Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/8w2IVgH74USYfRf2f1E1MJGymlg.roa
File: 8w2IVgH74USYfRf2f1E1MJGymlg.roa (raw, json)
Hash identifier: 1WVyeD3n2KIsPPhCJ8nandQGtmNO6OjMOo/nduCjMms=
Subject key identifier: F3:0D:88:56:01:FB:E1:44:98:7D:17:F6:7F:51:35:30:91:B2:9A:58
Certificate issuer: /CN=73d09d895b43a622a4521b95b99969dc673c0d7a
Certificate serial: DFBA
Authority key identifier: 73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/8w2IVgH74USYfRf2f1E1MJGymlg.roa
Signing time: Mon 31 Jan 2022 15:54:01 +0000
ROA not before: Mon 31 Jan 2022 15:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 93.177.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57274 (0xdfba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d09d895b43a622a4521b95b99969dc673c0d7a
Validity
Not Before: Jan 31 15:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f30d885601fbe144987d17f67f51353091b29a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:55:35:35:ff:cf:49:03:36:d1:d7:e8:e9:
49:b8:b2:ed:6f:38:b6:d2:04:03:84:ed:8b:ba:77:
9d:f8:d3:18:76:b2:c7:2e:b4:84:9f:f7:a0:c6:4a:
d9:99:ab:b8:d0:d7:42:45:72:3e:e2:75:80:da:d7:
28:30:3e:da:49:0b:5e:49:e9:a6:9d:f9:08:d5:36:
49:fe:c3:ca:38:c0:80:79:3a:9a:c9:90:08:4d:c1:
8d:3c:d6:1d:d3:e8:8f:a9:8d:42:4e:b7:d8:9e:45:
1d:1a:d5:20:22:88:9f:a0:34:4e:fa:c5:8b:89:50:
5a:d1:e9:f6:f5:56:2a:d9:6e:10:c7:37:4d:d4:bc:
a2:fc:36:3e:63:52:67:76:63:92:bf:9d:3f:16:d8:
cc:2f:2a:b5:82:41:03:86:39:3e:75:73:23:96:19:
f6:27:94:45:af:52:f6:d3:27:4d:e7:97:95:13:80:
53:04:11:5c:48:1d:af:c4:14:55:1f:a2:40:ba:c7:
e6:d0:ec:18:fa:2c:e4:b6:a2:1c:d6:8c:27:e0:6d:
a2:d0:48:1a:1c:b3:7f:1d:55:99:34:ba:b1:e3:11:
39:3e:4d:d3:be:96:4a:4b:ed:1e:7b:b3:7f:9f:97:
99:25:e6:11:08:72:f7:98:c3:ba:6f:58:ef:08:4e:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0D:88:56:01:FB:E1:44:98:7D:17:F6:7F:51:35:30:91:B2:9A:58
X509v3 Authority Key Identifier:
keyid:73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/8w2IVgH74USYfRf2f1E1MJGymlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.104.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c3:1c:22:82:ee:1c:8a:cb:7d:3a:81:52:49:71:95:2f:b0:
33:d1:16:89:07:1c:2b:24:95:28:51:20:72:fe:32:e5:e3:93:
01:3f:f0:36:32:3b:6c:ed:63:a3:9c:6d:7d:8c:fc:af:a0:86:
62:0e:ef:8f:ef:ad:c0:05:96:31:04:11:13:c5:f4:7d:09:c3:
0c:3f:cc:10:26:26:9a:32:21:1b:0c:44:4a:b7:97:47:0a:b9:
7c:58:93:1f:55:7a:71:3a:2c:e6:a5:54:d9:e1:ad:44:58:8f:
b3:f7:f3:34:30:ac:e2:79:eb:5a:6b:1b:43:b6:6d:02:20:10:
62:15:09:f2:37:3f:b6:28:6d:b0:63:fb:90:45:31:8d:5f:6c:
39:b9:10:44:e1:b3:5a:0d:3f:a9:f5:d3:98:2f:98:0f:c7:01:
db:6a:9b:9e:e1:7e:cf:78:f2:bc:3f:e7:2c:66:d1:9e:fb:6d:
b2:dc:67:d5:59:60:84:3a:8c:ec:02:18:5c:25:8e:83:61:4f:
d3:23:4a:74:f5:5a:fe:a7:08:82:1b:62:a3:a9:27:60:eb:e2:
a1:cf:8e:79:db:82:de:dc:d7:5c:bd:2e:eb:3f:02:17:21:bd:
9e:00:6b:f6:f2:5d:3c:cd:01:ca:7e:8f:53:b9:35:72:ec:13:
96:42:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org