Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/qCJaza8hlmtCNIr5tnphy2D69p0.roa
File: qCJaza8hlmtCNIr5tnphy2D69p0.roa (raw, json)
Hash identifier: 2B7KBi+kXBNFY6VDnFo3DDaITR4anJMvuiRpmQXf20E=
Subject key identifier: A8:22:5A:CD:AF:21:96:6B:42:34:8A:F9:B6:7A:61:CB:60:FA:F6:9D
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 01845250AF8C7E3E1D15E9EC8565FC524239
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/qCJaza8hlmtCNIr5tnphy2D69p0.roa
Signing time: Mon 07 Nov 2022 13:38:50 +0000
ROA not before: Mon 07 Nov 2022 13:38:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212865
IP address blocks: 80.238.134.0/24 maxlen: 24
80.238.136.0/24 maxlen: 24
80.238.139.0/24 maxlen: 24
80.238.140.0/22 maxlen: 22
80.238.144.0/20 maxlen: 20
80.238.160.0/20 maxlen: 20
80.238.176.0/20 maxlen: 20
80.238.129.0/24 maxlen: 24
80.238.130.0/24 maxlen: 24
62.65.141.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.142.0/24 maxlen: 24
62.65.143.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
62.65.158.0/24 maxlen: 24
80.238.192.0/21 maxlen: 21
80.238.200.0/22 maxlen: 22
80.238.208.0/21 maxlen: 21
80.238.216.0/22 maxlen: 22
80.238.225.0/24 maxlen: 24
80.238.223.0/24 maxlen: 24
94.78.2.0/24 maxlen: 24
94.78.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:50:af:8c:7e:3e:1d:15:e9:ec:85:65:fc:52:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Nov 7 13:38:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8225acdaf21966b42348af9b67a61cb60faf69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:57:87:9b:71:57:e7:3c:a7:1c:36:04:97:
37:2f:6b:48:a8:0e:4b:0f:ed:c8:21:54:fc:d4:00:
ce:17:2d:ec:48:47:fc:db:f4:73:d7:4b:ae:46:48:
3e:dc:17:92:b1:37:99:96:5f:2c:c6:64:98:d3:ae:
bc:74:6d:ac:e8:9b:a8:70:db:44:62:94:a2:3f:41:
f8:50:da:ac:0c:69:77:c3:1d:0d:c5:96:6e:1b:fc:
cb:55:68:d7:dc:ff:81:37:30:06:05:86:66:57:44:
97:1c:93:6c:c9:66:85:e4:35:58:7d:85:af:29:0f:
4b:18:0b:d4:e9:d6:43:92:2b:5c:14:9a:40:9b:ff:
39:f3:fb:e3:e0:52:a0:2d:51:c4:57:6a:72:64:49:
f3:86:e1:dc:b6:9d:99:4d:50:a6:7b:51:87:4d:6c:
2f:a2:26:83:fa:09:f6:e7:97:70:62:ff:8e:a7:16:
dd:d2:58:f9:8d:6c:e1:9d:86:c9:dd:21:d0:b6:e1:
41:81:40:5b:f4:7a:5f:e2:6a:65:31:d1:0d:15:0a:
58:84:05:28:01:04:56:1c:52:47:3e:44:9a:93:b3:
12:3a:26:7d:0d:e6:b5:96:14:95:d0:0b:ef:3b:1b:
2c:77:88:3a:39:5b:c6:3a:38:4e:d2:02:bf:74:a0:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:5A:CD:AF:21:96:6B:42:34:8A:F9:B6:7A:61:CB:60:FA:F6:9D
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/qCJaza8hlmtCNIr5tnphy2D69p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.141.0-62.65.151.255
62.65.153.0-62.65.158.255
80.238.129.0-80.238.130.255
80.238.134.0/24
80.238.136.0/24
80.238.139.0-80.238.203.255
80.238.208.0-80.238.219.255
80.238.223.0/24
80.238.225.0/24
94.78.2.0/23
Signature Algorithm: sha256WithRSAEncryption
04:ff:77:9e:fa:e1:a3:c0:c6:8f:30:74:6c:04:48:cd:02:00:
af:96:20:a2:85:e5:15:14:53:17:7c:a2:bd:29:8f:5b:71:ff:
36:d8:df:1c:8c:2e:83:25:f9:72:f1:34:23:9f:20:b9:a3:b6:
b8:be:9f:fe:ae:14:46:8b:27:55:dc:94:42:d9:4b:e9:89:6a:
b9:8a:2d:15:84:6f:22:d4:cf:8b:f7:df:ea:85:4b:70:68:94:
5e:fb:64:8b:c8:6e:da:91:e4:50:59:6f:4b:e4:9d:01:c8:61:
1a:25:c1:bb:45:50:dc:bf:b6:94:c1:5b:2b:7f:33:d1:c8:7c:
d3:c7:6d:c2:e1:57:4f:6c:9c:35:6b:be:31:00:38:62:8d:c7:
1d:43:4d:d9:8e:d3:de:a3:9a:82:ef:4c:39:2b:6b:fe:7d:7b:
59:48:cf:bc:0b:2c:fa:58:f4:5a:8e:8a:0d:59:96:9d:98:03:
21:2b:1f:7c:57:3a:7e:b5:e6:f8:d5:35:d5:d3:bd:3d:56:b6:
ab:43:45:ad:c3:c8:45:81:69:2e:03:26:0b:ae:99:88:2a:0e:
04:32:36:90:c4:df:36:d0:6b:25:56:a8:63:1b:5b:d3:4d:0c:
e1:c8:2d:8e:75:55:6d:7b:f1:74:33:c0:5f:12:05:de:5b:b5:
47:05:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org