Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/E_zrWytPX5FoZzN0geYYcHLatns.roa
File: E_zrWytPX5FoZzN0geYYcHLatns.roa (raw, json)
Hash identifier: P6cKoQfhS0ehUcVTTEC3wn9c5IXC+U4+XJJLWoyXpV0=
Subject key identifier: 13:FC:EB:5B:2B:4F:5F:91:68:67:33:74:81:E6:18:70:72:DA:B6:7B
Certificate issuer: /CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Certificate serial: 018572B418004FA046640A5F868D173E4381
Authority key identifier: 62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/E_zrWytPX5FoZzN0geYYcHLatns.roa
Signing time: Mon 02 Jan 2023 13:38:03 +0000
ROA not before: Mon 02 Jan 2023 13:38:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31250
IP address blocks: 93.152.192.0/21 maxlen: 24
93.152.204.0/24 maxlen: 24
93.152.200.0/22 maxlen: 24
93.152.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:18:00:4f:a0:46:64:0a:5f:86:8d:17:3e:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Validity
Not Before: Jan 2 13:38:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13fceb5b2b4f5f916867337481e6187072dab67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a8:c6:bf:27:63:11:70:a9:83:4e:de:21:77:
8a:e2:2b:f9:46:f7:7f:39:af:ad:12:34:c2:b3:dc:
54:e4:84:51:f1:cf:96:0e:ff:c1:80:af:14:37:82:
b0:f5:2c:b1:f0:b6:30:8d:d1:11:0a:c5:dd:b1:2a:
c3:61:45:9f:16:e1:30:87:d2:3f:e3:99:36:10:f5:
d7:45:a7:b0:24:65:6b:7c:f6:50:4e:3e:0b:46:3a:
29:86:99:59:f8:ac:13:c4:b2:a3:37:2a:63:2a:a0:
b7:88:62:ea:40:51:15:12:e0:7c:f8:99:45:a9:ed:
ef:65:3a:f8:d6:3a:2f:dc:3e:0f:d9:99:9b:06:5b:
41:09:06:30:0e:03:b4:2f:27:6e:4a:9e:72:df:49:
2a:69:29:11:bf:92:1d:18:7b:fc:92:e9:6b:f5:65:
81:89:c4:6d:9b:c1:89:7f:4a:e1:e7:fc:41:37:ff:
29:03:87:72:90:88:ab:f3:21:b4:93:83:8c:a8:d1:
7a:b5:ca:69:36:a8:6b:a0:10:6b:ee:60:21:ed:0f:
b4:5a:c5:da:7a:76:fa:90:1c:3e:ed:8a:ca:ed:c6:
6e:59:16:06:42:97:36:c1:aa:4a:d9:dc:e2:25:65:
9b:9e:d1:c0:8f:7f:2e:57:b3:05:48:3c:71:cf:00:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FC:EB:5B:2B:4F:5F:91:68:67:33:74:81:E6:18:70:72:DA:B6:7B
X509v3 Authority Key Identifier:
keyid:62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/E_zrWytPX5FoZzN0geYYcHLatns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/Ymo-iOnkZDSUbkaR8W_mvri54Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.128.0-93.152.204.255
Signature Algorithm: sha256WithRSAEncryption
74:e5:57:77:ec:53:05:eb:f5:ed:94:2d:73:a8:33:5b:24:8e:
c4:df:47:cb:6a:1c:08:00:06:a2:b7:dd:4f:9c:2f:61:9f:d8:
b9:73:78:59:a6:2a:3f:04:df:44:dd:cf:8c:a4:17:07:3b:a7:
06:b4:e1:2e:45:9f:94:fc:c9:68:16:d3:15:79:bc:4a:99:9a:
f7:34:dd:ba:39:27:ce:df:fa:bb:88:ef:7d:2a:91:cc:af:38:
e3:7a:47:c4:ce:e8:45:02:c4:e0:8d:35:18:e0:3c:30:43:d4:
3a:c2:b1:b8:02:76:4f:52:bd:03:6c:b0:68:4b:6e:1f:00:16:
51:32:0b:88:0c:2c:a4:18:b0:9a:fa:97:9e:fa:06:a4:ec:ab:
fb:56:9b:13:66:28:a4:9d:36:c1:7f:56:0e:27:29:b4:d0:10:
fb:93:90:0f:fb:23:14:44:17:ae:20:4a:b8:15:40:b0:75:91:
63:dc:54:c5:0e:c5:b1:ea:a0:68:cb:97:fb:19:82:91:d9:7d:
8d:33:80:4d:8c:fd:d7:7f:de:c6:74:1d:96:4b:22:1a:95:24:
1a:96:cf:69:70:08:c0:3e:1e:8d:a6:5e:a5:8d:be:28:fd:79:
e9:70:3d:51:8b:7e:02:9b:ad:81:93:a0:92:f4:7d:7f:02:67:
fb:c1:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:01 2024 by rpki-client on console-ams.rpki-client.org