Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/93gLrAxkNJ7FcwnAxp5py-9l6nM.roa
File: 93gLrAxkNJ7FcwnAxp5py-9l6nM.roa (raw, json)
Hash identifier: 94eR+/7aQDSjO4TQX0lxVJNoiVqmrbMoQxSmlynyU0Y=
Subject key identifier: F7:78:0B:AC:0C:64:34:9E:C5:73:09:C0:C6:9E:69:CB:EF:65:EA:73
Certificate issuer: /CN=8ac29060c55d074a0bf220db494a1ec4924715d2
Certificate serial: 01856B89FD0248032EF38E48CCF82B1FC105
Authority key identifier: 8A:C2:90:60:C5:5D:07:4A:0B:F2:20:DB:49:4A:1E:C4:92:47:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isKQYMVdB0oL8iDbSUoexJJHFdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/93gLrAxkNJ7FcwnAxp5py-9l6nM.roa
Signing time: Sun 01 Jan 2023 04:14:43 +0000
ROA not before: Sun 01 Jan 2023 04:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 94.103.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:89:fd:02:48:03:2e:f3:8e:48:cc:f8:2b:1f:c1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac29060c55d074a0bf220db494a1ec4924715d2
Validity
Not Before: Jan 1 04:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7780bac0c64349ec57309c0c69e69cbef65ea73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:aa:d6:88:a8:e6:76:8e:e3:7c:1c:d3:d6:
fb:d0:8f:13:ca:ee:92:15:e1:09:34:21:c5:da:1f:
77:b9:ee:c3:bd:7c:28:de:f2:ef:44:12:bc:a3:b9:
c3:9f:b8:7b:9a:93:39:c1:7e:f7:d6:7c:d0:6b:57:
f1:58:cf:ff:74:d6:60:de:62:74:d7:b5:e4:f2:10:
a2:37:c9:6f:dd:ee:d4:44:6e:47:78:4d:65:5d:16:
01:7e:26:e2:2d:2b:86:4e:a1:cd:53:e0:d7:a0:60:
ef:7d:a3:d4:eb:e5:5a:75:a4:18:93:69:4d:f3:74:
df:de:76:0a:ac:ad:38:a3:4f:e3:ca:c7:05:13:f9:
79:10:a3:89:e5:b7:9b:5e:88:d3:0e:b4:91:c7:94:
b9:d3:d6:9d:eb:09:d6:5f:6c:9d:b0:f8:01:ba:80:
a9:85:ab:3e:eb:fe:bb:3f:16:85:ae:35:19:0c:92:
b0:cd:d6:0e:14:97:47:d4:3c:81:b8:c0:99:33:c9:
f4:55:22:46:4d:74:75:dd:17:36:31:4d:d9:7a:da:
88:d1:f3:e0:8d:ad:13:88:6f:25:59:06:76:5f:aa:
00:7f:57:47:90:46:27:18:ed:7e:43:8b:3a:bc:04:
0e:54:4d:d5:97:51:a3:2d:42:39:55:07:34:66:c3:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:0B:AC:0C:64:34:9E:C5:73:09:C0:C6:9E:69:CB:EF:65:EA:73
X509v3 Authority Key Identifier:
keyid:8A:C2:90:60:C5:5D:07:4A:0B:F2:20:DB:49:4A:1E:C4:92:47:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isKQYMVdB0oL8iDbSUoexJJHFdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/93gLrAxkNJ7FcwnAxp5py-9l6nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.178.0/24
Signature Algorithm: sha256WithRSAEncryption
00:77:33:8e:83:3d:6d:fd:c6:c7:4b:07:57:33:80:96:74:60:
0d:f9:53:de:dc:5c:92:73:08:ed:ba:11:b6:70:0e:70:80:0a:
c0:c6:2e:3e:d3:75:bd:04:3a:dd:b9:eb:cb:60:76:20:53:6a:
83:aa:95:c5:d5:db:bb:e2:2a:9b:d5:39:5e:56:4e:1a:08:01:
69:20:b2:f5:43:c0:01:7f:49:90:79:a1:4a:de:56:83:fa:db:
28:9a:02:32:00:b1:e8:2e:9d:11:08:cd:4f:a7:b1:2d:25:db:
5e:07:e1:b1:ca:96:8e:bd:74:91:a7:ad:04:1b:d8:b0:d0:2e:
ff:ae:83:e6:57:f9:50:e0:2b:3c:82:73:e6:ce:a6:30:c3:b9:
09:4f:43:a9:7f:88:d9:81:30:de:45:99:17:b3:9b:1a:82:97:
01:80:65:0a:3c:4b:5c:5c:60:45:dc:9e:e6:a8:6f:8d:31:ff:
82:02:0f:2b:09:73:e4:ba:08:13:17:83:d8:64:1d:b7:47:fa:
9c:9d:a1:81:00:3c:d2:25:5c:85:54:50:9a:22:5c:d9:a0:8e:
c3:e2:30:a8:84:30:93:52:7a:26:1a:d6:96:8f:e8:76:f1:3a:
75:b5:87:fa:b6:ba:cd:5b:b7:97:d8:c2:85:c5:29:c0:d2:c9:
7e:95:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:54 2024 by rpki-client on console-ams.rpki-client.org