Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/QlWDRrGJeGE5qMewEweFKLcr_HI.roa
File: QlWDRrGJeGE5qMewEweFKLcr_HI.roa (raw, json)
Hash identifier: 6PebIeGopA1f0jRun2ODnwGSDiFZwfaSP4BX3N0Q/Zo=
Subject key identifier: 42:55:83:46:B1:89:78:61:39:A8:C7:B0:13:07:85:28:B7:2B:FC:72
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 01893071C8055114161E8BF4C16C115CA54C
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/QlWDRrGJeGE5qMewEweFKLcr_HI.roa
Signing time: Fri 07 Jul 2023 13:01:50 +0000
ROA not before: Fri 07 Jul 2023 13:01:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 37.1.228.0/24 maxlen: 24
37.1.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:71:c8:05:51:14:16:1e:8b:f4:c1:6c:11:5c:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 7 13:01:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42558346b189786139a8c7b013078528b72bfc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:f0:b4:d0:4e:c1:fc:64:ce:c9:24:e4:ef:
7f:99:00:15:97:85:e0:e4:f7:70:ec:7d:ca:8b:be:
be:9f:dd:77:42:23:a7:df:db:47:a3:0f:00:47:9a:
16:87:07:bf:fa:03:7d:a6:ae:f7:40:f6:31:1d:0a:
f0:18:d2:99:d1:dc:fa:68:74:df:b8:b3:32:a1:f2:
a1:ef:35:94:29:24:ef:6d:5a:cb:0f:13:5a:ca:f3:
d8:d1:99:6d:cb:2b:63:68:4f:ca:e5:e8:0f:d5:bc:
1b:b4:c3:83:7d:16:9a:78:ea:f0:cc:5b:c9:ce:ad:
46:a8:3a:b2:db:df:f5:08:17:00:a1:72:99:23:99:
2d:05:31:67:d2:58:4b:48:32:04:dd:cc:86:88:2f:
33:3b:b7:0e:5c:8a:c6:83:16:96:86:a0:17:17:af:
d4:89:79:38:8f:f6:36:f0:67:1e:cb:be:e2:97:96:
1e:aa:ea:dc:60:8b:81:2d:e0:42:a6:b3:1c:64:6a:
9b:48:ad:ab:f3:04:e4:76:2b:05:79:be:10:5b:b6:
a8:2f:cf:bd:1f:f6:25:e2:fe:54:81:c7:44:55:80:
62:ea:21:da:7f:7c:00:78:36:ad:eb:58:3a:da:f3:
77:84:f1:09:10:f2:d9:69:a3:a1:21:36:3f:32:e2:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:83:46:B1:89:78:61:39:A8:C7:B0:13:07:85:28:B7:2B:FC:72
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/QlWDRrGJeGE5qMewEweFKLcr_HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.225.0/24
37.1.228.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3a:03:3f:1a:f7:73:b2:22:ad:68:37:79:8e:be:a6:22:62:
37:e7:2f:68:c8:1a:53:db:0c:21:a4:0a:2f:07:dd:fa:3c:3b:
33:fa:e4:0f:e7:ae:77:bd:b4:04:0c:04:a1:f4:0d:b1:88:30:
54:73:d8:cd:ac:4d:6f:ce:25:ed:a7:a0:4f:21:9e:ff:18:2f:
5d:ba:81:fd:e0:f1:84:57:5e:f1:f0:9c:ec:b1:fa:3c:ed:32:
0d:9e:ce:78:db:2c:b8:68:91:00:3b:10:37:0b:e6:e9:c6:00:
c4:0a:62:45:d0:db:f0:8a:8a:0e:2c:d4:51:f4:15:24:30:89:
25:90:0c:15:ba:ba:88:f0:d8:be:36:44:2c:c3:c6:8e:22:34:
d6:46:5b:6f:48:f4:a1:32:5d:26:ce:9b:71:ba:a4:42:72:d8:
78:b3:b0:82:ba:d7:5e:25:31:e2:07:e9:c4:1d:82:b0:4a:bb:
08:ad:fa:d8:64:56:04:4f:ed:f9:f3:39:19:95:b1:c6:ac:49:
57:62:3d:95:65:2f:c6:a0:fd:59:8b:e1:9e:ea:a7:0f:23:5b:
53:58:a9:2f:d9:52:fd:6d:fc:1a:d5:3a:f7:04:1f:b2:b0:38:
e3:74:b2:49:11:96:b9:ff:ce:e5:28:52:93:9e:39:0d:c3:f9:
ab:c2:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org