Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/7GsDIhdLFCj9s9L9oeU3YZcp5Xc.roa
File: 7GsDIhdLFCj9s9L9oeU3YZcp5Xc.roa (raw, json)
Hash identifier: 0N1uS3pj6x+qkZRFEt5HFr/1Z1qND7rFyCf+tNGe5Fw=
Subject key identifier: EC:6B:03:22:17:4B:14:28:FD:B3:D2:FD:A1:E5:37:61:97:29:E5:77
Certificate issuer: /CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Certificate serial: 018CC64B59EA76AA2CD4E48CD47B5760C349
Authority key identifier: 62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/7GsDIhdLFCj9s9L9oeU3YZcp5Xc.roa
Signing time: Mon 01 Jan 2024 18:31:16 +0000
ROA not before: Mon 01 Jan 2024 18:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34569
IP address blocks: 93.152.182.0/24 maxlen: 24
93.152.183.0/24 maxlen: 24
93.152.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:59:ea:76:aa:2c:d4:e4:8c:d4:7b:57:60:c3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Validity
Not Before: Jan 1 18:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec6b0322174b1428fdb3d2fda1e537619729e577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:e5:51:50:85:3d:74:dd:42:2e:90:5c:e0:
a5:e5:64:2f:e1:e7:dc:7b:ec:32:a7:60:81:5d:c7:
dd:a2:fc:2b:46:cd:47:81:0b:5e:31:b7:6e:dc:59:
83:eb:d2:1e:80:ec:af:8e:a5:7a:ca:59:2b:6e:23:
34:dc:ad:4e:8d:0f:ce:d1:9e:3f:19:a0:b3:28:d7:
b2:a3:9f:38:80:84:fa:2c:97:c4:e0:5e:e2:78:9f:
40:c3:25:4d:a0:35:a6:13:a8:d9:0a:b1:62:61:c8:
f5:5e:a7:e4:73:e3:f4:ae:65:da:e3:77:52:5f:78:
d7:ad:63:8e:c7:08:45:cc:1c:c0:8f:1d:d0:fa:41:
ef:06:ef:00:e8:15:a0:95:bb:8d:80:95:d2:06:ae:
d1:d3:08:64:84:93:05:67:81:55:e0:80:a7:af:d9:
65:11:3f:89:73:3e:2a:f9:31:15:a0:75:21:07:c8:
f9:50:f5:ce:11:d1:f1:2b:10:b2:78:b9:df:66:4e:
7f:97:41:c2:d0:59:fc:95:5d:f8:75:93:3a:7a:09:
b5:b8:03:81:1f:04:e1:23:51:f5:59:36:fd:93:bb:
5c:bc:69:d4:97:6b:51:91:e1:3d:99:fe:25:b0:0d:
87:45:bc:77:26:1c:7d:63:05:0a:dd:80:77:8f:b9:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:03:22:17:4B:14:28:FD:B3:D2:FD:A1:E5:37:61:97:29:E5:77
X509v3 Authority Key Identifier:
keyid:62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/7GsDIhdLFCj9s9L9oeU3YZcp5Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/Ymo-iOnkZDSUbkaR8W_mvri54Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.182.0/23
93.152.188.0/22
Signature Algorithm: sha256WithRSAEncryption
75:e9:39:9e:f4:eb:7c:1d:3b:58:bb:5d:62:b4:5b:87:d3:bf:
dd:75:7a:9c:a6:e1:9a:5c:39:c2:d5:e6:e7:d8:46:3f:22:6a:
7e:3d:3f:c6:c8:e4:0a:e4:21:b5:34:d5:bd:99:cf:3a:ed:d9:
58:de:1a:a7:ba:fe:b6:cc:4c:1b:78:5c:11:45:c1:3b:ae:ab:
17:8f:ed:6b:ef:28:1b:ff:31:ce:61:df:d5:ba:68:4b:87:80:
c2:54:c4:c2:01:b1:09:73:3d:49:1c:4c:bc:87:3a:89:0b:5d:
b5:00:ea:73:cc:bf:68:0a:8d:a2:ab:9d:09:e3:4a:6f:08:d2:
6f:00:d5:13:91:08:ed:72:4c:4e:63:3f:02:32:ef:b8:40:55:
33:3b:91:25:85:26:a2:6f:e5:fd:d4:fc:41:f8:7d:20:84:66:
ee:81:6f:8c:c9:c8:ff:12:99:95:67:9f:73:ec:22:11:c0:02:
9e:3c:9a:dc:d2:1c:45:d9:bf:67:d0:3b:cd:75:56:6e:78:fd:
99:c1:b3:fb:9e:59:2b:88:67:98:19:f3:b5:52:1c:ee:5b:b9:
3c:36:32:c3:7d:6f:c0:ae:32:df:69:8c:3f:f4:be:f4:bd:cb:
ae:4e:07:23:ba:ec:11:2b:1d:75:8a:c5:dc:72:2e:f1:86:ca:
84:d8:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org