Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qQhPnkNZ78ya-7m6tRWcC1sX19c.roa
File: qQhPnkNZ78ya-7m6tRWcC1sX19c.roa (raw, json)
Hash identifier: mBag87C+g7uZ52SImD9oPW70i0Np5UqE4WGdiqEg7Lk=
Subject key identifier: A9:08:4F:9E:43:59:EF:CC:9A:FB:B9:BA:B5:15:9C:0B:5B:17:D7:D7
Certificate issuer: /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial: 0177A0A5
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qQhPnkNZ78ya-7m6tRWcC1sX19c.roa
Signing time: Thu 03 Feb 2022 19:36:49 +0000
ROA not before: Thu 03 Feb 2022 19:36:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24617125 (0x177a0a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Validity
Not Before: Feb 3 19:36:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9084f9e4359efcc9afbb9bab5159c0b5b17d7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:13:1c:dc:ad:88:b8:69:2b:90:11:60:56:
37:7d:e5:cb:7e:20:59:09:03:b7:ff:34:85:74:d2:
b7:95:95:80:5f:df:12:e3:6a:52:ce:aa:33:6e:87:
08:bb:f0:b8:98:26:cf:3f:58:d0:45:a1:a7:66:aa:
58:7f:10:db:6b:78:59:75:30:09:09:ca:4c:0d:2f:
61:f9:1f:b8:60:21:d5:4b:0f:c1:c0:9d:ba:56:ce:
d5:36:d2:33:4a:95:04:d1:fa:db:6d:4c:ea:03:7d:
c1:ee:fd:9b:1e:9f:55:7f:51:43:a1:19:77:d6:38:
49:e9:e3:df:98:65:7d:57:9a:de:fe:6b:22:0c:d8:
10:bd:af:3e:3c:ed:38:5a:e2:91:63:00:4c:58:09:
5e:73:3b:30:f8:12:3e:02:f8:c2:f6:3d:d3:71:c4:
ae:e3:e8:35:56:18:dd:b6:09:3f:50:06:b1:c6:cc:
99:bc:01:73:d8:5a:56:d7:5f:15:10:87:f4:c2:72:
fd:21:27:1b:ee:6c:e4:5f:bb:30:48:4a:21:d7:d0:
2c:dd:1c:07:60:0a:2b:07:76:fb:ea:e7:4d:77:f1:
14:15:ec:56:53:47:e1:a9:9d:86:38:1b:e8:c4:91:
47:73:f2:50:4f:22:a1:f4:78:c0:ba:fc:e3:a0:34:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:08:4F:9E:43:59:EF:CC:9A:FB:B9:BA:B5:15:9C:0B:5B:17:D7:D7
X509v3 Authority Key Identifier:
keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qQhPnkNZ78ya-7m6tRWcC1sX19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
71:90:9e:54:e3:9d:f0:9f:11:19:6f:d3:bc:9f:b6:ed:8c:c6:
df:30:82:f8:27:2e:09:a1:bb:d8:cb:31:81:dc:20:de:85:4a:
ff:c4:62:2f:52:02:db:aa:6a:d5:ea:25:9a:72:9e:60:fa:80:
25:58:a8:be:81:be:42:30:b6:af:4a:21:2f:77:1c:a8:12:99:
f8:9e:d4:ad:ee:1d:d5:a8:b4:e4:e0:ee:76:ce:4c:2e:ba:cf:
b3:e5:50:92:ef:33:6d:96:8c:f9:a7:78:c7:c2:aa:36:5a:ae:
e0:55:5f:41:f9:82:a1:51:79:a6:ca:83:04:41:90:9d:d4:24:
94:c4:01:97:82:f3:8e:59:ff:32:84:02:01:73:23:2f:d0:92:
96:89:6e:fe:54:9f:7d:bc:bb:56:ff:52:8e:5d:0f:f8:f4:8f:
9d:31:7b:1d:95:b0:f4:41:4c:ec:c0:58:07:7f:c0:00:80:ce:
6f:52:8f:1c:43:bb:34:b5:a1:00:21:ac:de:c8:52:9b:f6:35:
ca:c9:d8:a9:73:65:9d:f7:de:6b:b7:28:10:4c:55:66:63:36:
fd:d0:59:61:50:55:2e:7f:50:b9:8a:35:f0:02:5e:69:36:07:
85:87:4a:e5:5e:1d:75:31:e7:c9:9b:a2:f9:d2:ca:37:38:30:
2e:77:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:15 2024 by rpki-client on console-ams.rpki-client.org