Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/qciXJlR_HIAP035pj9abdsNsQ68.roa
File: qciXJlR_HIAP035pj9abdsNsQ68.roa (raw, json)
Hash identifier: Lmxe++MoAZOdJ5I4K3l8czTaFq1jlXnWZhQCykAFGNA=
Subject key identifier: A9:C8:97:26:54:7F:1C:80:0F:D3:7E:69:8F:D6:9B:76:C3:6C:43:AF
Certificate issuer: /CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Certificate serial: 018CC64B598EE5E7B5ADF4DFB64143B6A84D
Authority key identifier: 62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/qciXJlR_HIAP035pj9abdsNsQ68.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31250
IP address blocks: 93.152.192.0/21 maxlen: 24
93.152.204.0/24 maxlen: 24
93.152.200.0/22 maxlen: 24
93.152.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:59:8e:e5:e7:b5:ad:f4:df:b6:41:43:b6:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c89726547f1c800fd37e698fd69b76c36c43af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e1:2c:8e:2b:91:19:dd:3f:aa:ff:40:d4:89:
9d:c2:2f:9f:09:91:bc:46:2d:46:19:de:14:53:4d:
49:a7:e4:a0:df:a1:47:14:7c:2c:8f:fc:8f:29:82:
ae:e9:38:4c:e4:22:02:d5:39:bd:ab:aa:98:20:cd:
c7:45:7f:9e:d6:6d:0b:3b:5a:ec:73:79:ec:6f:99:
ec:2b:4d:1d:7f:d5:13:19:65:23:c2:21:11:51:72:
eb:a7:c8:ec:a0:a8:e4:27:c9:7b:64:03:08:76:e1:
bc:35:d7:7f:6f:01:b7:ef:37:f7:b5:9f:00:92:c2:
09:b4:5f:46:c3:99:b9:f1:08:e2:c6:b9:ba:2c:86:
fe:58:43:f7:e4:4e:c6:df:be:cf:42:46:80:ad:b7:
cc:60:90:11:fb:15:0f:3f:28:6e:59:2b:04:bb:24:
eb:a1:2a:32:43:93:c3:70:51:d2:f8:19:45:fb:23:
51:e2:73:ba:a6:e7:ba:a7:c1:91:c2:f4:24:e1:a1:
b6:d1:44:3b:d7:d2:de:9f:75:eb:9b:93:9a:21:e8:
24:3b:9c:63:0b:f9:2a:21:68:64:8b:2a:cd:2e:4d:
69:df:c4:6e:02:81:88:5d:87:91:a8:4a:20:bd:70:
1f:80:27:a0:50:1d:2b:af:3f:ea:d3:65:e8:f7:db:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C8:97:26:54:7F:1C:80:0F:D3:7E:69:8F:D6:9B:76:C3:6C:43:AF
X509v3 Authority Key Identifier:
keyid:62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/qciXJlR_HIAP035pj9abdsNsQ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/Ymo-iOnkZDSUbkaR8W_mvri54Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.128.0-93.152.204.255
Signature Algorithm: sha256WithRSAEncryption
84:89:11:d8:9f:ac:04:52:24:64:f4:f7:ca:f8:7b:ad:38:e4:
87:c9:1d:6d:dd:16:5c:ff:42:b0:c0:71:c8:fd:fb:ac:74:e7:
5a:a1:0d:48:f4:9f:fd:07:16:2a:fd:61:05:e3:5b:24:36:a4:
ae:28:01:62:23:a3:e4:15:4b:c4:be:48:fd:f4:9b:ff:bb:61:
d7:4b:ff:68:87:f9:68:13:e7:b0:d0:de:2e:c8:f6:1e:0b:66:
b0:42:14:60:b8:77:5d:50:a9:f5:95:02:7c:28:72:ad:20:c8:
10:bc:1e:52:8f:ea:99:d8:f3:bc:b8:c2:cf:b3:84:b8:49:2c:
3a:3f:84:45:f8:64:15:c5:cd:97:94:8b:2c:29:a1:bf:04:cb:
ff:e4:f1:9b:9e:15:b3:20:23:47:92:0c:74:1b:8e:a8:67:49:
2d:94:86:fd:fa:30:67:9f:5a:4d:1c:35:63:37:48:11:ad:5f:
b3:8d:c7:11:c9:22:99:55:48:bf:00:9a:44:12:4c:95:26:e0:
fd:cc:57:5a:dd:d3:e8:9a:2f:26:5a:ca:13:5c:55:40:0f:0f:
2f:ff:33:ef:89:22:b0:ed:54:20:dd:dc:22:a3:33:d5:65:ac:
00:df:fc:56:71:22:c5:24:83:49:e6:1b:f2:11:b8:9b:38:99:
ca:1d:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:01 2024 by rpki-client on console-ams.rpki-client.org