshvVktZlphxEo.roa
Signing time: Mon 11 Sep 2023 11:29:50 +0000
ROA not before: Mon 11 Sep 2023 11:29:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 93.190.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:01:44:0d:10:45:55:a4:74:2e:9b:d5:09:b0:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e64a2cfb1042b7926202c58ffc49b0a6542243
Validity
Not Before: Sep 11 11:29:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b5fd0145af11c3a768ccb21bd592d665a61c44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:c5:d8:b9:58:e5:d4:0e:a1:c8:5a:5a:c2:
0b:05:e0:7a:d1:81:ac:72:d7:be:c3:83:83:a4:bd:
09:32:46:a2:13:ad:c6:51:73:0a:d8:0b:6d:15:54:
c0:aa:fc:c2:38:1d:0f:ee:d8:bb:81:f0:38:8b:82:
b7:84:b9:fc:e4:92:c1:8e:ff:b4:60:9e:0b:8e:69:
c8:a2:ba:a3:9e:4d:2a:3c:fb:8d:ee:64:c6:36:3d:
08:7a:26:aa:fa:e0:19:e3:d7:f9:99:f8:da:a2:e6:
3d:27:a6:a4:65:25:f0:8e:f8:96:46:97:8a:d2:51:
97:2a:85:a3:cd:a4:b4:90:b3:89:5b:7a:a5:5b:ab:
ce:3b:b6:7e:27:3f:4b:7f:95:6c:e6:87:19:d4:a4:
38:76:e1:b7:8f:2e:ed:7d:ed:4a:1d:ae:74:fc:0a:
be:16:43:3c:b7:b6:db:20:ff:d5:29:1b:46:23:6e:
0f:fd:13:57:ce:7d:39:06:8a:d9:21:a7:10:49:ce:
2b:9c:02:a5:ae:3c:e5:aa:e4:e1:be:4b:82:58:aa:
2b:57:38:3a:97:a2:59:a2:3c:1f:ba:c8:ef:2d:89:
40:f4:3d:b8:73:e5:35:b3:52:dd:25:b8:93:8f:a4:
66:a5:ef:88:65:0b:95:9d:b9:d2:66:8a:23:1e:ba:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5F:D0:14:5A:F1:1C:3A:76:8C:CB:21:BD:59:2D:66:5A:61:C4:4A
X509v3 Authority Key Identifier:
keyid:E4:E6:4A:2C:FB:10:42:B7:92:62:02:C5:8F:FC:49:B0:A6:54:22:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OZKLPsQQreSYgLFj_xJsKZUIkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/e1_QFFrxHDp2jMshvVktZlphxEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9281d0-1cfc-4aeb-a9ea-940654b20672/1/5OZKLPsQQreSYgLFj_xJsKZUIkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:37:c8:5d:a6:d7:d8:12:f7:fb:45:ba:78:86:68:ce:bf:ea:
cd:1c:0a:a8:c5:24:f6:26:df:d5:ca:b9:18:3b:4c:25:ca:b1:
72:59:b1:36:45:60:7a:ed:cb:6c:53:dc:6e:78:09:31:02:af:
8b:dd:b2:84:a4:b6:75:3c:65:a5:1a:e7:bc:c4:8d:6e:17:01:
53:3f:31:df:92:66:3b:d9:22:e8:c8:02:a7:d8:7a:72:aa:12:
d7:6f:fb:b1:fd:e8:79:9e:4c:9b:20:7a:75:9d:a8:58:66:c1:
fd:a6:99:63:7d:57:02:28:6d:f3:b2:45:e7:31:5c:6c:72:ed:
36:02:5c:13:ce:6a:9c:14:d6:28:31:ac:db:ac:6e:1a:8d:91:
24:31:c2:7f:6b:dc:d4:0e:40:4b:b6:01:69:b5:b9:97:4c:48:
10:17:29:0b:49:12:4f:83:c9:13:35:6f:e2:fd:f2:cb:91:69:
f0:56:4b:06:da:93:f3:9d:e7:a5:b4:dd:ab:33:62:e7:e8:78:
a6:dd:7a:81:5f:0e:4e:07:e8:47:d3:20:de:9f:89:43:6d:60:
d3:25:54:f1:29:ca:d9:38:41:e8:73:e1:cd:80:bb:85:b9:80:
e1:0d:8c:82:e0:37:79:f7:04:b1:97:6a:ff:87:5b:cd:02:02:
f1:18:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org