Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/QIlqi8a8-zVPXui15QsPRUD-Dq4.roa
File: QIlqi8a8-zVPXui15QsPRUD-Dq4.roa (raw, json)
Hash identifier: BNfNWbk2qkS5BfK1HD2+GrNwQzoDT1CC6yvvgIQv5rE=
Subject key identifier: 40:89:6A:8B:C6:BC:FB:35:4F:5E:E8:B5:E5:0B:0F:45:40:FE:0E:AE
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182580A8F909D63512B9E575708E90DBCF7
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/QIlqi8a8-zVPXui15QsPRUD-Dq4.roa
Signing time: Mon 01 Aug 2022 06:14:23 +0000
ROA not before: Mon 01 Aug 2022 06:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400039
IP address blocks: 193.164.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:0a:8f:90:9d:63:51:2b:9e:57:57:08:e9:0d:bc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 1 06:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40896a8bc6bcfb354f5ee8b5e50b0f4540fe0eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:67:bf:ac:95:50:4c:33:e9:3c:a7:ce:8b:
1c:ba:ff:84:48:d5:e0:3c:e4:86:5c:e3:80:e7:06:
59:60:63:15:76:ea:04:78:c5:22:11:56:f5:e7:4d:
55:67:f8:fd:86:13:fb:80:9a:54:f9:18:ed:76:23:
3a:57:8b:db:e7:a8:e7:8f:33:17:b3:c4:d2:30:d9:
b5:46:7e:12:1e:61:0a:9c:9f:d9:37:a6:a9:db:e5:
c7:dc:d8:79:50:ac:ac:d6:bf:99:f0:d4:6b:ec:7e:
76:7d:bd:a8:b3:d3:b2:e8:19:85:01:3d:a6:f6:8f:
cd:bb:a8:a7:82:20:0a:8e:66:f0:df:db:c1:2f:dd:
f7:17:28:58:12:39:c4:f9:8f:d7:8e:84:73:2a:e5:
a1:00:98:bc:54:af:e7:14:50:3d:fd:08:2c:60:2d:
9d:c8:78:24:87:79:e7:5d:f9:e2:92:34:de:b4:23:
5a:bf:4b:b3:25:61:63:09:83:ea:78:84:25:ca:84:
13:ef:5b:e5:b2:1e:76:92:8d:d6:10:72:07:45:ad:
d5:f1:66:5e:58:ba:b0:18:85:c8:72:ed:2d:67:27:
c2:fc:c4:98:45:d1:99:b9:70:4a:9d:a3:a5:ab:f9:
3e:42:00:ae:8b:c2:f1:33:1d:23:88:4c:57:83:58:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:6A:8B:C6:BC:FB:35:4F:5E:E8:B5:E5:0B:0F:45:40:FE:0E:AE
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/QIlqi8a8-zVPXui15QsPRUD-Dq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.10.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b5:51:6e:8b:3c:0a:21:b8:c6:d7:93:10:b5:c8:66:68:9d:
9f:ac:1d:68:13:88:49:67:a5:b4:a4:61:d6:57:69:0b:03:ab:
b8:87:6c:eb:07:43:8e:0b:e9:26:77:5d:cd:9e:96:b6:b8:70:
61:35:b8:f4:45:59:28:f0:8b:08:13:88:99:88:f6:c7:c2:d4:
32:60:e2:ee:8a:3a:1b:b6:2e:90:70:3c:60:3a:87:e2:70:ce:
3a:37:13:d7:d6:a8:0d:0d:3b:cb:e7:7c:44:f3:6c:8a:00:23:
9d:9d:75:d3:b6:94:59:3d:af:a2:d5:b0:5a:d3:ad:f7:d4:f9:
ef:14:c4:56:b6:8d:55:6d:ae:1f:49:6e:47:de:83:7c:5d:a0:
5d:49:53:e5:fb:d6:d6:5d:9f:d0:de:a4:dc:0d:2f:90:b2:19:
db:d8:d4:c5:8a:be:9e:f9:6d:27:be:c5:f9:c6:71:0a:f3:e0:
b8:c3:1d:51:ac:34:6a:b3:66:8c:d7:47:4b:f3:43:9f:42:be:
71:e5:e8:ce:98:fc:c9:af:49:68:3a:e9:be:9d:93:bb:47:b7:
15:8c:48:93:7f:ea:90:9d:d3:34:05:96:2d:84:53:8b:50:46:
e6:3b:fe:c0:bf:82:55:dd:97:7c:32:38:b1:6f:15:d9:d7:e0:
bd:ee:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org