Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/QaTq57kcGP7mBDSxhx4fNf3jjsA.roa
File: QaTq57kcGP7mBDSxhx4fNf3jjsA.roa (raw, json)
Hash identifier: qRMnrT5bZmssmm0iyHzoVLw00y3qvyuOoeyHx/eAY44=
Subject key identifier: 41:A4:EA:E7:B9:1C:18:FE:E6:04:34:B1:87:1E:1F:35:FD:E3:8E:C0
Certificate issuer: /CN=85ae01d9b8b61a88ff7b7a90c2ce355d49413136
Certificate serial: 0183F64532B13963B422FFAFA73EE50CDB2C
Authority key identifier: 85:AE:01:D9:B8:B6:1A:88:FF:7B:7A:90:C2:CE:35:5D:49:41:31:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha4B2bi2Goj_e3qQws41XUlBMTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/QaTq57kcGP7mBDSxhx4fNf3jjsA.roa
Signing time: Thu 20 Oct 2022 16:41:13 +0000
ROA not before: Thu 20 Oct 2022 16:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 85.8.162.0/23 maxlen: 23
85.8.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:45:32:b1:39:63:b4:22:ff:af:a7:3e:e5:0c:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ae01d9b8b61a88ff7b7a90c2ce355d49413136
Validity
Not Before: Oct 20 16:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41a4eae7b91c18fee60434b1871e1f35fde38ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:45:27:0f:64:0d:20:93:67:3b:95:e9:3f:
56:e7:91:42:88:b8:67:b6:9d:6e:ac:60:45:f0:08:
29:c6:6d:9b:ff:ec:33:17:6c:e8:0e:27:ef:59:bc:
09:12:78:58:08:1b:7e:34:ae:e3:35:0d:d4:10:12:
ce:8a:6b:dd:a9:2e:4c:c0:a4:3d:03:78:a6:9c:f2:
02:1e:1f:21:dc:8c:d5:11:fb:ba:35:33:a0:7b:38:
31:71:97:09:a9:dc:51:02:1c:fe:df:81:24:bd:09:
0f:5c:1a:a0:30:ce:bc:01:84:0a:cf:5b:d5:79:ec:
76:25:f0:ce:31:60:8d:56:3b:7d:08:21:23:fe:d4:
5a:06:37:fd:57:9d:36:87:53:c3:24:bd:66:55:18:
05:27:e5:26:5e:a7:3e:f8:1e:c9:83:ed:33:80:c0:
3f:1f:5c:aa:da:45:4e:f8:03:31:c5:44:dd:4b:27:
54:ae:11:4d:36:3a:a7:8e:6a:84:ce:63:a4:59:20:
87:9f:0e:b4:95:ad:da:cd:68:09:68:19:2e:02:f3:
da:95:8d:ad:7b:c5:0e:1b:1f:ef:22:74:cb:17:53:
2b:0e:2b:bd:75:9a:e8:3b:40:37:0e:e8:70:60:2c:
0b:17:e1:c2:56:13:43:77:7d:31:b3:5c:08:76:dd:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:EA:E7:B9:1C:18:FE:E6:04:34:B1:87:1E:1F:35:FD:E3:8E:C0
X509v3 Authority Key Identifier:
keyid:85:AE:01:D9:B8:B6:1A:88:FF:7B:7A:90:C2:CE:35:5D:49:41:31:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha4B2bi2Goj_e3qQws41XUlBMTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/QaTq57kcGP7mBDSxhx4fNf3jjsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ca806-c4ab-4677-8c7e-af59c0515c7a/1/ha4B2bi2Goj_e3qQws41XUlBMTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.160.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b1:88:91:36:5c:d5:26:36:fb:da:dd:b0:07:6b:45:35:26:
8d:93:9d:ce:59:be:5f:38:1c:2b:98:2d:f5:24:e1:7b:85:6d:
89:dd:bd:12:a0:3f:92:30:d1:cb:35:53:bf:27:70:24:61:b3:
75:32:63:57:bf:22:12:1e:e6:30:2a:12:0c:39:3f:65:a6:41:
1b:4d:d2:75:1f:e1:8f:ca:f3:fb:19:4a:a5:af:f8:a3:c2:8c:
6d:f2:4c:f0:24:9e:0c:96:da:9c:66:9a:b0:83:c7:04:10:e2:
a8:df:4f:f5:59:76:0d:31:5b:0c:8f:35:c9:61:18:bc:c2:5d:
16:a1:c9:95:b6:8a:45:83:fe:da:7d:7c:f3:96:8d:af:2c:c6:
33:39:de:c1:d8:8d:bb:55:42:9e:23:5a:88:cc:08:7d:69:ed:
bc:fb:b6:30:4f:de:29:f3:74:f3:62:77:be:9f:bc:97:2d:eb:
59:37:04:53:32:34:90:f0:e0:62:08:f8:0c:da:57:55:e9:46:
f1:02:bc:46:8e:28:c1:90:76:4c:34:3c:9f:24:a0:9b:c9:c8:
3d:d8:f3:ef:05:b6:36:82:ae:75:c2:f7:51:7b:38:c8:fd:1d:
74:38:99:52:75:42:cc:dd:12:ee:dc:8e:99:74:aa:c8:26:cb:
f6:32:35:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP2RTKxOWO0Iv+vpz7lDNssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWUwMWQ5YjhiNjFhODhmZjdiN2E5MGMyY2UzNTVkNDk0
MTMxMzYwHhcNMjIxMDIwMTY0MTEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWE0ZWFlN2I5MWMxOGZlZTYwNDM0YjE4NzFlMWYzNWZkZTM4ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+ZFJw9kDSCTZzuV6T9W55FCiLhn
tp1urGBF8Agpxm2b/+wzF2zoDifvWbwJEnhYCBt+NK7jNQ3UEBLOimvdqS5MwKQ9
A3imnPICHh8h3IzVEfu6NTOgezgxcZcJqdxRAhz+34EkvQkPXBqgMM68AYQKz1vV
eex2JfDOMWCNVjt9CCEj/tRaBjf9V502h1PDJL1mVRgFJ+UmXqc++B7Jg+0zgMA/
H1yq2kVO+AMxxUTdSydUrhFNNjqnjmqEzmOkWSCHnw60la3azWgJaBkuAvPalY2t
e8UOGx/vInTLF1MrDiu9dZroO0A3DuhwYCwLF+HCVhNDd30xs1wIdt0AZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGk6ue5HBj+5gQ0sYceHzX9447AMB8GA1UdIwQY
MBaAFIWuAdm4thqI/3t6kMLONV1JQTE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE0QjJiaTJHb2pfZTNxUXdzNDFYVWxCTVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xY2E4MDYtYzRhYi00Njc3LThjN2Ut
YWY1OWMwNTE1YzdhLzEvUWFUcTU3a2NHUDdtQkRTeGh4NGZOZjNqanNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xY2E4MDYtYzRhYi00Njc3LThjN2UtYWY1OWMwNTE1Yzdh
LzEvaGE0QjJiaTJHb2pfZTNxUXdzNDFYVWxCTVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVQigMA0G
CSqGSIb3DQEBCwUAA4IBAQCQsYiRNlzVJjb72t2wB2tFNSaNk53OWb5fOBwrmC31
JOF7hW2J3b0SoD+SMNHLNVO/J3AkYbN1MmNXvyISHuYwKhIMOT9lpkEbTdJ1H+GP
yvP7GUqlr/ijwoxt8kzwJJ4MltqcZpqwg8cEEOKo30/1WXYNMVsMjzXJYRi8wl0W
ocmVtopFg/7afXzzlo2vLMYzOd7B2I27VUKeI1qIzAh9ae28+7YwT94p83TzYne+
n7yXLetZNwRTMjSQ8OBiCPgM2ldV6UbxArxGjijBkHZMNDyfJKCbycg92PPvBbY2
gq51wvdRezjI/R10OJlSdULM3RLu3I6ZdKrIJsv2MjXd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:28 2023 by rpki-client on console-ams.rpki-client.org