Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/qQRSYmdg0dVylJY--ov8jPJdFRs.roa
File: qQRSYmdg0dVylJY--ov8jPJdFRs.roa (raw, json)
Hash identifier: ReBqVyasibTnZoqO69Iv15hwfoYtMAvE1n4g99tyUAI=
Subject key identifier: A9:04:52:62:67:60:D1:D5:72:94:96:3E:FA:8B:FC:8C:F2:5D:15:1B
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 0359C269
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/qQRSYmdg0dVylJY--ov8jPJdFRs.roa
Signing time: Thu 03 Feb 2022 15:44:01 +0000
ROA not before: Thu 03 Feb 2022 15:44:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 171.22.30.0/24 maxlen: 24
171.22.29.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56214121 (0x359c269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Feb 3 15:44:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a90452626760d1d57294963efa8bfc8cf25d151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:30:3d:e2:3c:5f:b6:b1:b5:17:47:3f:12:
b2:73:5d:f5:fc:45:9b:26:3b:40:35:36:6c:76:5b:
4e:4a:d0:18:57:19:d3:00:2e:b1:ee:91:1e:fb:1e:
2f:c2:49:ab:16:56:7f:1c:d5:54:60:8d:1c:65:c8:
a1:c4:93:16:4a:77:ab:16:4e:8b:bd:52:dd:df:41:
1b:37:5f:ef:41:2b:f2:6b:b3:86:0a:a7:b7:b7:ba:
a8:2b:03:bb:a4:09:39:1d:91:0e:01:76:a7:40:c5:
d0:d5:1f:9d:3e:de:0e:60:5e:26:29:fe:ce:26:e2:
38:77:88:a4:d9:2e:31:0d:c5:88:b6:2a:2e:83:91:
18:41:07:a9:9e:92:20:21:7c:ff:46:f5:6b:92:d2:
e0:4a:a5:8d:5c:1e:fd:31:5f:c6:f9:5d:75:b6:a6:
95:3a:53:1e:ee:19:57:61:b7:60:e2:de:0e:40:27:
80:ae:dd:be:7f:40:60:ef:72:7f:2c:b8:ec:a7:e5:
28:53:6e:78:7e:82:e4:be:39:0c:16:d8:2a:14:6c:
8e:40:c5:4a:45:85:3b:91:9c:5f:97:54:1e:90:b6:
40:15:10:6b:d7:af:d6:76:d6:86:4e:98:6c:17:fb:
ca:83:06:bf:ac:e7:90:3d:cf:f4:c8:8a:cd:d6:90:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:52:62:67:60:D1:D5:72:94:96:3E:FA:8B:FC:8C:F2:5D:15:1B
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/qQRSYmdg0dVylJY--ov8jPJdFRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ee:96:ed:60:6d:f7:75:e9:a1:5b:07:ec:af:75:4b:b7:6d:
94:c5:1f:1b:e4:8f:0c:4c:3d:9d:b4:f7:95:8f:bf:87:34:d8:
f6:96:23:f4:ed:fc:01:ca:09:70:85:00:b7:1f:49:19:c3:8a:
a7:c2:00:f1:b5:67:f8:25:e3:72:3f:f3:8d:88:d1:de:6e:bc:
95:0a:a4:52:b6:a1:00:04:60:0c:9f:70:00:84:31:c4:ef:95:
b5:61:af:02:7a:e3:18:02:b8:5e:91:f4:99:b2:bb:e1:90:5f:
8b:08:59:e4:72:4a:25:77:81:53:4c:1b:bf:da:d2:aa:b3:d1:
cb:c3:74:55:a8:8e:35:cc:6a:9a:ef:15:9f:ae:f9:df:0f:32:
a5:bc:d2:6b:0d:eb:a8:5b:2a:28:ad:df:79:c4:90:5a:38:50:
95:59:1d:17:30:0f:73:a4:1e:5c:52:9f:57:71:b9:39:0e:60:
aa:d7:1a:1e:09:4b:1f:b2:b9:2b:43:2d:58:da:f0:7d:a9:d4:
dc:01:5a:b9:4a:c2:0a:6b:55:39:65:e6:1f:15:33:da:2e:ec:
f6:42:f6:96:55:6b:d5:7e:9a:10:ed:2b:98:b3:b0:58:9d:55:
1c:97:c5:fa:ec:7f:45:1e:eb:4c:a0:15:80:26:69:34:76:9d:
78:53:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:17 2024 by rpki-client on console-fra.rpki-client.org