Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/qlMs5AVAMGvHriPQikzJm_bYeBw.roa
File: qlMs5AVAMGvHriPQikzJm_bYeBw.roa (raw, json)
Hash identifier: izpBWzAdSnZ7xJgzljmsVn6wsfR7l6LAzsNiTra4EoY=
Subject key identifier: AA:53:2C:E4:05:40:30:6B:C7:AE:23:D0:8A:4C:C9:9B:F6:D8:78:1C
Certificate issuer: /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial: 01856C2ECFA1AA3D18AF68ED646606F38E8E
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/qlMs5AVAMGvHriPQikzJm_bYeBw.roa
Signing time: Sun 01 Jan 2023 07:14:45 +0000
ROA not before: Sun 01 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 62.112.128.0/20 maxlen: 20
185.2.162.0/23 maxlen: 23
185.2.160.0/23 maxlen: 23
62.112.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:cf:a1:aa:3d:18:af:68:ed:64:66:06:f3:8e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Validity
Not Before: Jan 1 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa532ce40540306bc7ae23d08a4cc99bf6d8781c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:51:fc:f5:2a:2a:00:75:f0:ac:18:2a:07:
6b:db:c8:33:c1:b1:bf:8b:1e:e5:55:23:53:23:11:
26:8b:fb:5c:2c:10:2a:a4:12:69:0d:38:df:1c:43:
0f:f2:99:af:8e:02:f9:51:b0:34:ff:99:cc:ea:cb:
db:d1:1c:2f:ea:31:0c:b9:11:b9:1b:60:4d:5c:a7:
ee:d8:28:ef:a0:a2:e7:71:db:e9:8b:9d:f2:44:3a:
16:91:ec:71:a3:93:52:45:bc:b0:59:36:10:a4:a8:
2c:82:47:ed:e7:a5:89:5c:34:7b:14:dc:3a:b5:5d:
63:4a:a3:77:03:56:31:4f:0f:6d:44:b0:37:3e:b6:
eb:df:93:40:10:77:eb:17:3a:89:a6:98:ab:8b:05:
8e:06:d4:c5:92:d8:e9:cb:7b:11:be:3a:14:80:41:
8a:e6:6a:82:30:a5:27:59:7e:4e:c6:92:83:6c:62:
20:7a:fa:a5:2c:28:de:a4:90:ee:6d:01:e7:fd:4d:
e4:cd:30:fa:68:3d:2c:4d:a8:ee:da:85:a6:bc:89:
7b:bd:d1:e7:3e:ba:50:3c:3c:17:7a:d9:1d:c1:a4:
0d:3e:41:01:73:e4:e7:5d:82:5f:b8:dd:4c:3b:97:
f7:0c:e4:5e:e2:c3:54:9b:1c:b6:39:66:cb:04:d4:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:53:2C:E4:05:40:30:6B:C7:AE:23:D0:8A:4C:C9:9B:F6:D8:78:1C
X509v3 Authority Key Identifier:
keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/qlMs5AVAMGvHriPQikzJm_bYeBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/19
185.2.160.0/22
Signature Algorithm: sha256WithRSAEncryption
77:79:2b:6e:38:9b:95:5a:f2:2c:62:f2:f3:6b:87:2e:ad:00:
77:f8:11:1b:d1:bf:1f:55:aa:6e:16:94:63:8a:05:1c:df:c9:
d4:8a:af:b9:f6:df:95:a8:b0:13:35:06:e3:0a:9b:18:e2:24:
33:55:de:40:01:7c:72:e6:c3:8e:fc:d0:90:c2:7b:69:02:89:
65:a6:0d:1a:7e:5b:d4:8d:70:87:53:77:ca:ed:3b:f4:0e:eb:
c8:11:e1:da:1a:df:e2:10:dd:5a:d7:04:ea:80:99:76:44:14:
e7:b6:6d:c8:9a:67:47:ec:ec:bb:42:55:8e:2e:03:91:6d:93:
52:64:3b:f4:b1:d0:f4:1f:b8:59:7a:33:cd:5c:b7:e9:5f:fb:
d9:e3:9b:df:83:ec:97:5a:7c:1c:fe:cf:c0:d1:0b:e0:b0:6b:
ff:fe:be:77:0c:fb:92:68:dd:e6:b0:33:70:60:f4:b5:c7:3e:
34:84:aa:32:c4:0a:ee:fd:c9:12:14:a5:f0:ff:10:4f:96:58:
9e:8b:3a:d7:d9:d8:dd:f6:03:88:73:b4:b3:38:e4:9f:d5:10:
f5:f8:4f:d6:f4:d4:70:dc:82:6c:20:3b:6c:f1:5f:f0:8a:ff:
3d:ed:c5:a7:44:5e:aa:23:d0:ba:bd:fd:85:43:ab:aa:4b:89:
2e:72:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org