Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/q1Hv26pONVIfHhPm5Kee17FikwM.roa
File: q1Hv26pONVIfHhPm5Kee17FikwM.roa (raw, json)
Hash identifier: NhTUgBfyuxawjsI8zoFyU3yCrHZWl77T0sMijH3xk6M=
Subject key identifier: AB:51:EF:DB:AA:4E:35:52:1F:1E:13:E6:E4:A7:9E:D7:B1:62:93:03
Certificate issuer: /CN=3456ed8681cb61f499b40685d07d130ae8503aa6
Certificate serial: 01931BE3BDE891944CCE4D3D6BFD95B3771C
Authority key identifier: 34:56:ED:86:81:CB:61:F4:99:B4:06:85:D0:7D:13:0A:E8:50:3A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFbthoHLYfSZtAaF0H0TCuhQOqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/q1Hv26pONVIfHhPm5Kee17FikwM.roa
Signing time: Mon 11 Nov 2024 15:42:10 +0000
ROA not before: Mon 11 Nov 2024 15:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204627
IP address blocks: 185.61.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:e3:bd:e8:91:94:4c:ce:4d:3d:6b:fd:95:b3:77:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3456ed8681cb61f499b40685d07d130ae8503aa6
Validity
Not Before: Nov 11 15:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab51efdbaa4e35521f1e13e6e4a79ed7b1629303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:90:db:25:37:22:03:f1:45:76:39:71:e8:
64:60:78:ac:20:47:66:45:d3:01:66:3b:4d:4a:0b:
e2:92:44:3c:51:a0:13:8d:a7:7c:02:cd:35:f1:b0:
d9:17:e5:f5:16:dc:bb:f3:d9:16:84:ad:ed:98:c9:
00:03:29:1b:7e:9f:70:d0:16:2d:6f:e9:b0:39:24:
fd:de:45:7a:5d:4b:ac:6e:06:29:8c:66:d8:ba:90:
2c:c5:79:59:62:91:a0:de:4d:40:01:1b:8b:fc:26:
5b:79:21:20:19:62:73:3c:7f:bb:8a:55:ad:54:40:
2d:fb:14:85:0c:b1:42:0a:14:19:c7:99:e1:82:80:
c0:24:55:ea:cc:f7:19:29:d5:08:5c:e0:2b:7f:bd:
e8:c3:f7:b9:68:32:de:80:99:ea:f5:4e:27:98:d3:
7d:0a:5d:38:59:a7:1a:d9:db:2b:bf:12:61:31:4f:
ab:bf:a9:be:ed:0d:df:fb:d0:39:b2:a8:f3:bf:42:
38:6b:47:3b:c4:6c:32:d2:32:a3:a1:44:62:a0:1a:
d1:dd:57:bc:ad:0c:4c:32:b4:04:7e:96:e4:d2:ea:
61:f6:24:ec:6c:cf:cf:7c:36:ac:69:f9:85:39:1a:
84:7a:63:b4:61:ef:4f:e3:67:ed:e7:1b:ef:72:07:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:EF:DB:AA:4E:35:52:1F:1E:13:E6:E4:A7:9E:D7:B1:62:93:03
X509v3 Authority Key Identifier:
keyid:34:56:ED:86:81:CB:61:F4:99:B4:06:85:D0:7D:13:0A:E8:50:3A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFbthoHLYfSZtAaF0H0TCuhQOqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/q1Hv26pONVIfHhPm5Kee17FikwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6fae8a-5581-43fb-85ab-287ef4d3bcdb/1/NFbthoHLYfSZtAaF0H0TCuhQOqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.248.0/22
Signature Algorithm: sha256WithRSAEncryption
43:5d:f9:59:9b:c5:39:a7:76:ca:f8:d2:fb:bd:3b:ca:64:29:
ac:cd:3a:6a:7b:d9:30:33:21:ff:e5:70:ac:84:f8:f5:43:52:
40:9b:c6:22:ab:49:eb:d4:c3:ea:46:2d:b8:3b:74:f5:06:9a:
0c:20:2d:95:02:68:b0:ef:57:fb:e6:67:40:51:27:e3:f3:3f:
e3:45:38:ed:98:68:cb:c9:4d:cb:54:95:14:8f:56:1c:67:eb:
35:0b:e7:a7:14:0a:06:37:7f:ff:00:a0:45:6c:48:fc:d2:c9:
bc:7c:1b:0b:cd:b9:88:96:ee:fb:9e:1c:4f:61:1d:fc:0b:0a:
5e:07:ff:77:23:c3:bc:90:37:b1:be:03:4b:e3:fa:3f:65:4d:
5e:9f:c1:9f:81:fa:65:7d:92:07:98:41:05:63:70:a9:d5:a2:
7d:fb:0e:c0:41:20:ac:38:ad:e2:00:93:02:11:6f:d1:3b:7f:
25:e3:14:d8:72:c5:9e:d4:27:45:b4:bf:e6:7b:35:53:04:4f:
e5:c0:7f:92:f6:31:10:fc:b4:3e:6b:7c:b1:53:c2:08:48:27:
a7:b7:6f:bc:66:fc:45:ff:d2:46:94:06:38:c3:3c:b8:0a:45:
d2:6a:0a:f1:67:10:62:98:7d:e8:48:9c:69:f4:31:a3:da:49:
2e:4e:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:31:00 2024 by rpki-client on console-ams.rpki-client.org