Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/QhDPL1HgJvIgvobLqHq5YMBBpio.roa
File: QhDPL1HgJvIgvobLqHq5YMBBpio.roa (raw, json)
Hash identifier: KnKdBHS+Sbdhq5ilVhrA/OQDOH48/lg/CRGk12JASjk=
Subject key identifier: 42:10:CF:2F:51:E0:26:F2:20:BE:86:CB:A8:7A:B9:60:C0:41:A6:2A
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0301158F
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/QhDPL1HgJvIgvobLqHq5YMBBpio.roa
Signing time: Sat 01 Jan 2022 01:50:22 +0000
ROA not before: Sat 01 Jan 2022 01:50:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 82.118.26.0/23 maxlen: 24
212.2.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50402703 (0x301158f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4210cf2f51e026f220be86cba87ab960c041a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:43:f4:c8:24:30:f1:0a:11:1c:b3:f5:9e:
25:5d:47:5a:17:8f:d1:52:9e:46:62:89:13:dc:38:
76:e6:ec:e0:27:2e:b6:65:cd:1b:59:e1:b7:6b:24:
e3:ab:14:b5:05:bb:99:b4:4f:e2:a8:18:22:e7:5d:
eb:c0:73:68:07:8f:45:70:d7:31:be:12:c6:e4:7e:
bf:5f:cb:c9:16:7e:8d:e1:a9:d0:af:77:d7:4f:06:
f9:82:f0:2c:35:02:7c:a8:1f:fd:71:28:1d:cc:d0:
26:15:12:f3:ca:72:31:96:dc:a2:07:14:88:5d:3c:
fd:78:db:2d:dc:0a:18:f0:69:a4:a3:62:2d:f3:4b:
c8:1b:75:8d:3b:9c:ae:3d:74:06:84:29:83:7a:4a:
e0:ed:6a:8b:c6:c3:d9:17:76:22:3d:b9:79:32:07:
f1:24:a5:b5:b9:c9:94:67:42:88:51:38:90:2e:5f:
34:37:3f:42:94:7b:ac:c2:49:73:b2:3a:56:b8:30:
22:f5:02:1e:f0:5c:0a:fb:e6:af:91:0b:0a:bd:50:
fc:3b:bf:1f:0f:cf:c7:46:61:35:3d:27:af:56:6f:
40:6e:af:81:40:43:12:fc:f7:ee:61:06:d4:d5:ed:
90:0a:a8:7d:65:d0:18:13:12:3d:51:95:9b:e9:35:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:CF:2F:51:E0:26:F2:20:BE:86:CB:A8:7A:B9:60:C0:41:A6:2A
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/QhDPL1HgJvIgvobLqHq5YMBBpio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/23
212.2.236.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:59:ca:06:24:cc:53:cb:9d:2b:3c:4d:74:06:ad:27:a3:ca:
42:22:87:a2:c6:4f:e6:2c:a4:6f:e9:24:70:4b:6f:e2:eb:8e:
98:7f:11:f6:1b:07:d4:9f:8c:ee:07:cb:2c:76:59:48:74:58:
18:1a:a9:f4:cb:96:dd:c1:82:1b:69:02:18:1e:97:e7:8a:df:
1d:36:ec:5b:c8:c1:09:da:ad:88:89:73:0b:aa:04:50:a4:56:
33:50:33:2d:f8:cc:eb:cc:47:a1:bf:c3:b8:9e:05:05:f0:3a:
8b:47:23:b5:0a:18:57:92:a2:c7:80:d4:69:2b:1f:37:74:2c:
40:8f:f8:87:18:9a:b0:ee:61:51:08:5d:67:83:82:5a:52:ca:
42:68:b6:d5:05:33:4c:ab:d6:d8:62:7a:38:32:ab:5f:d4:15:
38:30:46:07:7f:06:62:5f:5a:01:50:12:c6:d7:ac:fc:b3:9f:
24:0e:49:da:c0:bd:5f:71:9a:64:48:b7:84:70:32:a6:18:39:
1d:16:fa:8b:47:9c:3e:40:e4:ab:f0:73:86:5f:b2:9e:c8:1f:
15:0e:be:15:92:1c:bf:03:63:40:20:bd:0f:ff:43:bf:12:fd:
de:7a:16:3d:74:0f:ff:0c:f8:55:ba:8c:0a:ef:f2:bb:23:87:
7d:ec:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org