Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Qp2_DXkf87tMOKtCqqWkv4LSKHM.roa
File: Qp2_DXkf87tMOKtCqqWkv4LSKHM.roa (raw, json)
Hash identifier: UiWdgdNmzQEmeJq4R6VS9me1H7roji0PU/Uq/G8ZNTQ=
Subject key identifier: 42:9D:BF:0D:79:1F:F3:BB:4C:38:AB:42:AA:A5:A4:BF:82:D2:28:73
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183B0E4936C2924AA78F71F89AD1E3E0F51
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Qp2_DXkf87tMOKtCqqWkv4LSKHM.roa
Signing time: Fri 07 Oct 2022 05:21:53 +0000
ROA not before: Fri 07 Oct 2022 05:21:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 194.105.21.0/24 maxlen: 24
152.89.251.0/24 maxlen: 24
176.105.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b0:e4:93:6c:29:24:aa:78:f7:1f:89:ad:1e:3e:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 7 05:21:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=429dbf0d791ff3bb4c38ab42aaa5a4bf82d22873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:d3:93:af:fa:a2:c8:c8:a8:8c:e8:dc:de:
8a:5d:14:5c:a7:f4:5c:7e:0d:67:13:32:d9:4d:51:
73:f2:d9:18:c7:e6:5b:9b:45:7d:9b:e7:f1:83:c1:
e8:2b:f4:41:fe:3d:b7:c3:3d:f1:ad:fc:8d:e9:d3:
ff:1f:eb:9b:89:d8:ff:b1:a3:d3:80:53:3b:08:c8:
f5:69:29:91:7a:5d:40:83:80:9a:8a:ca:e9:ae:44:
fb:3f:4f:d7:a4:2b:b7:04:a6:d5:42:f1:89:d5:76:
24:d4:4c:8b:7f:81:71:86:19:4a:6e:f3:b7:18:c2:
1e:d9:2a:71:41:6b:c9:6c:27:a4:5f:ee:d1:0f:38:
0e:e7:38:43:40:30:74:92:32:3a:bb:e0:0a:39:b7:
4d:83:f3:da:15:c5:fe:34:12:37:6f:3e:48:b6:71:
c3:04:72:42:03:5e:ae:e6:29:69:25:c9:0e:7b:8c:
60:fb:e9:cb:83:13:c5:3e:75:a0:0e:e6:a7:0a:65:
1d:3b:10:d8:ac:6e:f4:1a:ef:6a:76:36:ea:44:31:
de:1b:be:99:66:f7:a9:e1:f1:53:10:5e:3a:16:41:
94:e9:b7:ab:5f:20:91:8d:b8:56:0f:11:32:18:58:
1d:11:c6:ff:d3:77:bd:c7:ee:b1:bb:5e:02:54:00:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9D:BF:0D:79:1F:F3:BB:4C:38:AB:42:AA:A5:A4:BF:82:D2:28:73
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Qp2_DXkf87tMOKtCqqWkv4LSKHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.251.0/24
176.105.225.0/24
194.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
67:74:81:44:eb:98:e0:23:b7:8f:11:46:ed:94:f1:be:2a:e3:
96:14:c2:02:1d:08:03:1f:c7:54:3d:cf:23:f4:9b:02:21:5c:
7f:a4:1a:df:51:09:19:b8:e6:7e:cd:0c:e2:49:6b:7e:4d:87:
8f:23:05:0c:a4:49:30:3e:12:6a:30:2b:b6:78:f4:66:f7:3c:
f5:56:ee:9e:cb:a8:f5:d8:aa:4d:dd:8b:e8:f4:04:e4:0c:cb:
08:48:f2:16:d0:8d:f0:75:f1:bc:ab:c9:dd:2b:97:70:4e:5e:
60:48:4c:d2:bf:4b:f9:67:57:88:04:8d:42:62:5a:14:68:c1:
d5:d6:6a:6b:0c:37:39:e7:d6:ce:d3:18:e2:63:07:f6:5a:56:
29:ab:86:06:01:af:d6:01:de:96:bb:08:df:83:06:ba:81:05:
13:df:18:f5:d7:3a:40:4b:27:43:32:e2:2f:c3:d6:fc:be:58:
c4:47:2e:a6:2c:e4:d7:b3:c9:29:11:f8:06:2d:8e:82:66:2c:
52:a4:cb:9b:3e:85:c0:cd:f5:56:17:d3:c8:d3:1b:71:4b:e7:
cd:f6:0d:7f:56:9e:ae:52:08:57:7d:6a:db:27:e4:df:95:56:
70:2d:25:5a:3b:2f:85:21:83:7d:db:d6:fe:46:f1:70:3d:49:
99:1a:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org