Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qrVqCaNIgPPyacj64IPKruHYV-c.roa
File: qrVqCaNIgPPyacj64IPKruHYV-c.roa (raw, json)
Hash identifier: xbef6Z/8r1XM0FX/MVWTMdG2XOD8SsX344f8n+Oat/8=
Subject key identifier: AA:B5:6A:09:A3:48:80:F3:F2:69:C8:FA:E0:83:CA:AE:E1:D8:57:E7
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183C6D51524EFF8CA421CC90C2B8C5665E7
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qrVqCaNIgPPyacj64IPKruHYV-c.roa
Signing time: Tue 11 Oct 2022 11:36:36 +0000
ROA not before: Tue 11 Oct 2022 11:36:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 91.198.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:d5:15:24:ef:f8:ca:42:1c:c9:0c:2b:8c:56:65:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 11 11:36:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aab56a09a34880f3f269c8fae083caaee1d857e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:d6:1e:02:ad:df:c3:1f:41:3c:0f:e5:16:
5c:fb:5a:92:5b:f4:84:1e:cf:5b:6b:78:6c:0e:1f:
e1:9c:68:f3:33:c9:b1:57:ed:99:f9:7c:b2:2d:ce:
a1:91:e8:6f:20:c5:95:d3:66:14:69:05:8b:70:8e:
88:d0:65:e6:62:48:28:f8:f5:cd:a2:88:f7:63:db:
1c:cb:be:d5:70:7b:06:ab:b7:f6:65:35:27:b6:e0:
fb:66:7e:f9:90:5a:5f:4c:81:7c:69:ef:0f:f7:ea:
c5:38:d6:ad:7b:29:27:67:46:ab:4f:a3:4e:35:9c:
e1:51:3a:c1:40:48:d3:d5:a9:e8:0f:0f:11:da:89:
ae:ae:2b:d1:73:40:57:35:10:af:b8:57:80:e2:67:
8f:b4:f0:67:77:80:da:a7:b5:45:be:e8:f5:d7:50:
19:45:fa:1a:d0:ed:21:74:6e:aa:82:b4:9a:49:98:
b7:7f:55:59:76:ed:96:56:be:62:08:76:75:3c:06:
4c:97:c0:32:ca:ab:c8:40:db:4e:58:86:8c:74:fd:
e6:6b:a9:27:00:46:9c:a2:ea:26:c6:91:e2:1d:56:
3c:0f:53:27:c4:7a:ae:88:86:b0:59:0c:57:19:a3:
5b:df:43:21:1f:8e:73:51:ea:6e:f9:cd:e3:60:51:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:6A:09:A3:48:80:F3:F2:69:C8:FA:E0:83:CA:AE:E1:D8:57:E7
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qrVqCaNIgPPyacj64IPKruHYV-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.123.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d5:11:85:4d:12:bd:84:84:20:74:dc:30:0f:a3:0e:a0:e5:
92:57:bd:fe:29:5d:e9:e2:52:90:dd:3f:fe:ba:4d:bf:6e:2e:
af:aa:06:2b:53:0f:e6:64:dc:57:75:26:34:d3:5c:07:6a:4e:
90:1b:64:25:e7:26:57:56:b3:9b:7b:c6:3b:a9:ad:05:b3:c4:
71:c4:5d:ea:4f:57:fd:b6:21:19:e8:cd:de:5d:cf:20:35:73:
1b:3c:19:1e:aa:cd:7f:f6:f3:6e:e2:d8:b4:63:bb:e1:6b:33:
78:8d:c6:c5:85:17:45:5f:32:0e:24:be:a5:66:36:db:5b:24:
d2:5a:3f:63:bd:25:0d:b2:1f:3f:8b:50:65:c6:ef:a6:73:58:
85:b5:15:1b:07:9e:7f:4a:ed:95:12:46:c5:88:6f:3b:ba:a5:
9d:1b:ff:e3:ba:bc:2b:47:45:a9:b9:d0:41:aa:41:0d:d1:83:
4c:80:66:d6:7f:87:28:c0:ab:b0:1e:95:0c:7f:ac:a3:89:e4:
c0:42:6c:df:7b:cd:cd:51:32:0a:9c:0e:e9:20:2b:10:a4:0d:
6a:f3:31:1e:33:10:23:2c:72:19:b9:ed:29:9e:32:de:ec:09:
f9:a8:f0:93:2c:06:90:7e:89:91:16:07:60:18:1a:d9:eb:ab:
20:84:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org