Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qp5wKO5MTC4mgRIolarwlKZ8X_Q.roa
File: qp5wKO5MTC4mgRIolarwlKZ8X_Q.roa (raw, json)
Hash identifier: 7FkaeXWJfMpKUxldmb8HxlIfl3Nk6VZ9BtAw56mKjIE=
Subject key identifier: AA:9E:70:28:EE:4C:4C:2E:26:81:12:28:95:AA:F0:94:A6:7C:5F:F4
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182FDB39C0EB02BC4D8BD7F2CD17D274288
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qp5wKO5MTC4mgRIolarwlKZ8X_Q.roa
Signing time: Fri 02 Sep 2022 10:16:22 +0000
ROA not before: Fri 02 Sep 2022 10:16:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 195.206.230.0/24 maxlen: 24
147.78.121.0/24 maxlen: 24
195.20.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:b3:9c:0e:b0:2b:c4:d8:bd:7f:2c:d1:7d:27:42:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 2 10:16:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa9e7028ee4c4c2e2681122895aaf094a67c5ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:c0:d8:ba:65:03:85:f9:80:f4:f4:dc:fd:
1a:72:54:91:2f:c1:41:20:ba:4d:11:f5:da:3f:51:
0e:f6:19:ee:91:ee:cc:74:1f:70:0c:fc:a5:1e:87:
57:ac:2c:55:de:44:59:98:66:d7:56:91:68:1c:5a:
fb:6f:46:67:5b:0f:49:d2:b5:48:e9:31:3a:76:25:
a1:24:42:70:e6:a3:34:aa:9e:f0:80:b3:54:66:24:
e3:7f:b2:25:b3:38:74:53:2f:57:4d:26:55:15:48:
f0:2b:f9:e4:11:92:35:b3:4f:e5:33:02:c0:3c:7f:
25:f9:c4:3f:69:35:4a:5a:64:84:92:60:ba:7b:dd:
db:70:85:7d:c0:85:c1:0f:80:76:29:eb:ae:10:3c:
b6:86:90:4b:dc:09:43:b8:9c:d7:97:ba:57:85:eb:
70:3e:67:9e:1c:eb:04:1b:5a:de:88:f3:03:9e:cb:
70:0d:a3:d9:01:ad:bb:ab:d8:ea:e3:a6:fe:82:f4:
dc:83:22:26:fc:4b:df:bc:29:8b:41:2a:ab:75:e8:
90:df:64:fd:e9:35:98:a1:fa:9a:59:bf:b4:dd:4d:
b0:88:dd:a5:ab:4d:95:6c:68:d7:9b:6a:83:04:c9:
2f:7c:6f:ed:60:a1:ab:0d:dc:b3:0f:c1:7f:97:78:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:70:28:EE:4C:4C:2E:26:81:12:28:95:AA:F0:94:A6:7C:5F:F4
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qp5wKO5MTC4mgRIolarwlKZ8X_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
195.20.104.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3f:69:cd:51:98:b4:f1:e5:57:36:85:69:4b:55:ff:76:4e:
84:18:d5:a8:9a:47:40:ae:14:8c:df:d8:3c:f8:30:4b:07:4e:
d8:d9:99:d1:26:2c:dd:57:e5:b3:0e:d8:46:5a:33:81:df:35:
95:47:c4:d3:bb:aa:40:34:e8:38:80:e7:3b:16:fc:70:cd:34:
74:f1:ce:6b:f3:34:35:af:1d:37:3c:77:99:4a:ff:4c:a8:58:
be:f2:ce:21:8f:57:5f:cb:f0:03:54:e1:29:33:89:99:9f:7a:
11:a6:eb:47:e3:35:41:2f:93:5d:eb:ef:b5:c4:07:22:62:c5:
e4:c6:b9:e4:4b:ed:89:55:1e:56:d5:62:02:66:e6:6f:68:e0:
4c:72:9d:41:f7:26:7b:40:7e:e2:c0:0b:69:05:49:f3:bd:1d:
1d:d3:0d:a1:42:2d:e9:ec:c8:1f:4d:65:32:d9:ea:68:d1:c3:
41:f2:f4:36:d7:b9:2e:8e:55:59:1b:c2:e0:35:2b:a1:78:68:
67:95:5d:76:b8:c2:76:63:c4:c8:23:d8:ca:58:1e:f2:02:e1:
60:03:89:d9:42:6a:4f:47:45:00:a2:05:41:67:cc:40:3d:da:
8d:2b:78:53:bb:68:5c:08:60:0e:98:a4:82:7a:8b:83:2a:06:
15:b2:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org