Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/qdUiRdz78mOS8rFs74mB-7wbErg.roa
File: qdUiRdz78mOS8rFs74mB-7wbErg.roa (raw, json)
Hash identifier: VNMS7qIGu8dv+UoyVvE2xYCELzNfIA2osZfc5gT4bNY=
Subject key identifier: A9:D5:22:45:DC:FB:F2:63:92:F2:B1:6C:EF:89:81:FB:BC:1B:12:B8
Certificate issuer: /CN=cfba970db187d18e19a91e64f00b0d3160860db5
Certificate serial: 01856E78DC3626A07BA850A861ED07D2FFEE
Authority key identifier: CF:BA:97:0D:B1:87:D1:8E:19:A9:1E:64:F0:0B:0D:31:60:86:0D:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/qdUiRdz78mOS8rFs74mB-7wbErg.roa
Signing time: Sun 01 Jan 2023 17:54:52 +0000
ROA not before: Sun 01 Jan 2023 17:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 185.5.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:dc:36:26:a0:7b:a8:50:a8:61:ed:07:d2:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba970db187d18e19a91e64f00b0d3160860db5
Validity
Not Before: Jan 1 17:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9d52245dcfbf26392f2b16cef8981fbbc1b12b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:60:91:b7:29:e9:a5:f7:35:0f:33:52:d5:
4f:a1:ca:49:d0:89:b7:71:93:ce:a5:bb:ae:5b:89:
cd:ad:97:95:85:d2:57:98:e8:10:f5:3b:d4:d7:b1:
26:ab:f1:ec:91:39:0d:8d:9b:98:35:80:32:d8:c4:
2c:01:ca:38:4e:b5:fd:6d:a4:62:0b:e0:66:51:2a:
ec:1e:c3:64:63:a7:14:06:9c:45:71:28:e7:3d:02:
b2:7c:c0:7a:8c:a8:5a:56:93:f8:e7:c6:cb:ee:cc:
47:68:cc:94:95:3e:92:c9:a2:82:8f:23:4c:a8:bd:
ce:62:2c:32:06:a2:77:60:55:ed:05:87:a2:07:6e:
b3:69:9a:98:34:22:f5:7c:51:93:b9:3a:6b:78:67:
b6:a0:6b:64:ff:b9:af:0c:24:89:22:70:5f:38:08:
0d:25:a7:a8:73:41:03:5b:db:02:79:96:37:5c:97:
67:fc:82:34:37:cf:3b:8c:21:15:df:f3:af:d7:4e:
9f:ec:17:14:90:6e:a7:06:a0:3d:cd:c4:80:49:a7:
ce:ac:31:d2:eb:14:a6:bd:8f:68:09:15:02:9a:5e:
ef:cb:45:78:a2:0b:80:ab:7e:ec:ce:e9:c0:ca:be:
66:59:85:6e:ef:38:17:3f:b4:29:ed:4d:28:b9:27:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:22:45:DC:FB:F2:63:92:F2:B1:6C:EF:89:81:FB:BC:1B:12:B8
X509v3 Authority Key Identifier:
keyid:CF:BA:97:0D:B1:87:D1:8E:19:A9:1E:64:F0:0B:0D:31:60:86:0D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/qdUiRdz78mOS8rFs74mB-7wbErg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:47:9b:e6:9a:ad:0f:7f:f9:26:53:7c:6f:b2:fe:69:51:d6:
71:df:24:58:ee:0a:36:69:e0:40:e0:f6:a0:c5:d3:41:80:7f:
a0:01:b3:4d:de:f2:0f:e5:5e:20:e1:4b:c8:26:c6:34:26:37:
4d:6f:35:d2:f4:d8:d2:f3:88:de:2b:83:0d:ef:fd:8c:99:26:
10:72:bd:c9:9d:11:31:f7:eb:0f:58:a6:f9:ad:ce:03:2b:e6:
95:a1:dd:bf:3a:f4:40:b5:75:bc:a6:d5:43:f5:3c:66:4c:d1:
a5:3a:eb:83:5b:11:53:a2:6c:64:dc:b2:ab:ea:ca:64:a4:15:
ec:cb:ba:24:ef:51:fd:b0:78:ee:0d:3f:99:ae:9f:32:0e:d0:
5f:e3:b6:39:77:2f:0d:53:e0:5d:c9:e2:aa:ab:66:11:b6:c7:
93:f3:74:c7:af:6a:02:1f:0a:22:ea:8f:1a:54:ac:86:7b:c9:
35:42:ef:29:e4:64:da:bd:b4:c6:7a:a4:9f:1d:3e:ef:02:63:
7e:17:ab:92:d3:46:10:af:61:1e:0c:e9:46:7c:c0:db:03:fa:
95:ec:3e:c9:b9:31:62:d4:b0:9f:ee:b3:dd:69:27:fb:f6:5e:
22:5b:eb:8c:1d:1f:9d:dc:4a:be:31:9d:89:b1:5c:65:fb:bb:
a8:c4:71:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:45 2024 by rpki-client on console-fra.rpki-client.org