Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/Q1L_iWmuAXscVGJH629JANXp5ls.roa
File: Q1L_iWmuAXscVGJH629JANXp5ls.roa (raw, json)
Hash identifier: aK1sl8ahVPmQ0AHcnHhuZ0OWBSzxhWCvSN3KJQLgIzU=
Subject key identifier: 43:52:FF:89:69:AE:01:7B:1C:54:62:47:EB:6F:49:00:D5:E9:E6:5B
Certificate issuer: /CN=bf174a5833bde6aa7824c34099762d00978857ff
Certificate serial: 3584FA25
Authority key identifier: BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/Q1L_iWmuAXscVGJH629JANXp5ls.roa
Signing time: Sat 01 Jan 2022 11:56:10 +0000
ROA not before: Sat 01 Jan 2022 11:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199773
IP address blocks: 92.60.159.0/24 maxlen: 24
92.60.155.0/24 maxlen: 24
109.236.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897907237 (0x3584fa25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf174a5833bde6aa7824c34099762d00978857ff
Validity
Not Before: Jan 1 11:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4352ff8969ae017b1c546247eb6f4900d5e9e65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:72:4b:56:be:63:61:2f:ea:b3:19:64:8e:
af:d9:f0:cc:0f:78:24:ba:c4:2d:25:cb:a9:6f:e8:
9b:a3:5b:0c:9d:ba:ba:32:38:10:21:e0:7f:27:41:
12:91:f9:d4:55:9f:64:2b:76:25:2f:e2:4b:c1:60:
ce:9b:15:d7:b7:1f:cc:18:d3:54:60:74:62:b3:c5:
eb:14:d7:3c:13:9d:09:21:cc:b4:31:f3:fd:22:ff:
6c:4d:f3:fd:c1:a6:10:8f:d8:de:cd:57:5f:34:d6:
ea:71:5d:2b:63:9d:61:03:9e:8e:ba:1c:6e:9b:2e:
70:6a:46:b8:22:6e:d3:0f:70:28:b0:8e:94:00:90:
c6:dd:89:71:c1:05:b4:e8:29:c8:0d:37:48:8c:f3:
0a:21:7b:90:e8:d8:b6:ee:36:57:9c:b9:4e:1d:db:
f5:6a:f4:c8:b8:c8:ff:fb:31:b6:c6:67:28:1e:0c:
63:32:36:33:fb:42:6a:fe:28:30:81:1e:6d:b2:47:
77:ba:05:ba:35:ee:fc:2d:4f:9b:2d:9a:e9:fa:c7:
cb:03:6d:79:2b:9b:7f:db:52:40:39:ba:5b:bb:c7:
48:53:74:12:61:c2:0b:99:30:14:46:3b:2b:8a:53:
e6:c0:27:61:34:ae:b0:3e:34:5c:7b:a8:10:36:9a:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:FF:89:69:AE:01:7B:1C:54:62:47:EB:6F:49:00:D5:E9:E6:5B
X509v3 Authority Key Identifier:
keyid:BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/Q1L_iWmuAXscVGJH629JANXp5ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/vxdKWDO95qp4JMNAmXYtAJeIV_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.155.0/24
92.60.159.0/24
109.236.187.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1a:55:f9:7d:c4:0e:3f:cc:61:56:4f:7c:c6:21:d6:fd:6e:
1d:bc:c1:81:0f:33:f5:33:b2:98:52:85:51:fd:74:d8:59:4c:
5d:ac:ad:87:4a:4a:73:90:0d:86:5d:5a:6b:c7:2a:85:9e:aa:
a3:24:bc:40:9b:e8:e6:52:3a:50:36:30:c4:7f:f0:ec:0a:b9:
83:28:bb:3e:18:f8:11:2b:1c:18:1a:f7:3b:95:b9:67:0f:24:
05:14:d2:be:30:5b:3f:c9:6b:46:92:da:d3:6d:78:ef:d3:91:
68:30:3a:45:27:f9:4a:60:86:d1:11:b1:8c:5c:a8:b8:41:ef:
7f:c9:fb:1a:2a:1b:11:11:12:1b:c8:bd:5e:c6:eb:9b:7a:ec:
15:ba:9f:99:4b:34:0c:5f:07:7f:c2:4a:3a:50:e4:63:44:5d:
42:6b:11:0b:c8:0a:9f:c6:f5:69:e7:91:0c:be:fb:92:39:89:
20:7c:5f:e1:d6:64:da:af:48:67:bb:ef:6c:0a:2f:ce:b0:ad:
cc:37:a5:89:4b:33:93:12:a9:88:cd:2d:b0:38:bd:58:ff:d0:
57:cd:d4:0c:98:f0:49:fd:34:81:84:ac:d5:87:8b:dd:ba:f8:
59:db:1a:97:e1:27:47:8e:01:93:ae:82:87:6a:8c:64:af:83:
de:8a:e6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:33 2024 by rpki-client on console-ams.rpki-client.org