Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/t8-VvaX9FL18FQJ3KUykGvwA1dY.roa
File: t8-VvaX9FL18FQJ3KUykGvwA1dY.roa (raw, json)
Hash identifier: 3UPvZ78U9YIAzvhM6VfkxzTsAe/ylJJ1RFkTDuGHp00=
Subject key identifier: B7:CF:95:BD:A5:FD:14:BD:7C:15:02:77:29:4C:A4:1A:FC:00:D5:D6
Certificate issuer: /CN=7c40f8c42d3b4c211415de14ae1ab17b77af334b
Certificate serial: 01857295DEDF91360E8FDC93553E656816B8
Authority key identifier: 7C:40:F8:C4:2D:3B:4C:21:14:15:DE:14:AE:1A:B1:7B:77:AF:33:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fED4xC07TCEUFd4Urhqxe3evM0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/t8-VvaX9FL18FQJ3KUykGvwA1dY.roa
Signing time: Mon 02 Jan 2023 13:05:02 +0000
ROA not before: Mon 02 Jan 2023 13:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 94.103.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:de:df:91:36:0e:8f:dc:93:55:3e:65:68:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40f8c42d3b4c211415de14ae1ab17b77af334b
Validity
Not Before: Jan 2 13:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7cf95bda5fd14bd7c150277294ca41afc00d5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:90:20:57:15:20:ea:e9:f9:1a:01:4f:fe:31:
0e:42:21:1e:88:37:c3:cb:60:8c:51:c3:41:46:d0:
fc:34:30:84:3f:dc:d8:3e:3b:93:18:39:c7:34:0c:
9b:17:00:14:ec:80:3b:c9:f0:b1:6b:9e:cd:dc:68:
04:b9:96:66:c4:d6:6c:aa:02:ae:1d:e5:1d:11:e0:
04:1f:ec:34:c2:14:59:91:c6:18:ce:4f:53:b9:cb:
79:2a:95:91:5d:b1:76:42:68:1f:04:8d:ca:75:8e:
5b:bb:23:c8:91:1d:4b:6f:03:4a:80:0c:4a:a1:38:
a9:3a:c9:9a:0d:8e:50:12:10:d8:73:a0:c4:b5:dd:
b8:56:30:62:d0:7d:30:d0:f1:71:e0:fd:a2:c1:69:
58:71:f7:39:ae:6b:4a:6e:34:b7:31:c8:23:4a:bc:
2a:aa:7e:2d:17:04:07:ba:ac:38:48:10:70:3e:13:
cf:3b:88:63:1d:10:62:ec:7d:05:a3:63:0a:ae:6b:
9e:a8:2e:56:be:c7:89:09:da:9c:a0:b7:95:63:05:
60:c3:2b:d5:6a:f5:1d:5b:ad:18:d5:c3:48:e6:f6:
b7:58:0e:14:fd:d1:9f:14:82:70:93:25:6d:51:18:
7f:ad:44:2e:0a:b5:c5:8b:c3:fb:e3:1b:b0:f2:b2:
89:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:95:BD:A5:FD:14:BD:7C:15:02:77:29:4C:A4:1A:FC:00:D5:D6
X509v3 Authority Key Identifier:
keyid:7C:40:F8:C4:2D:3B:4C:21:14:15:DE:14:AE:1A:B1:7B:77:AF:33:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fED4xC07TCEUFd4Urhqxe3evM0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/t8-VvaX9FL18FQJ3KUykGvwA1dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/fED4xC07TCEUFd4Urhqxe3evM0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.188.0/24
Signature Algorithm: sha256WithRSAEncryption
68:bd:f6:19:0d:5d:f8:3f:1a:4d:ee:a3:6d:d5:cc:64:31:57:
a2:b3:3f:6f:44:9d:36:34:04:f1:3e:d9:bc:59:7b:de:2d:bf:
7f:6b:92:90:7f:c4:de:32:47:34:a3:e8:88:5c:d0:66:9b:45:
94:ca:5a:ac:66:ac:1e:4b:9d:3b:6d:65:a3:76:32:8f:9b:eb:
c1:09:33:0f:1a:d1:e5:92:41:c5:00:39:1a:ea:1e:05:71:c3:
68:d4:da:e4:10:a8:73:48:77:b3:14:13:21:5e:ef:6c:e1:78:
a9:cd:13:d6:8c:91:dd:f1:a0:bd:b3:af:07:c0:dd:61:cd:4a:
98:97:d5:78:ed:94:74:3a:71:71:dc:ec:a0:29:13:7e:ad:28:
8b:c5:0f:c1:a3:49:c2:fe:20:74:d5:52:78:c8:28:fe:d5:01:
e5:32:a5:fb:41:af:c6:72:50:2f:ad:73:84:63:d2:c9:9c:a2:
72:4c:48:44:56:d8:e0:29:42:20:cf:9f:65:a3:e6:d0:2d:93:
1c:3f:1e:8f:62:51:d5:3d:4f:0f:7d:67:d4:e5:17:31:10:f8:
98:e9:d0:96:85:44:55:f2:32:cf:00:52:6d:e0:b9:9d:25:db:
06:2f:ad:fa:92:9a:94:cc:61:36:85:07:a8:75:b1:b9:b3:63:
13:6c:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:31 2024 by rpki-client on console-fra.rpki-client.org