Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/Qcup7d_E1sO3vRWUK0BoeQc6Bls.roa
File: Qcup7d_E1sO3vRWUK0BoeQc6Bls.roa (raw, json)
Hash identifier: ffJkD3NnEZS1nffaNY97MQnSn5nwd9GVQ57PLJ/ntcc=
Subject key identifier: 41:CB:A9:ED:DF:C4:D6:C3:B7:BD:15:94:2B:40:68:79:07:3A:06:5B
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 0182249E30E9F2DE8AA904677EC05CFA9AA5
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/Qcup7d_E1sO3vRWUK0BoeQc6Bls.roa
Signing time: Fri 22 Jul 2022 06:35:23 +0000
ROA not before: Fri 22 Jul 2022 06:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 171.22.29.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:9e:30:e9:f2:de:8a:a9:04:67:7e:c0:5c:fa:9a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Jul 22 06:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41cba9eddfc4d6c3b7bd15942b406879073a065b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:ae:64:5c:5d:a1:d2:e9:c7:07:8a:43:12:
5e:33:ca:40:2f:11:68:b3:17:00:1e:c0:fe:90:18:
9b:4f:d8:83:b7:59:55:3c:fb:ef:ff:29:de:5e:6a:
90:59:fc:01:a5:3b:60:f1:5e:6b:39:db:23:7b:1e:
e5:74:13:47:6b:d8:de:d4:66:b3:12:5e:fa:97:11:
7e:53:1b:39:e3:02:d3:aa:d7:8e:7f:7a:29:b6:13:
14:ff:65:0f:55:fd:1f:dc:82:30:cc:8a:85:b1:55:
c0:04:c0:4f:c6:d4:50:4d:cf:ed:02:a5:2c:04:18:
41:60:ac:64:3d:01:ec:86:4b:c3:a0:ef:7b:5c:3b:
ef:28:a0:0f:10:cd:08:07:36:bd:a3:46:11:f4:b7:
9f:56:bd:d7:8a:65:81:99:f8:41:29:a3:7a:9a:52:
a7:af:38:61:ef:9a:16:3f:62:63:d0:d3:d0:5c:30:
1b:ef:48:c0:a9:8d:dd:59:b7:a9:7f:b4:65:d3:4c:
8c:03:60:18:86:6e:fd:48:32:8d:19:fe:3d:01:da:
65:f8:3d:dd:67:86:fa:2e:81:e4:17:55:1d:2f:62:
02:8f:9c:67:3b:24:47:5d:47:fd:00:bf:e8:a7:dd:
6c:03:49:82:fa:6b:7d:95:dc:b0:d3:6b:3b:5a:4c:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CB:A9:ED:DF:C4:D6:C3:B7:BD:15:94:2B:40:68:79:07:3A:06:5B
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/Qcup7d_E1sO3vRWUK0BoeQc6Bls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/23
Signature Algorithm: sha256WithRSAEncryption
93:58:14:37:19:8b:63:09:e7:f4:2e:86:90:50:d6:a7:e2:be:
d4:e2:ea:b0:cf:b4:7b:25:a9:c6:83:05:a7:78:a0:a0:11:94:
fe:fe:b0:b4:13:d4:96:78:ac:1d:34:e7:67:6b:10:86:01:c2:
0b:50:1f:48:bf:99:5c:06:46:4e:fe:6a:8f:75:c3:9b:8b:eb:
68:70:9f:aa:23:6b:15:35:68:39:64:35:32:02:ab:94:90:74:
e1:dd:4e:57:1b:77:e1:d3:05:e8:5d:59:8c:6a:8f:e0:50:93:
ba:13:d1:3d:dd:fe:2c:fe:33:ad:f9:d8:40:f2:5b:9d:70:93:
5b:f6:15:e7:d9:54:65:2b:70:65:5c:49:76:2e:64:c1:eb:b0:
4a:92:48:2c:ab:ed:7a:7f:65:66:2a:7b:8b:cc:cd:95:df:f7:
96:a8:6b:fa:e2:67:fe:80:94:3f:78:27:19:57:67:66:06:ce:
a3:bf:55:3c:dd:8e:3f:79:79:c5:30:ef:fe:3a:17:f7:ea:8d:
4a:34:26:f1:fd:fe:60:c4:21:eb:89:68:44:43:12:0c:4b:22:
09:f7:2e:01:3f:74:46:a4:d2:6b:38:d6:db:4e:80:6d:e7:d0:
19:1e:62:28:fb:c8:c3:0e:79:ec:53:b9:43:93:c9:03:6a:58:
97:a5:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org