Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/s1IoJwdQZOW7XBTz6p8iQaG4ucs.roa
File: s1IoJwdQZOW7XBTz6p8iQaG4ucs.roa (raw, json)
Hash identifier: 252NQ5PwpBTX70BFCG6aUrgUL8yZ5XSBQson9fVknGY=
Subject key identifier: B3:52:28:27:07:50:64:E5:BB:5C:14:F3:EA:9F:22:41:A1:B8:B9:CB
Certificate issuer: /CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Certificate serial: 01862BD38B5A6AD0908A2D2155D8129F1320
Authority key identifier: 21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/s1IoJwdQZOW7XBTz6p8iQaG4ucs.roa
Signing time: Tue 07 Feb 2023 12:22:09 +0000
ROA not before: Tue 07 Feb 2023 12:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 997
IP address blocks: 93.93.245.0/24 maxlen: 24
93.93.244.0/24 maxlen: 24
93.93.244.0/22 maxlen: 24
93.93.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:d3:8b:5a:6a:d0:90:8a:2d:21:55:d8:12:9f:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Validity
Not Before: Feb 7 12:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3522827075064e5bb5c14f3ea9f2241a1b8b9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:bd:14:9a:6f:0d:2a:d1:89:87:d0:9d:9e:
ee:01:f6:db:a3:9b:f0:a3:8b:e1:25:89:21:b1:fa:
bb:dd:aa:9f:ab:d8:d1:ba:04:de:3f:d0:ba:2e:06:
58:02:c1:02:3a:7e:a3:ed:0a:8b:c3:da:a4:aa:b3:
2d:41:a8:73:82:c6:56:e4:b1:3d:a1:7c:ee:f3:e9:
92:8d:74:93:b0:bf:59:20:0b:33:18:af:51:a9:4e:
0b:43:be:1c:dc:7d:f9:d6:9b:53:77:38:5b:32:73:
0d:c4:13:3f:84:98:11:26:31:d7:fd:57:4f:6d:ee:
59:ce:12:2b:3a:bd:56:48:15:be:85:99:5c:8d:6d:
fe:64:01:98:a3:b4:6a:9c:43:68:b8:4f:70:71:98:
4f:25:57:e3:a2:7b:4c:c7:0d:7e:87:5b:05:38:87:
da:57:21:bd:20:07:9a:be:f9:f7:c9:eb:51:50:4d:
65:95:22:59:72:5a:2b:1b:60:8f:df:82:b0:e3:51:
f0:71:54:51:8e:b1:3e:64:92:c2:55:ca:cf:e7:c5:
bf:e5:30:86:02:21:2c:3c:23:40:6f:3d:6a:82:22:
fa:31:f5:f2:c0:9b:4e:9e:86:f7:01:31:e4:71:b9:
a9:92:d3:7b:da:d9:de:11:c1:6e:39:fb:b1:e3:43:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:28:27:07:50:64:E5:BB:5C:14:F3:EA:9F:22:41:A1:B8:B9:CB
X509v3 Authority Key Identifier:
keyid:21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/s1IoJwdQZOW7XBTz6p8iQaG4ucs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:af:ed:c4:f6:20:ae:f6:6a:01:82:d7:97:3d:ca:ef:19:3c:
41:8b:4c:20:c6:e8:67:3c:68:6a:3f:17:9a:0d:56:74:0f:15:
a5:8c:47:e2:2e:96:f3:7e:f5:8d:8f:f2:3c:ea:8a:ce:c1:c1:
37:b0:a6:09:ef:62:f7:34:34:41:88:77:b2:af:3b:1f:4b:1f:
af:27:20:f9:68:ba:40:a8:6c:28:d4:c3:2f:3f:67:30:50:9c:
db:21:e6:9d:c8:93:d5:6a:1f:f6:db:5a:0c:e6:d8:db:ee:59:
bd:a7:c0:f4:97:d6:85:68:b2:b7:5b:8e:7d:2d:5d:5b:47:30:
01:85:fe:ee:9c:35:8a:aa:8b:4a:bd:88:4d:f3:4a:51:22:4e:
ff:4d:f0:6c:5c:82:3e:4b:5f:02:6d:4c:85:87:3c:e4:f5:12:
5c:4f:dc:ee:4e:f2:33:92:1d:7e:c2:41:5f:74:6d:d1:b4:a4:
7c:f0:ee:eb:8e:86:4b:38:97:63:78:77:4e:85:c6:69:1a:5e:
f8:d7:ee:cc:41:26:63:c3:1e:16:e4:3c:51:6b:64:3d:53:66:
38:4c:d2:68:ef:b6:84:a1:b2:eb:03:d5:63:de:ee:4a:ee:c6:
c0:25:7b:c2:b5:d4:a2:5e:c4:44:78:dc:c4:60:94:86:c5:19:
64:f3:6b:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYr04taatCQii0hVdgSnxMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGI2OWIxMDRiYTdjN2Y5MTJjZDcyNTkxNmJmNDdkZDhi
YjAzNjcwHhcNMjMwMjA3MTIyMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzUyMjgyNzA3NTA2NGU1YmI1YzE0ZjNlYTlmMjI0MWExYjhiOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBi9FJpvDSrRiYfQnZ7uAfbbo5vw
o4vhJYkhsfq73aqfq9jRugTeP9C6LgZYAsECOn6j7QqLw9qkqrMtQahzgsZW5LE9
oXzu8+mSjXSTsL9ZIAszGK9RqU4LQ74c3H351ptTdzhbMnMNxBM/hJgRJjHX/VdP
be5ZzhIrOr1WSBW+hZlcjW3+ZAGYo7RqnENouE9wcZhPJVfjontMxw1+h1sFOIfa
VyG9IAeavvn3yetRUE1llSJZclorG2CP34Kw41HwcVRRjrE+ZJLCVcrP58W/5TCG
AiEsPCNAbz1qgiL6MfXywJtOnob3ATHkcbmpktN72tneEcFuOfux40MMIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLNSKCcHUGTlu1wU8+qfIkGhuLnLMB8GA1UdIwQY
MBaAFCHbabEEunx/kSzXJZFr9H3YuwNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWR0cHNRUzZmSC1STE5jbGtXdjBmZGk3QTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNWM2ZWMtOWY4MS00MzIyLTgyMzkt
ZWY0MzRiMWZhYzBlLzEvczFJb0p3ZFFaT1c3WEJUejZwOGlRYUc0dWNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hNWM2ZWMtOWY4MS00MzIyLTgyMzktZWY0MzRiMWZhYzBl
LzEvSWR0cHNRUzZmSC1STE5jbGtXdjBmZGk3QTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXV30MA0G
CSqGSIb3DQEBCwUAA4IBAQCgr+3E9iCu9moBgteXPcrvGTxBi0wgxuhnPGhqPxea
DVZ0DxWljEfiLpbzfvWNj/I86orOwcE3sKYJ72L3NDRBiHeyrzsfSx+vJyD5aLpA
qGwo1MMvP2cwUJzbIeadyJPVah/221oM5tjb7lm9p8D0l9aFaLK3W459LV1bRzAB
hf7unDWKqotKvYhN80pRIk7/TfBsXII+S18CbUyFhzzk9RJcT9zuTvIzkh1+wkFf
dG3RtKR88O7rjoZLOJdjeHdOhcZpGl741+7MQSZjwx4W5DxRa2Q9U2Y4TNJo77aE
obLrA9Vj3u5K7sbAJXvCtdSiXsREeNzEYJSGxRlk82uS
-----END CERTIFICATE-----
Generated at Wed Dec 20 11:13:06 2023 by rpki-client on console-fra.rpki-client.org