Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/NQGf5IcJAvkAVb8tUfWkfaloVYU.roa
File: NQGf5IcJAvkAVb8tUfWkfaloVYU.roa (raw, json)
Hash identifier: W8A0WVM3PqzgLVqPoqsYYnYlWWw/li5vgc8biWbNn7o=
Subject key identifier: 35:01:9F:E4:87:09:02:F9:00:55:BF:2D:51:F5:A4:7D:A9:68:55:85
Certificate issuer: /CN=bac187e78d1ef0d98d3d83475f4d275e1455636c
Certificate serial: 08AFBF4B
Authority key identifier: BA:C1:87:E7:8D:1E:F0:D9:8D:3D:83:47:5F:4D:27:5E:14:55:63:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usGH540e8NmNPYNHX00nXhRVY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/NQGf5IcJAvkAVb8tUfWkfaloVYU.roa
Signing time: Sat 01 Jan 2022 09:00:58 +0000
ROA not before: Sat 01 Jan 2022 09:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47293
IP address blocks: 93.190.208.0/21 maxlen: 21
93.190.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145735499 (0x8afbf4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac187e78d1ef0d98d3d83475f4d275e1455636c
Validity
Not Before: Jan 1 09:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35019fe4870902f90055bf2d51f5a47da9685585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:cf:25:7e:3d:20:8c:92:c7:ae:c5:80:4f:
73:38:6f:3b:86:1e:a7:49:b1:ed:2a:78:e2:54:ed:
8d:ef:ed:b1:ee:1b:9d:d0:25:15:e3:7d:22:98:6f:
f6:fe:da:d7:0c:e5:71:26:c6:19:b1:b4:90:e3:21:
79:58:bd:1a:6e:b5:dd:eb:7b:2d:0a:6e:d4:cb:b1:
4b:50:02:63:48:9a:96:94:53:55:3f:bd:6e:69:cf:
22:54:ec:13:e0:8f:d2:c9:b1:38:81:86:1b:d8:0f:
9f:ca:e3:0c:04:a2:61:64:11:51:c8:8c:be:14:a9:
55:df:b3:87:f3:f6:70:91:37:98:7c:2c:ac:55:a2:
9b:ea:fb:2a:66:46:2c:8a:c1:99:9d:bf:b8:1a:4e:
dc:da:81:f6:cc:04:bf:95:80:2e:43:43:b7:fa:fc:
68:2e:af:cc:4f:fa:fb:74:c8:a6:a0:61:f5:d8:55:
48:97:12:65:5d:8d:98:43:2b:9d:fe:30:2a:31:85:
e8:d1:f8:31:89:63:15:43:37:db:54:17:ac:f3:21:
4b:20:34:5d:8e:83:c0:df:99:6e:55:ae:98:a4:dd:
d6:f6:b0:b0:be:dd:bc:31:0f:2d:d6:5c:c1:82:18:
19:c1:fb:3e:79:c4:6b:ec:61:1a:f3:cc:b4:97:8f:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:9F:E4:87:09:02:F9:00:55:BF:2D:51:F5:A4:7D:A9:68:55:85
X509v3 Authority Key Identifier:
keyid:BA:C1:87:E7:8D:1E:F0:D9:8D:3D:83:47:5F:4D:27:5E:14:55:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usGH540e8NmNPYNHX00nXhRVY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/NQGf5IcJAvkAVb8tUfWkfaloVYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/usGH540e8NmNPYNHX00nXhRVY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.208.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:48:19:f7:78:92:55:06:94:ce:67:8c:5e:83:ee:18:e0:df:
51:0a:56:13:70:ff:89:23:f8:cd:71:2f:5e:7d:01:b8:dd:30:
49:98:62:29:b2:ee:ee:5d:bd:c0:f2:d3:22:dd:94:67:26:0c:
bb:32:10:14:08:0b:a0:43:ef:b5:f6:42:02:a0:bd:81:84:0d:
dc:c2:fc:4f:ac:10:f7:6c:26:a4:20:91:9d:98:76:1e:7a:fe:
07:ab:8c:b4:d9:cd:4a:e0:3e:0a:33:e4:16:75:6e:cb:f3:db:
85:0c:0d:1b:82:31:79:69:d8:3f:2f:70:42:37:25:6d:d9:39:
ad:1d:29:31:62:1b:97:2e:6a:8f:ba:03:51:c2:93:c4:15:77:
c7:96:d0:18:72:7f:27:2a:39:b2:ff:5d:21:cf:35:63:5d:10:
97:e8:d0:6a:5c:28:b2:d1:42:37:df:55:8f:6b:4f:2b:b8:37:
0c:e4:19:1e:34:c6:fb:92:63:6c:0f:c1:cd:2b:5f:3d:db:24:
a8:9a:21:33:8d:82:75:d4:77:12:1a:11:90:5e:41:2a:6a:23:
34:14:60:62:6f:33:26:36:54:d3:63:98:d3:21:8c:88:fa:94:
84:a2:71:41:a9:c8:00:40:1f:c4:41:5a:66:84:67:c6:e1:ca:
82:37:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org