Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/hqBdxTocYGKj_LX5eevYWwH4Yms.roa
File: hqBdxTocYGKj_LX5eevYWwH4Yms.roa (raw, json)
Hash identifier: 3I2GqKaO3VtTY786LfdwryDyTd8KeOXrWEI6RtPa1rY=
Subject key identifier: 86:A0:5D:C5:3A:1C:60:62:A3:FC:B5:F9:79:EB:D8:5B:01:F8:62:6B
Certificate issuer: /CN=bac187e78d1ef0d98d3d83475f4d275e1455636c
Certificate serial: 08AF1288
Authority key identifier: BA:C1:87:E7:8D:1E:F0:D9:8D:3D:83:47:5F:4D:27:5E:14:55:63:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usGH540e8NmNPYNHX00nXhRVY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/hqBdxTocYGKj_LX5eevYWwH4Yms.roa
Signing time: Sat 01 Jan 2022 09:00:58 +0000
ROA not before: Sat 01 Jan 2022 09:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41291
IP address blocks: 93.190.208.0/21 maxlen: 21
93.190.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145691272 (0x8af1288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac187e78d1ef0d98d3d83475f4d275e1455636c
Validity
Not Before: Jan 1 09:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86a05dc53a1c6062a3fcb5f979ebd85b01f8626b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:5e:2f:e5:57:bc:e5:b7:71:95:d5:19:ad:
10:f6:f6:70:25:2f:03:7a:ec:5a:6e:b8:d9:68:5c:
28:1a:0e:6d:3c:d6:f3:08:b7:1f:bf:d4:62:58:ac:
5b:ee:44:1d:cc:8b:4b:a6:90:14:b6:42:d8:06:1b:
61:38:54:6f:e9:5f:4f:10:2a:b1:c1:6b:82:3f:b4:
9b:73:f4:60:98:af:5e:c6:a6:f1:19:3a:12:c3:da:
5b:96:56:d1:3f:10:fa:7a:e0:4d:8b:ac:f5:a9:a0:
26:bb:c0:cc:6a:dc:87:20:bf:0d:98:0d:7e:2f:39:
b9:d3:e2:30:c8:c3:09:5b:9b:5b:94:0b:21:f7:4e:
5c:8c:3e:ce:ab:a4:34:78:6b:bd:0b:76:d5:0b:97:
80:6a:1a:8b:e2:2f:c1:29:e3:f1:8d:fc:8e:16:ab:
7d:f5:e8:9a:95:dd:ed:d7:ed:37:76:29:28:a3:fc:
e0:a0:e4:a5:f0:e7:33:1c:a4:c3:d9:8c:5a:de:c8:
cb:44:09:e4:8b:6f:96:fa:e1:00:92:e1:20:78:48:
09:a9:8a:2c:57:54:75:a8:cd:0c:c2:59:b4:74:09:
5c:46:71:ca:63:81:a4:c3:ff:b4:89:df:d8:67:42:
1b:d5:12:ff:5f:de:6a:8e:c4:88:dd:2d:72:e5:b0:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:5D:C5:3A:1C:60:62:A3:FC:B5:F9:79:EB:D8:5B:01:F8:62:6B
X509v3 Authority Key Identifier:
keyid:BA:C1:87:E7:8D:1E:F0:D9:8D:3D:83:47:5F:4D:27:5E:14:55:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usGH540e8NmNPYNHX00nXhRVY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/hqBdxTocYGKj_LX5eevYWwH4Yms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/100411-46a8-44da-af92-953976d78c3c/1/usGH540e8NmNPYNHX00nXhRVY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.208.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:39:7e:82:75:ea:bc:1f:7a:d4:74:2e:45:78:44:9b:aa:df:
a3:3b:20:3a:fd:5d:5a:fd:af:ca:2f:7b:fd:ef:ff:6a:26:95:
60:45:40:a3:51:02:89:8e:f0:4f:07:50:0d:f0:eb:73:f7:66:
83:8e:95:d1:39:0d:69:59:45:63:58:6b:cf:9b:de:df:bf:ba:
83:b6:b9:34:3d:2a:1b:10:28:84:18:47:9c:b3:11:b3:d9:2b:
28:d3:18:d4:25:bb:e7:89:e2:1b:2f:98:ca:7a:4e:b0:e6:3b:
fa:0c:86:09:3e:f0:78:6e:b2:12:48:92:b5:e5:2e:45:69:64:
7d:13:98:37:a7:53:fd:c3:09:72:10:e1:e0:11:81:ee:c9:3e:
2a:9d:02:c8:28:81:eb:59:d0:b3:f4:fc:38:5b:7a:bf:c0:a7:
57:6a:9a:b5:a9:fd:7d:47:be:c3:5e:fb:a7:1c:87:df:38:f5:
66:3c:69:ae:4e:88:09:4b:fc:a7:d3:8e:20:35:bc:be:f3:52:
61:0f:0c:cd:bb:5c:0b:9e:3a:b2:5e:b5:4b:b9:56:3a:e3:8f:
9f:cb:0b:3b:4e:bc:e4:bc:c0:2e:cd:3e:22:33:1d:7f:cc:79:
4c:7e:12:4f:0d:7b:56:cc:5a:d3:b0:15:bf:91:5c:bd:fd:29:
af:45:f9:23
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECK8SiDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YWMxODdlNzhkMWVmMGQ5OGQzZDgzNDc1ZjRkMjc1ZTE0NTU2MzZjMB4XDTIyMDEw
MTA5MDA1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODZhMDVkYzUzYTFj
NjA2MmEzZmNiNWY5NzllYmQ4NWIwMWY4NjI2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANX3Xi/lV7zlt3GV1RmtEPb2cCUvA3rsWm642WhcKBoObTzW
8wi3H7/UYlisW+5EHcyLS6aQFLZC2AYbYThUb+lfTxAqscFrgj+0m3P0YJivXsam
8Rk6EsPaW5ZW0T8Q+nrgTYus9amgJrvAzGrchyC/DZgNfi85udPiMMjDCVubW5QL
IfdOXIw+zqukNHhrvQt21QuXgGoai+IvwSnj8Y38jharffXompXd7dftN3YpKKP8
4KDkpfDnMxykw9mMWt7Iy0QJ5ItvlvrhAJLhIHhICamKLFdUdajNDMJZtHQJXEZx
ymOBpMP/tInf2GdCG9US/1/eao7EiN0tcuWwjZMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSGoF3FOhxgYqP8tfl569hbAfhiazAfBgNVHSMEGDAWgBS6wYfnjR7w2Y09
g0dfTSdeFFVjbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VzR0g1NDBlOE5tTlBZTkhYMDBuWGhSVlkydy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvMTAwNDExLTQ2YTgtNDRkYS1hZjkyLTk1Mzk3NmQ3OGMzYy8x
L2hxQmR4VG9jWUdLal9MWDVlZXZZV3dINFltcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
MTAwNDExLTQ2YTgtNDRkYS1hZjkyLTk1Mzk3NmQ3OGMzYy8xL3VzR0g1NDBlOE5t
TlBZTkhYMDBuWGhSVlkydy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA12+0DANBgkqhkiG9w0BAQsFAAOC
AQEAejl+gnXqvB961HQuRXhEm6rfozsgOv1dWv2vyi97/e//aiaVYEVAo1ECiY7w
TwdQDfDrc/dmg46V0TkNaVlFY1hrz5ve37+6g7a5ND0qGxAohBhHnLMRs9krKNMY
1CW754niGy+YynpOsOY7+gyGCT7weG6yEkiSteUuRWlkfROYN6dT/cMJchDh4BGB
7sk+Kp0CyCiB61nQs/T8OFt6v8CnV2qatan9fUe+w177pxyH3zj1Zjxprk6ICUv8
p9OOIDW8vvNSYQ8MzbtcC546sl61S7lWOuOPn8sLO0685LzALs0+IjMdf8x5TH4S
Tw17Vsxa07AVv5Fcvf0pr0X5Iw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org