Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/QR_Z9_UGI88kuTNuJKV2kc4bmB0.roa
File: QR_Z9_UGI88kuTNuJKV2kc4bmB0.roa (raw, json)
Hash identifier: MzQqdA1zPr12Mb/a4dXfyL4iDVbmDPOXTDqXl9Y7SP8=
Subject key identifier: 41:1F:D9:F7:F5:06:23:CF:24:B9:33:6E:24:A5:76:91:CE:1B:98:1D
Certificate issuer: /CN=6baf3b452946e4950993c3ca78e24fc455b37379
Certificate serial: 0181F10697F60B72F769DE3570EA4EFB1159
Authority key identifier: 6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/QR_Z9_UGI88kuTNuJKV2kc4bmB0.roa
Signing time: Tue 12 Jul 2022 06:09:09 +0000
ROA not before: Tue 12 Jul 2022 06:09:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 195.211.40.0/23 maxlen: 23
193.203.48.0/22 maxlen: 22
91.226.212.0/23 maxlen: 23
176.103.48.0/20 maxlen: 20
91.217.90.0/23 maxlen: 23
91.207.60.0/23 maxlen: 23
193.169.86.0/23 maxlen: 23
2001:678:334::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:06:97:f6:0b:72:f7:69:de:35:70:ea:4e:fb:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf3b452946e4950993c3ca78e24fc455b37379
Validity
Not Before: Jul 12 06:09:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=411fd9f7f50623cf24b9336e24a57691ce1b981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:1f:1c:d2:78:c6:05:59:82:c4:ef:33:ce:
81:3a:45:11:a9:92:ba:57:d3:87:70:d9:df:56:7b:
21:dc:d6:e9:fb:ca:10:c9:e8:cd:c1:bd:11:f4:62:
63:29:a8:e9:df:45:87:90:60:ca:e4:06:0a:a7:3e:
5a:4d:16:de:82:ee:da:c0:60:c9:8f:a6:66:b1:81:
f6:96:17:6d:0a:3f:0d:06:81:af:48:83:2a:8d:50:
0a:fb:4f:e3:45:b9:99:5d:9f:b6:51:52:4e:71:08:
4f:37:93:b9:1b:51:b8:ef:7b:dc:59:9a:88:eb:e8:
76:d8:dc:54:bd:63:50:15:3b:2e:d1:f5:0d:df:59:
0a:0b:c2:47:ce:6d:af:09:6e:3d:b7:2b:89:4b:40:
b8:f8:e3:f2:16:11:b9:01:55:71:84:42:96:ff:cb:
67:0c:ce:f4:5c:e1:d0:cb:cf:39:f0:d4:6b:1e:a1:
b0:aa:15:65:3e:16:65:e9:39:84:b3:15:8f:cb:9c:
c3:4d:47:0d:57:de:a0:eb:9b:fd:df:1e:29:f7:09:
83:ee:a6:81:49:88:b1:f9:fa:cc:54:dc:5b:9b:d5:
6c:bd:b1:0b:58:f1:8d:35:48:99:2c:3f:73:ef:7e:
95:a0:e9:58:6f:d2:8a:0e:9b:59:54:f4:c7:e3:a8:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:D9:F7:F5:06:23:CF:24:B9:33:6E:24:A5:76:91:CE:1B:98:1D
X509v3 Authority Key Identifier:
keyid:6B:AF:3B:45:29:46:E4:95:09:93:C3:CA:78:E2:4F:C4:55:B3:73:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a687RSlG5JUJk8PKeOJPxFWzc3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/QR_Z9_UGI88kuTNuJKV2kc4bmB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49d378-9c56-4025-ae8f-1341bce23edd/1/a687RSlG5JUJk8PKeOJPxFWzc3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.60.0/23
91.217.90.0/23
91.226.212.0/23
176.103.48.0/20
193.169.86.0/23
193.203.48.0/22
195.211.40.0/23
IPv6:
2001:678:334::/48
Signature Algorithm: sha256WithRSAEncryption
c0:97:3a:70:45:8a:2f:c8:ad:0a:e3:91:e9:d4:d2:9f:71:bd:
30:d3:a6:2c:5d:59:d7:12:cb:a8:59:f7:bc:ab:12:1a:f3:1f:
94:6d:ec:f6:a3:b2:fc:e4:4c:58:d5:a9:3b:36:fc:72:d4:7a:
19:43:fc:22:61:42:61:70:19:95:37:48:c8:29:45:ee:7c:70:
bf:80:fc:3f:66:c0:3f:7a:7a:bd:02:92:f1:3d:c0:a7:cc:7d:
26:c1:07:93:92:dd:c5:9c:86:71:f5:d8:a1:1c:1f:d0:51:06:
f7:37:8c:db:62:54:fd:3f:2d:c4:2d:f8:87:36:11:81:3a:a1:
e1:d3:6e:06:90:ef:c0:b5:d8:29:95:58:2d:32:54:07:da:42:
e1:8d:a4:a4:19:89:77:45:95:62:20:ae:c4:0e:4c:42:c9:83:
0f:f7:25:8e:2d:d7:7c:ca:ba:08:d6:4f:ac:b4:e9:b9:c7:40:
87:91:bf:ef:55:ce:82:ed:ab:22:90:e1:ab:49:1b:09:80:b8:
e1:47:17:3d:f2:f8:ed:ed:ae:f6:37:03:d3:0b:5c:0c:2a:ca:
92:ea:5b:3b:7e:6e:de:09:a1:2f:8a:54:f6:8c:60:8c:6b:03:
90:a2:de:03:79:cf:74:e7:ee:b4:d5:34:2e:17:61:c9:b7:92:
56:5b:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org