Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/Q93-nr5rg87jEIJD6XwBnRzsR9Y.roa
File: Q93-nr5rg87jEIJD6XwBnRzsR9Y.roa (raw, json)
Hash identifier: bQa4zHewRr2M0AaeQlYCcoGvxPp9gjmznEFp5eA2QEQ=
Subject key identifier: 43:DD:FE:9E:BE:6B:83:CE:E3:10:82:43:E9:7C:01:9D:1C:EC:47:D6
Certificate issuer: /CN=175e203932401abb457968db37075a17c68f09f6
Certificate serial: 01856FC250AF6AB0BA5A0AEFCB7C44FDD8F5
Authority key identifier: 17:5E:20:39:32:40:1A:BB:45:79:68:DB:37:07:5A:17:C6:8F:09:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F14gOTJAGrtFeWjbNwdaF8aPCfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/Q93-nr5rg87jEIJD6XwBnRzsR9Y.roa
Signing time: Sun 01 Jan 2023 23:54:43 +0000
ROA not before: Sun 01 Jan 2023 23:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150127
IP address blocks: 85.204.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:50:af:6a:b0:ba:5a:0a:ef:cb:7c:44:fd:d8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175e203932401abb457968db37075a17c68f09f6
Validity
Not Before: Jan 1 23:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43ddfe9ebe6b83cee3108243e97c019d1cec47d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:f0:f5:e4:cd:7a:e7:8f:d5:db:f5:e0:b4:
d3:de:6a:59:0e:da:c2:50:8d:9d:fc:1c:45:ba:61:
58:20:4a:5c:41:0a:a4:dc:5c:e9:eb:86:e2:0e:44:
0e:3c:44:58:3c:8c:d6:4b:92:79:27:e7:b2:71:67:
74:99:99:c3:55:49:7f:ba:dd:77:49:af:c4:42:6d:
6f:ac:25:20:2d:b6:a2:a5:42:2d:94:68:ed:0e:90:
b8:08:c1:b8:fe:c3:03:34:39:29:08:1c:d2:37:a8:
67:9c:e2:92:bc:25:34:e7:54:2b:d1:43:c8:db:25:
b7:d6:8f:08:74:a9:48:3a:4c:50:eb:3f:3d:cf:32:
b2:81:f6:54:70:7d:be:de:c5:5e:b0:67:0c:3b:35:
38:46:05:7c:24:33:f3:ee:d1:55:21:9f:31:c4:15:
45:e6:3c:02:39:7a:7e:61:80:fc:29:4e:71:1d:9f:
f8:ff:c5:08:64:25:2a:af:eb:ca:11:2b:52:12:97:
8f:78:4a:5b:5f:2c:54:9e:41:64:3f:d4:ac:54:a9:
48:00:40:cb:35:b4:1f:f0:3f:8c:5b:34:fd:e5:8d:
79:85:b3:7f:ea:76:0e:12:c4:b0:4c:c5:16:1d:2c:
58:28:e5:6d:36:16:19:e2:01:0f:84:91:46:ab:8f:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:FE:9E:BE:6B:83:CE:E3:10:82:43:E9:7C:01:9D:1C:EC:47:D6
X509v3 Authority Key Identifier:
keyid:17:5E:20:39:32:40:1A:BB:45:79:68:DB:37:07:5A:17:C6:8F:09:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F14gOTJAGrtFeWjbNwdaF8aPCfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/Q93-nr5rg87jEIJD6XwBnRzsR9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/F14gOTJAGrtFeWjbNwdaF8aPCfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.38.0/23
Signature Algorithm: sha256WithRSAEncryption
65:58:32:7f:7d:f8:65:f5:73:a8:af:bd:5b:f8:5c:cd:e7:91:
70:c2:fb:50:47:48:e1:16:62:d2:88:69:c6:42:a6:cb:c9:c0:
5d:16:ac:5f:e5:d7:12:b6:9c:32:f3:a9:a1:b7:66:0f:4f:30:
c2:4b:c3:67:f7:e7:58:c9:00:30:af:45:b9:c8:81:49:47:1c:
70:79:18:5d:5b:ab:e0:78:7d:7d:aa:80:d8:b2:1b:21:df:f9:
7f:49:4d:bb:a4:0e:13:b4:34:14:cc:9d:fe:3a:f0:08:da:64:
34:5f:8b:c3:50:ec:da:9f:30:45:05:2a:86:17:5b:8d:a6:e8:
ec:3f:21:7f:3a:26:59:c1:89:7a:ff:bf:4f:e8:d9:4f:f3:28:
de:57:13:96:35:ec:b0:6d:8d:a5:61:85:3a:8e:9e:82:2b:7d:
77:73:b1:5c:54:7e:ca:34:e3:cd:7d:d5:de:5d:56:36:3b:2e:
1a:a3:ad:6d:87:f5:cc:c8:76:e8:21:69:ca:4a:2e:f6:ce:b0:
1d:a2:63:4d:90:3b:80:53:40:c4:37:c6:69:b4:09:8f:a0:a7:
fb:cf:b9:30:1e:b7:74:78:eb:50:2d:85:a8:76:0d:69:89:52:
14:1d:8d:de:2d:6c:00:36:6b:14:36:8b:7a:fb:ce:4e:69:5d:
86:b9:5d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org