Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/LQEQghm0no3lZJHh89DYELFpGPc.roa
File: LQEQghm0no3lZJHh89DYELFpGPc.roa (raw, json)
Hash identifier: o/xXmKudataGhMxYXhmqAdOqJ7zQLfhYrrtVprlb/t8=
Subject key identifier: 2D:01:10:82:19:B4:9E:8D:E5:64:91:E1:F3:D0:D8:10:B1:69:18:F7
Certificate issuer: /CN=3c653d592d91cbc738c69180186277e8783238af
Certificate serial: 01852FEE37829FE63F1C6A67FFA16A74CBA2
Authority key identifier: 3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/LQEQghm0no3lZJHh89DYELFpGPc.roa
Signing time: Tue 20 Dec 2022 14:26:58 +0000
ROA not before: Tue 20 Dec 2022 14:26:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6848
IP address blocks: 188.188.0.0/15 maxlen: 15
185.23.244.0/22 maxlen: 22
217.72.224.0/20 maxlen: 20
2a00:1cf8::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:ee:37:82:9f:e6:3f:1c:6a:67:ff:a1:6a:74:cb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c653d592d91cbc738c69180186277e8783238af
Validity
Not Before: Dec 20 14:26:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d01108219b49e8de56491e1f3d0d810b16918f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:97:fe:b7:a4:78:db:35:bf:4b:92:b3:4d:
b9:51:5c:51:ad:8d:15:bc:a7:fc:a6:9d:31:a6:f7:
f6:3f:84:eb:af:ed:19:b9:44:67:d8:24:19:ca:54:
65:a0:24:2c:a1:2a:33:6f:9e:d7:ef:30:ff:fc:3d:
bd:d7:a6:68:59:ed:da:87:79:79:26:52:c0:3f:68:
38:e1:de:f5:0a:8d:ea:40:5c:c1:b0:26:5e:75:18:
79:c4:bf:0d:c1:b0:47:c3:1c:49:eb:5c:ff:0a:ba:
70:9f:3b:fc:a3:b4:13:01:22:67:7b:0f:87:3c:a7:
80:dd:6d:ba:15:d4:b2:48:fa:26:a5:8f:9b:c2:5a:
0b:02:dd:55:f2:da:15:73:c8:2f:c8:7a:ad:98:bd:
7d:a1:61:c9:44:5e:1f:57:1f:d5:a5:c1:1c:48:92:
64:96:53:59:dd:26:52:da:9b:66:46:a7:ef:e3:53:
52:c7:72:70:5a:29:38:7c:b7:35:73:9c:be:53:5d:
d4:40:44:fa:35:58:91:db:d5:42:99:45:8a:47:22:
14:1c:76:1a:a8:ab:aa:49:86:a6:56:0c:a5:e3:88:
36:23:27:77:75:fc:70:72:5d:cc:be:98:ec:33:f8:
d7:7c:63:bf:52:7a:09:c9:3a:15:a1:19:9b:a3:3f:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:01:10:82:19:B4:9E:8D:E5:64:91:E1:F3:D0:D8:10:B1:69:18:F7
X509v3 Authority Key Identifier:
keyid:3C:65:3D:59:2D:91:CB:C7:38:C6:91:80:18:62:77:E8:78:32:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/LQEQghm0no3lZJHh89DYELFpGPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02883e-3707-4f6f-94dc-9c46f98da18c/1/PGU9WS2Ry8c4xpGAGGJ36HgyOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.244.0/22
188.188.0.0/15
217.72.224.0/20
IPv6:
2a00:1cf8::/29
Signature Algorithm: sha256WithRSAEncryption
87:23:c4:95:56:66:1b:96:96:e4:52:2b:17:6b:d9:c8:13:ea:
f1:3a:8d:29:a9:9a:22:03:b6:86:b7:37:a0:01:ad:8a:bb:7f:
be:04:0e:05:c9:dd:c6:e0:b2:24:91:53:9a:29:4d:66:3b:02:
88:e0:19:62:ad:fa:92:98:1e:16:80:b2:13:4c:0c:f5:3b:43:
48:5a:fb:46:1b:ab:f5:00:9b:26:fa:a2:8e:97:b6:79:8e:4c:
a9:cb:80:e8:71:62:f9:3d:a8:87:45:ea:0a:33:19:20:1c:a3:
38:d5:68:cc:f9:5e:49:03:de:b5:f5:67:27:f2:29:f0:c2:32:
90:62:9b:d9:a2:92:8f:99:41:44:ab:ca:9d:25:8c:94:84:d7:
02:fe:58:8f:d6:ea:75:ca:15:12:ea:4c:17:b4:0d:c2:6d:16:
e7:2a:6c:81:1a:3e:ef:94:2e:4f:8f:7f:d1:a2:18:ca:6c:9d:
8b:fa:ca:9c:ef:15:9d:a8:57:bc:66:85:ae:a3:d6:7a:be:34:
96:fe:59:3d:52:85:de:5e:d3:0a:9b:e0:50:90:dc:2e:a3:ec:
88:00:7c:53:bd:67:71:6d:4a:19:a0:2a:0f:53:e1:e1:c8:31:
22:79:46:f3:d5:88:18:f8:bf:fe:bf:99:3b:d9:dc:5d:c2:50:
d5:6d:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:03 2024 by rpki-client on console-fra.rpki-client.org