Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/riWkkGFJCb-nbxvmLbi8unEq3rA.roa
File: riWkkGFJCb-nbxvmLbi8unEq3rA.roa (raw, json)
Hash identifier: +H6JQAKM1UGX8guG2z7NwjS4eJHPGJewUVQQK6Qqjro=
Subject key identifier: AE:25:A4:90:61:49:09:BF:A7:6F:1B:E6:2D:B8:BC:BA:71:2A:DE:B0
Certificate issuer: /CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Certificate serial: 34BB72CE
Authority key identifier: 62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/riWkkGFJCb-nbxvmLbi8unEq3rA.roa
Signing time: Sat 01 Jan 2022 13:00:17 +0000
ROA not before: Sat 01 Jan 2022 13:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31250
IP address blocks: 93.152.192.0/21 maxlen: 24
93.152.204.0/24 maxlen: 24
93.152.200.0/22 maxlen: 24
93.152.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884699854 (0x34bb72ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a3e88e9e46434946e4691f16fe6beb8b9e029
Validity
Not Before: Jan 1 13:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae25a490614909bfa76f1be62db8bcba712adeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:6c:90:75:77:a0:ba:51:fe:6f:b4:f8:2b:
37:20:b5:ec:60:f3:90:92:3a:ff:e1:74:a8:9c:d7:
9d:cd:1b:e9:28:f1:9a:db:09:16:f1:db:ac:38:04:
ab:51:78:d4:07:fd:c0:27:28:19:ed:63:10:b4:5d:
70:2e:38:64:0e:e6:c0:a5:6f:d7:e2:5e:3a:54:1c:
75:44:6c:4c:3c:95:28:bd:fa:8f:99:f4:49:32:5a:
e8:11:0a:7f:36:ec:65:71:07:b2:d8:ae:53:21:ea:
cf:bf:61:18:11:02:97:77:b6:f5:d4:26:40:1f:cc:
2f:13:98:35:a9:3b:9e:df:84:52:e7:de:3b:ee:be:
6a:ac:7c:35:05:08:cd:f2:7f:ea:f8:7b:a7:42:0f:
3c:c0:26:90:60:4b:c5:93:34:1a:c9:42:8a:8c:d9:
95:3f:c3:68:d3:19:ce:7b:03:fd:45:03:bb:3e:cd:
9a:05:00:69:60:69:98:43:24:11:df:e0:8d:ec:ba:
95:ba:1b:09:47:70:d8:d3:f3:14:60:e5:be:cb:fd:
d0:ca:c9:c1:08:a8:d4:12:0e:b2:b8:a1:2d:72:30:
c7:cf:3b:b5:40:b1:e8:38:43:4f:b3:28:a7:f2:76:
e2:1f:78:4b:6e:e3:ee:da:7b:0d:f8:34:1f:16:4b:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:A4:90:61:49:09:BF:A7:6F:1B:E6:2D:B8:BC:BA:71:2A:DE:B0
X509v3 Authority Key Identifier:
keyid:62:6A:3E:88:E9:E4:64:34:94:6E:46:91:F1:6F:E6:BE:B8:B9:E0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymo-iOnkZDSUbkaR8W_mvri54Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/riWkkGFJCb-nbxvmLbi8unEq3rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/012b75-5318-419f-9526-58d9db7d6949/1/Ymo-iOnkZDSUbkaR8W_mvri54Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.128.0-93.152.204.255
Signature Algorithm: sha256WithRSAEncryption
1a:e6:16:f3:88:dc:f6:9d:7e:1a:3c:a0:03:6c:ba:9e:00:26:
33:1e:98:39:4e:33:8f:56:68:77:2e:38:b0:78:e7:d7:ae:09:
07:35:ab:29:97:23:6c:51:0d:c7:de:05:60:22:77:be:c7:46:
f6:74:2e:a8:58:e0:2c:bf:80:58:f9:0e:bd:29:f3:fc:57:5d:
6c:4f:7a:45:2b:79:4a:74:95:1c:79:e4:e8:0a:94:d7:59:2e:
db:bd:9b:fb:d0:63:03:ea:9c:20:9b:41:6d:6f:3f:41:be:f1:
7b:0a:ed:91:18:a2:6a:ca:c2:9f:36:26:f4:e1:ae:41:03:14:
e7:0a:73:0f:21:75:5f:36:94:a0:31:1f:cf:1b:4a:74:12:54:
34:2c:f5:0a:81:8c:8c:5b:8d:ab:0d:2c:57:a2:8e:be:dd:88:
c7:dd:d8:6c:8c:e0:47:28:77:15:3b:93:64:aa:e9:c7:bf:c5:
3e:0a:7b:98:5f:61:11:2f:55:7e:06:be:53:01:37:ae:d5:a8:
37:4a:b3:9b:46:02:dc:fc:78:89:de:b6:55:40:5f:a1:99:96:
94:c0:5e:26:47:76:99:07:a2:ba:2e:43:c4:a7:02:47:bd:27:
25:52:46:55:aa:86:25:35:5a:6b:44:9f:f8:e4:fa:5a:d9:80:
82:36:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org