Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qCHerH0yLWTPI6OmoOHq159tZlI.roa
File: qCHerH0yLWTPI6OmoOHq159tZlI.roa (raw, json)
Hash identifier: G8HZlF2SDOoh5mwoIZAPPkUyGYeKkhmwxddLTm08KxY=
Subject key identifier: A8:21:DE:AC:7D:32:2D:64:CF:23:A3:A6:A0:E1:EA:D7:9F:6D:66:52
Certificate issuer: /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial: 018587F694752DAB6BC9162F40440FD09742
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qCHerH0yLWTPI6OmoOHq159tZlI.roa
Signing time: Fri 06 Jan 2023 16:42:42 +0000
ROA not before: Fri 06 Jan 2023 16:42:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:f6:94:75:2d:ab:6b:c9:16:2f:40:44:0f:d0:97:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Validity
Not Before: Jan 6 16:42:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a821deac7d322d64cf23a3a6a0e1ead79f6d6652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:1d:88:fc:a5:d6:29:ff:ba:8e:08:d3:64:
bf:be:08:79:87:e5:a6:e2:c1:82:11:45:32:26:59:
50:f0:b5:31:93:71:3b:7a:58:b9:81:19:92:78:72:
da:e9:e6:62:85:3c:96:50:69:c6:67:48:9c:4f:f1:
66:fd:f6:e6:f3:e4:81:ed:b8:d4:79:25:c9:06:11:
0a:0c:9b:14:bc:6b:78:39:20:7d:d3:53:3b:a2:be:
6c:87:4c:bf:45:8f:19:4f:90:51:52:08:96:d8:55:
0e:04:13:6a:c4:6b:91:af:fc:66:f3:5b:f3:3a:72:
4d:cf:5e:b3:6b:b9:3a:6b:82:ec:27:b5:26:f9:e5:
32:e1:44:04:5a:58:2f:37:49:09:90:16:6e:91:43:
27:47:d8:90:2f:6d:97:59:79:86:a5:8a:4c:ef:c3:
3e:24:e9:70:52:30:a9:89:df:46:2e:9b:3c:55:10:
7f:75:e1:d6:84:82:0f:b9:cc:a4:1c:61:2e:d5:ae:
17:25:8a:ba:20:63:1c:d5:7e:ab:df:75:ff:90:32:
12:ec:d9:9b:de:96:d7:d7:21:40:87:56:ce:e6:26:
32:0a:de:97:96:44:8c:19:0d:5f:a2:e2:50:cb:be:
77:d5:5f:01:f8:91:ac:ff:db:51:81:9a:16:70:cd:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:DE:AC:7D:32:2D:64:CF:23:A3:A6:A0:E1:EA:D7:9F:6D:66:52
X509v3 Authority Key Identifier:
keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qCHerH0yLWTPI6OmoOHq159tZlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
69:38:82:0d:25:04:f9:54:9c:04:94:91:fd:ec:8c:29:3b:c0:
2a:79:cb:be:b8:59:22:00:af:cc:56:c6:42:93:75:a2:ba:9d:
9c:4b:07:31:f3:46:cb:83:12:64:91:19:12:08:cb:6d:ae:20:
50:d1:07:8c:ee:04:ca:0e:5d:89:8b:a4:65:d0:5c:cc:85:80:
08:64:3b:42:15:32:cf:9e:05:16:65:3f:18:4d:56:fb:d5:b0:
77:e7:15:92:dc:1d:5c:74:dc:91:b0:6b:3f:d1:54:23:a3:53:
1c:05:a4:19:a5:ab:63:57:7d:41:b2:5a:a3:fb:e9:8f:26:34:
79:5a:d8:45:3a:00:7a:d3:10:32:2b:f1:52:d9:f8:42:e2:46:
4f:64:61:88:0d:8d:69:b1:c7:f1:f3:f6:30:a2:ae:26:b1:64:
a2:e4:36:4f:2e:8a:0a:b5:dd:91:8b:5f:f6:f1:f5:8c:73:3a:
51:90:4a:28:ce:88:f7:b1:4c:67:ce:20:87:a0:49:3a:07:d6:
d4:33:03:8f:20:ff:ed:d8:9e:a1:55:b7:25:23:a7:56:9e:77:
ae:42:4d:f6:35:b1:cf:aa:1c:32:4b:10:a2:55:9f:c7:12:56:
3e:8f:b2:40:fc:b4:ce:c2:5d:7e:c7:c4:9c:1a:92:43:53:e2:
9a:de:ee:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWH9pR1LatryRYvQEQP0JdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjhjZGQxNmYzYzNlOWEyMjgzNWExODYyMzEzNmZkNGYw
ZTBkZDcwHhcNMjMwMTA2MTY0MjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODIxZGVhYzdkMzIyZDY0Y2YyM2EzYTZhMGUxZWFkNzlmNmQ2NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bEdiPyl1in/uo4I02S/vgh5h+Wm
4sGCEUUyJllQ8LUxk3E7eli5gRmSeHLa6eZihTyWUGnGZ0icT/Fm/fbm8+SB7bjU
eSXJBhEKDJsUvGt4OSB901M7or5sh0y/RY8ZT5BRUgiW2FUOBBNqxGuRr/xm81vz
OnJNz16za7k6a4LsJ7Um+eUy4UQEWlgvN0kJkBZukUMnR9iQL22XWXmGpYpM78M+
JOlwUjCpid9GLps8VRB/deHWhIIPucykHGEu1a4XJYq6IGMc1X6r33X/kDIS7Nmb
3pbX1yFAh1bO5iYyCt6XlkSMGQ1fouJQy7531V8B+JGs/9tRgZoWcM2pOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgh3qx9Mi1kzyOjpqDh6tefbWZSMB8GA1UdIwQY
MBaAFEj4zdFvPD6aIoNaGGIxNv1PDg3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BqTjBXODhQcG9pZzFvWVlqRTJfVThPRGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zNTY2MDAtZmU1MS00NDRjLWI0ZDYt
Y2ZlMGVkNzBlNDM2LzEvcUNIZXJIMHlMV1RQSTZPbW9PSHExNTl0WmxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zNTY2MDAtZmU1MS00NDRjLWI0ZDYtY2ZlMGVkNzBlNDM2
LzEvU1BqTjBXODhQcG9pZzFvWVlqRTJfVThPRGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsFLMA0G
CSqGSIb3DQEBCwUAA4IBAQBpOIINJQT5VJwElJH97IwpO8Aqecu+uFkiAK/MVsZC
k3Wiup2cSwcx80bLgxJkkRkSCMttriBQ0QeM7gTKDl2Ji6Rl0FzMhYAIZDtCFTLP
ngUWZT8YTVb71bB35xWS3B1cdNyRsGs/0VQjo1McBaQZpatjV31Bslqj++mPJjR5
WthFOgB60xAyK/FS2fhC4kZPZGGIDY1pscfx8/Ywoq4msWSi5DZPLooKtd2Ri1/2
8fWMczpRkEoozoj3sUxnziCHoEk6B9bUMwOPIP/t2J6hVbclI6dWnneuQk32NbHP
qhwySxCiVZ/HElY+j7JA/LTOwl1+x8ScGpJDU+Ka3u45
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:15 2024 by rpki-client on console-ams.rpki-client.org