Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/iOKyvxAZd8M9sFu1G06DTIPU0NI.roa
File: iOKyvxAZd8M9sFu1G06DTIPU0NI.roa (raw, json)
Hash identifier: BM6dNED5WWkVemgX86ZoX6AZM0HZMUG0CXsWekMb8Uw=
Subject key identifier: 88:E2:B2:BF:10:19:77:C3:3D:B0:5B:B5:1B:4E:83:4C:83:D4:D0:D2
Certificate issuer: /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial: 0182A761B676400FC88CB3368C138549384F
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/iOKyvxAZd8M9sFu1G06DTIPU0NI.roa
Signing time: Tue 16 Aug 2022 15:59:34 +0000
ROA not before: Tue 16 Aug 2022 15:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.103.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:61:b6:76:40:0f:c8:8c:b3:36:8c:13:85:49:38:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33980d41e32a5616382e906840264945af02d67e
Validity
Not Before: Aug 16 15:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88e2b2bf101977c33db05bb51b4e834c83d4d0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:83:d7:80:aa:55:54:f1:c1:40:59:b7:7d:
f5:7b:de:7e:38:35:98:6c:b4:42:69:30:d4:e7:8e:
58:56:a5:3f:b2:04:3f:d8:f1:35:67:f1:31:d2:17:
1c:89:c7:fa:eb:bb:ee:1e:89:02:38:7f:46:93:96:
9c:23:e4:d2:f6:fe:93:da:7a:7f:8d:f9:02:72:3a:
5f:b0:d7:39:6a:69:54:f2:a7:ff:3c:b9:b9:e8:4a:
ab:bb:7e:3b:a8:e5:16:4f:71:ed:67:57:aa:1c:f4:
49:16:94:f8:47:68:c5:c5:43:6f:80:71:78:fb:61:
48:58:12:ae:25:23:c2:5e:f2:ad:4c:f8:11:b7:f3:
c3:e0:a1:bf:2a:79:e2:86:84:32:ea:a0:14:8d:5c:
3e:d8:c6:25:0c:13:fa:62:52:e9:96:6e:5c:d0:85:
8d:76:e6:a9:ee:77:3e:a6:21:b6:2c:07:85:88:12:
a0:93:ac:d4:f2:4a:cf:6a:fb:e3:c2:32:63:fe:00:
f2:a9:3a:66:85:18:68:97:e2:2d:bc:9b:ae:78:a3:
49:bd:11:47:98:a7:f6:20:d3:a8:a9:3c:09:cd:23:
96:6b:cb:47:e1:57:a1:1e:d3:74:b5:4b:27:bb:1c:
d7:4f:e1:0e:b0:f7:97:31:c7:35:01:aa:da:56:e6:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E2:B2:BF:10:19:77:C3:3D:B0:5B:B5:1B:4E:83:4C:83:D4:D0:D2
X509v3 Authority Key Identifier:
keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/iOKyvxAZd8M9sFu1G06DTIPU0NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.177.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3a:53:e9:63:bf:ed:cb:df:4c:fb:f9:74:89:d0:8f:fd:04:
06:93:51:ab:4b:60:c9:5f:c4:20:30:86:cf:82:8a:93:0c:9b:
44:b2:5a:7a:67:80:b6:25:23:d9:70:00:e0:e1:16:33:0b:c5:
3a:ec:3a:51:5a:a9:91:89:e8:6f:fb:bc:b8:1e:df:b2:04:54:
99:f3:77:58:37:da:1e:27:a5:c8:d9:fa:28:f2:bb:7d:50:c4:
8b:ad:84:9d:8d:be:ee:a1:18:7f:f6:d7:d2:68:d6:f3:6c:27:
ab:34:d3:29:2b:a2:b0:93:c5:67:35:f1:0f:6c:0c:9d:74:5a:
e2:0f:12:44:a8:ba:53:5a:bb:f0:a8:e9:7e:ab:af:40:ca:7d:
cc:40:5b:a8:66:94:2e:50:34:59:f7:55:c5:ac:6e:50:1e:75:
68:24:f6:dd:7d:f5:70:95:b6:b0:63:3e:c1:2f:e6:50:58:07:
bc:07:59:ac:a0:37:61:69:ed:05:d0:ce:f4:57:99:fb:dd:16:
68:97:ac:d1:1c:93:68:97:e0:6b:b7:01:1b:c0:34:3a:3f:a0:
14:fa:47:60:43:35:26:9f:41:fc:f5:34:46:be:76:ae:f1:3b:
a5:b8:cc:f0:d0:f7:c7:4e:81:84:f3:c5:25:0c:65:0b:88:65:
c2:1e:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org