Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/mZqprEbEeAurHx0z0sPf0bIoGuw.roa
File: mZqprEbEeAurHx0z0sPf0bIoGuw.roa (raw, json)
Hash identifier: 7QzN7ueZ/0QOUwIrnNevx5lGamd1zoMOy18UeCi/Tzc=
Subject key identifier: 99:9A:A9:AC:46:C4:78:0B:AB:1F:1D:33:D2:C3:DF:D1:B2:28:1A:EC
Certificate issuer: /CN=a0d60200f4d25c0c1bd7d77d66727556ef5da9f4
Certificate serial: C6F9C7
Authority key identifier: A0:D6:02:00:F4:D2:5C:0C:1B:D7:D7:7D:66:72:75:56:EF:5D:A9:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/mZqprEbEeAurHx0z0sPf0bIoGuw.roa
Signing time: Sat 01 Jan 2022 11:58:54 +0000
ROA not before: Sat 01 Jan 2022 11:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63473
IP address blocks: 188.93.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13040071 (0xc6f9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d60200f4d25c0c1bd7d77d66727556ef5da9f4
Validity
Not Before: Jan 1 11:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=999aa9ac46c4780bab1f1d33d2c3dfd1b2281aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:19:02:9b:32:e1:63:a7:fc:2b:b6:86:9b:
86:a1:41:38:94:4d:c0:b3:79:51:22:6f:da:aa:9a:
db:40:6a:1a:58:60:58:b9:3b:ab:82:7a:98:f7:4b:
fd:df:09:f2:13:ea:d8:e9:4b:88:57:cb:92:e0:27:
6a:9f:cc:3d:bc:f1:2f:60:bd:56:52:bd:ff:b0:2a:
b4:db:ff:09:f8:70:6e:71:51:6c:3a:ee:cc:b0:68:
af:18:ba:6e:14:ab:7b:85:4b:3e:b2:6f:fc:9d:79:
7d:58:6d:85:a5:4f:b5:b2:0e:a6:1d:50:fb:05:f9:
99:b1:16:03:59:0c:b3:77:5c:76:e5:5e:86:14:d9:
d0:a8:7e:21:ca:f4:a5:8a:e8:5e:3c:4b:4a:8a:c2:
ce:22:45:56:7a:dd:ee:f2:dc:89:79:e0:58:2b:e9:
5a:a2:ec:27:e5:75:0b:6c:fb:3a:68:01:46:f2:e1:
8a:33:10:9b:7d:f6:bc:de:c6:41:0f:12:63:3e:77:
25:fd:3f:fa:9e:61:6d:70:03:b7:d2:c1:53:b6:39:
30:15:4f:1a:5d:79:77:ea:b1:99:18:00:ed:e8:d8:
08:fb:65:e1:41:ea:92:95:61:60:7f:46:d3:ac:84:
82:c7:1e:7e:cb:10:9c:8a:bf:7b:33:ca:06:12:6e:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:A9:AC:46:C4:78:0B:AB:1F:1D:33:D2:C3:DF:D1:B2:28:1A:EC
X509v3 Authority Key Identifier:
keyid:A0:D6:02:00:F4:D2:5C:0C:1B:D7:D7:7D:66:72:75:56:EF:5D:A9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/mZqprEbEeAurHx0z0sPf0bIoGuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ed:b3:78:a4:ff:12:db:e2:d0:a2:ab:3f:9d:7f:cc:c7:43:
14:c3:0f:c9:69:0e:ae:6a:14:4f:36:c0:f5:aa:43:b3:6c:72:
59:a5:c2:f7:69:aa:d7:84:de:f5:2a:2c:20:a9:89:b9:34:74:
f8:43:ee:29:bf:00:78:81:b4:9d:ec:1b:12:d5:ac:a0:23:3e:
8d:01:7d:f9:33:15:cd:c8:65:c7:ba:fb:7b:bd:d3:9e:f7:18:
ca:23:7a:a5:86:f2:09:cc:62:fb:46:99:95:fe:8b:f4:0a:94:
62:02:2f:62:46:ee:98:3f:3a:2a:9f:8e:bf:5d:d6:15:f5:8e:
1d:45:1b:65:40:1f:87:05:3e:e1:7e:64:c2:5c:68:d1:55:3c:
23:e6:c6:c5:e5:23:99:b0:57:83:9c:4c:18:53:30:7d:81:65:
c0:42:94:f1:d2:4e:67:c5:6d:c6:30:57:42:c3:fc:de:2e:62:
31:57:24:f3:1e:53:c6:b0:c5:58:bd:6b:09:3f:1d:0d:20:8b:
42:20:69:db:b1:9e:6e:87:8d:ab:ba:83:f4:b5:6a:a5:b7:09:
cc:3f:8d:bd:2a:30:c8:97:8d:24:08:f4:55:de:ff:d9:6b:8a:
96:bc:dc:ed:cd:d3:77:6b:3e:d0:eb:90:eb:28:98:94:6b:a8:
cd:73:12:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:50 2025 by rpki-client