Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/Qx54_t-6UTv5nus8m7rM85u7d8Y.roa
File: Qx54_t-6UTv5nus8m7rM85u7d8Y.roa (raw, json)
Hash identifier: PSCZoFxLi17uJbdeXupIncqBS4VvKQbjKA+q7w/9850=
Subject key identifier: 43:1E:78:FE:DF:BA:51:3B:F9:9E:EB:3C:9B:BA:CC:F3:9B:BB:77:C6
Certificate issuer: /CN=c3bf1659a7483e246031b475746191b5df0c42b6
Certificate serial: 01856D941DEF1F0A1B24D7B569644B3F271D
Authority key identifier: C3:BF:16:59:A7:48:3E:24:60:31:B4:75:74:61:91:B5:DF:0C:42:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w78WWadIPiRgMbR1dGGRtd8MQrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/Qx54_t-6UTv5nus8m7rM85u7d8Y.roa
Signing time: Sun 01 Jan 2023 13:45:01 +0000
ROA not before: Sun 01 Jan 2023 13:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201352
IP address blocks: 185.71.246.0/24 maxlen: 24
185.71.245.0/24 maxlen: 24
185.71.244.0/24 maxlen: 24
185.71.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:1d:ef:1f:0a:1b:24:d7:b5:69:64:4b:3f:27:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bf1659a7483e246031b475746191b5df0c42b6
Validity
Not Before: Jan 1 13:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=431e78fedfba513bf99eeb3c9bbaccf39bbb77c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:4f:d6:ef:49:28:0d:06:59:b6:cd:ba:9f:
c6:d8:df:84:c1:76:49:24:35:e5:4a:fa:58:e9:06:
08:69:58:b7:2b:12:86:ba:5c:81:7e:72:54:c7:cd:
83:3e:ca:67:64:5f:5e:4d:56:c1:b9:b7:89:ae:b6:
53:93:75:4e:d8:76:d8:8a:98:bc:8c:8e:62:05:9e:
ad:26:6c:81:78:0d:68:b9:8e:11:d5:cf:df:b7:54:
f2:6e:ba:db:82:5c:61:16:ba:1a:86:70:91:34:d3:
d6:d5:8a:10:39:5a:51:fd:5b:45:bd:c7:b5:50:b3:
04:ec:87:71:b2:9e:33:74:79:98:88:e1:f5:33:8b:
bc:4b:43:8b:9d:28:2d:88:d0:0b:1d:e1:a0:fc:e5:
21:da:4d:c8:d1:e1:88:9d:c0:2c:14:54:86:18:b5:
a4:80:c4:1f:6f:ce:49:17:ca:a7:2f:aa:4b:47:08:
5f:e6:0b:42:39:a0:13:5d:4e:b9:e6:db:ff:c0:20:
73:af:37:ad:4a:4b:45:af:0a:d9:f2:38:cb:f3:64:
0e:d9:4e:f4:d9:d0:96:94:76:5f:13:8b:69:46:44:
33:5d:1c:55:de:aa:01:3e:cd:ad:3c:92:05:63:03:
ab:5e:6c:08:f5:98:e8:e8:0c:ee:a8:c2:29:3e:2a:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:78:FE:DF:BA:51:3B:F9:9E:EB:3C:9B:BA:CC:F3:9B:BB:77:C6
X509v3 Authority Key Identifier:
keyid:C3:BF:16:59:A7:48:3E:24:60:31:B4:75:74:61:91:B5:DF:0C:42:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w78WWadIPiRgMbR1dGGRtd8MQrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/Qx54_t-6UTv5nus8m7rM85u7d8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/w78WWadIPiRgMbR1dGGRtd8MQrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.244.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:f7:68:32:fb:01:1b:4d:00:8b:0e:3d:fc:b3:38:a4:74:33:
07:b9:cc:91:7d:bb:cf:c1:0d:61:e1:8d:7d:a5:d7:24:fa:e8:
37:da:2f:83:47:f0:fe:71:d4:04:32:69:30:18:6d:15:a2:b4:
e2:5a:b2:0b:41:08:54:43:fe:39:e6:ea:aa:ee:ef:03:62:f2:
d2:13:da:60:0c:ac:08:a3:f0:ea:74:e9:2d:26:f2:37:0a:0f:
53:f1:86:4e:82:3d:c3:8f:1f:02:f8:59:f3:2a:12:27:2e:85:
58:7d:ba:53:dd:d1:47:64:6f:4f:e9:46:e1:52:d5:56:ed:a8:
44:23:c5:3e:87:40:3f:13:95:d4:66:1f:79:e5:8c:99:07:3a:
4f:53:02:41:1e:60:f0:cf:db:96:ee:b2:df:03:46:16:96:2c:
fa:f3:ca:c4:8c:cb:8b:0c:c6:06:f7:8c:b4:4a:57:9d:b5:b2:
3b:3d:da:7e:79:16:5e:ad:d0:ee:67:8e:05:83:9d:35:3a:65:
59:fb:12:73:9b:77:30:36:e0:c0:af:67:33:ab:f6:d0:bd:96:
1c:3f:ad:ef:82:fc:9a:80:3a:1e:3b:49:b1:b4:44:e1:16:de:
4d:74:8e:81:44:34:50:3b:65:71:80:ea:b7:dd:3e:41:17:e5:
83:d3:53:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtlB3vHwobJNe1aWRLPycdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmYxNjU5YTc0ODNlMjQ2MDMxYjQ3NTc0NjE5MWI1ZGYw
YzQyYjYwHhcNMjMwMTAxMTM0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzFlNzhmZWRmYmE1MTNiZjk5ZWViM2M5YmJhY2NmMzliYmI3N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx9P1u9JKA0GWbbNup/G2N+EwXZJ
JDXlSvpY6QYIaVi3KxKGulyBfnJUx82DPspnZF9eTVbBubeJrrZTk3VO2HbYipi8
jI5iBZ6tJmyBeA1ouY4R1c/ft1TybrrbglxhFroahnCRNNPW1YoQOVpR/VtFvce1
ULME7Idxsp4zdHmYiOH1M4u8S0OLnSgtiNALHeGg/OUh2k3I0eGIncAsFFSGGLWk
gMQfb85JF8qnL6pLRwhf5gtCOaATXU655tv/wCBzrzetSktFrwrZ8jjL82QO2U70
2dCWlHZfE4tpRkQzXRxV3qoBPs2tPJIFYwOrXmwI9Zjo6AzuqMIpPiqZtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMeeP7fulE7+Z7rPJu6zPObu3fGMB8GA1UdIwQY
MBaAFMO/FlmnSD4kYDG0dXRhkbXfDEK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzc4V1dhZElQaVJnTWJSMWRHR1J0ZDhNUXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wZWUzOTEtZDUzYS00MWFhLWE2ODIt
ZDA5OGM1NGUyOWI1LzEvUXg1NF90LTZVVHY1bnVzOG03ck04NXU3ZDhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8wZWUzOTEtZDUzYS00MWFhLWE2ODItZDA5OGM1NGUyOWI1
LzEvdzc4V1dhZElQaVJnTWJSMWRHR1J0ZDhNUXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUf0MA0G
CSqGSIb3DQEBCwUAA4IBAQCq92gy+wEbTQCLDj38szikdDMHucyRfbvPwQ1h4Y19
pdck+ug32i+DR/D+cdQEMmkwGG0VorTiWrILQQhUQ/455uqq7u8DYvLSE9pgDKwI
o/DqdOktJvI3Cg9T8YZOgj3Djx8C+FnzKhInLoVYfbpT3dFHZG9P6UbhUtVW7ahE
I8U+h0A/E5XUZh955YyZBzpPUwJBHmDwz9uW7rLfA0YWliz688rEjMuLDMYG94y0
SledtbI7Pdp+eRZerdDuZ44Fg501OmVZ+xJzm3cwNuDAr2czq/bQvZYcP63vgvya
gDoeO0mxtEThFt5NdI6BRDRQO2VxgOq33T5BF+WD01Mt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:39 2024 by rpki-client on console-fra.rpki-client.org