Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/QslW3D67xpRkaGYWr4NT7RdCNPw.roa
File: QslW3D67xpRkaGYWr4NT7RdCNPw.roa (raw, json)
Hash identifier: jLEdQm44ro0ylGydlHjjKmAwyNn8z3ypZs2f0ytGOlI=
Subject key identifier: 42:C9:56:DC:3E:BB:C6:94:64:68:66:16:AF:83:53:ED:17:42:34:FC
Certificate issuer: /CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Certificate serial: 04A3C412
Authority key identifier: F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/QslW3D67xpRkaGYWr4NT7RdCNPw.roa
Signing time: Sat 01 Jan 2022 14:57:10 +0000
ROA not before: Sat 01 Jan 2022 14:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202119
IP address blocks: 185.20.4.0/22 maxlen: 22
185.20.6.0/23 maxlen: 23
2a00:4ce0::/40 maxlen: 40
2a00:4ce0::/32 maxlen: 32
2a00:4ce0:3::/48 maxlen: 48
2a00:4ce0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77841426 (0x4a3c412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02d21c925edd7d811e1be96f0f287d7ccd2f35b
Validity
Not Before: Jan 1 14:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42c956dc3ebbc69464686616af8353ed174234fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:9d:1e:69:ad:f5:02:01:d6:c9:68:2c:79:
51:8e:48:a3:1b:4d:4b:41:84:80:b2:b5:5a:e5:b0:
b3:75:8a:e8:98:00:8c:01:93:dc:be:0e:b2:a8:d8:
40:48:f4:43:8e:e1:07:af:1d:29:f2:89:97:09:1b:
3f:a1:b8:7a:97:93:43:23:91:92:fc:b2:d1:1a:b3:
ce:9c:10:f5:68:4b:d4:19:47:c4:46:32:99:2d:de:
0b:24:83:2b:9c:26:0d:2a:08:58:0b:d2:83:ea:6d:
7b:ab:35:2a:b7:e9:82:ca:a8:0a:f3:50:fa:03:0d:
36:b1:a3:7a:fe:ac:61:21:ab:83:79:08:f2:0c:a5:
e3:e1:93:ff:0f:11:8c:d6:94:a9:90:d0:52:4f:06:
70:98:51:d6:37:41:19:2a:f9:4a:4d:3b:52:10:1e:
fd:85:af:56:29:3c:d7:fd:7d:96:73:c0:1e:3d:a9:
45:c8:18:15:5a:5d:11:53:97:d0:73:7f:1e:19:21:
f2:84:a9:2f:53:98:17:62:d3:42:b4:b8:60:88:e8:
84:14:07:6e:25:05:44:33:bd:df:e3:fd:93:03:0b:
7a:20:cb:e0:d8:2d:b0:c9:d5:6f:28:75:1b:ae:09:
6a:9c:2f:67:c3:b8:d8:53:49:fc:66:37:7e:96:42:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:56:DC:3E:BB:C6:94:64:68:66:16:AF:83:53:ED:17:42:34:FC
X509v3 Authority Key Identifier:
keyid:F0:2D:21:C9:25:ED:D7:D8:11:E1:BE:96:F0:F2:87:D7:CC:D2:F3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C0hySXt19gR4b6W8PKH18zS81s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/QslW3D67xpRkaGYWr4NT7RdCNPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ee78f-02ea-46eb-b529-439d0da6a26e/1/8C0hySXt19gR4b6W8PKH18zS81s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.4.0/22
IPv6:
2a00:4ce0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ee:41:78:10:45:f8:9c:09:f7:03:16:57:ed:fd:6d:8f:9e:
ae:a6:39:7f:72:8b:19:e2:d3:33:cb:34:af:ee:47:6b:5c:7e:
d3:45:69:42:b0:8a:75:8f:ba:28:d2:7a:89:35:ad:61:4a:4a:
c2:75:81:86:f6:47:11:54:14:0f:b9:72:2d:e1:70:ab:5a:25:
61:ac:a3:fb:8f:21:40:9d:3d:82:a8:c5:8c:94:a8:2b:96:5a:
51:f6:4d:6f:e6:c4:05:44:5e:5b:99:e6:88:b8:bb:8f:48:6a:
8e:32:1d:d7:84:fc:47:bb:cd:fa:d7:69:15:c4:11:50:c7:53:
8a:ed:76:b0:4a:ec:df:1f:af:ce:80:2a:85:f9:50:73:a5:14:
e9:14:1a:29:37:ee:59:86:f7:e3:71:95:70:bc:d3:5e:7d:e1:
4c:74:ac:1f:de:4a:bb:37:01:1b:4f:40:65:5d:0c:e8:fc:18:
c0:1f:69:42:a7:9f:c8:66:68:33:90:c4:83:9c:12:ec:b9:5c:
54:3a:b3:86:83:bc:3c:13:e3:b5:b6:cc:05:6a:7c:df:d1:32:
98:2b:e9:18:8d:d0:e8:6a:0a:0a:16:ac:9b:26:9b:18:51:55:
6d:6f:9c:f5:40:5e:7b:03:2e:b3:80:9a:58:cb:db:a9:f0:34:
fb:92:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:08 2023 by rpki-client on console-ams.rpki-client.org