Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa
File: Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa (raw, json)
Hash identifier: jOEiD+f4mWoNBLuKRFmGsoXFSgexiczq7v2/KX/bYOw=
Subject key identifier: 43:3D:8D:4B:D2:EA:57:D4:1B:E9:22:37:E1:55:91:72:D8:59:1A:FE
Certificate issuer: /CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
Certificate serial: 018D16DD920E29BEAE5939DB0237F44B6DC0
Authority key identifier: 6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa
Signing time: Wed 17 Jan 2024 10:00:35 +0000
ROA not before: Wed 17 Jan 2024 10:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201105
IP address blocks: 185.247.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:dd:92:0e:29:be:ae:59:39:db:02:37:f4:4b:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
Validity
Not Before: Jan 17 10:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=433d8d4bd2ea57d41be92237e1559172d8591afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:dc:fd:b2:69:aa:53:3d:13:f9:a7:da:e2:
2e:ad:c0:d0:15:3d:1e:ef:03:08:30:38:dd:9c:cd:
92:93:90:7d:6f:8c:8d:81:f7:d5:3e:f7:f4:76:e3:
25:87:4c:da:eb:e6:58:7d:2f:07:b0:fb:f3:5d:54:
94:1e:10:f9:8b:d7:96:ff:62:e3:33:48:e1:cc:d4:
99:e4:de:24:e9:db:5e:6b:2a:56:56:b9:b1:2b:0a:
81:58:81:be:7d:e8:31:ed:42:f3:b4:05:cb:ea:78:
e3:dd:9d:bd:c6:1d:c7:73:92:1b:54:8b:9a:81:9d:
88:5f:06:6c:c3:f5:a2:54:f6:13:c1:cc:8e:f1:41:
fd:28:bd:6d:09:97:16:23:3e:27:e3:6e:1c:64:bf:
44:40:f9:6e:13:98:1d:62:90:4e:ff:1b:50:18:46:
a6:d3:ca:70:b4:92:be:f9:63:48:4e:d3:2c:b8:66:
47:51:9b:ae:c4:3a:1d:f3:9d:58:5e:34:8b:a1:f9:
3c:94:27:57:d5:3e:12:7a:70:2f:ef:cd:c0:82:ca:
11:17:78:e8:b7:70:12:4b:e6:e2:26:24:62:4c:bb:
ea:b3:18:bf:c5:78:ba:10:24:31:66:09:3d:c3:bc:
eb:ad:08:78:87:17:96:67:5f:88:17:c5:a9:4b:54:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3D:8D:4B:D2:EA:57:D4:1B:E9:22:37:E1:55:91:72:D8:59:1A:FE
X509v3 Authority Key Identifier:
keyid:6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.24.0/22
Signature Algorithm: sha256WithRSAEncryption
71:67:8a:c7:7c:6e:e1:db:fb:be:f5:e3:09:5f:67:96:1e:02:
6c:1a:18:45:64:45:73:4d:77:df:18:1c:14:11:f5:2f:2a:11:
32:3d:6c:56:84:31:a8:21:08:0b:32:14:a2:f6:e7:7d:b5:b6:
c4:f8:ba:38:b6:b7:e7:af:a6:b1:f7:82:43:d7:e5:49:c4:42:
a7:39:96:d1:36:ef:b0:6d:ef:40:23:8c:59:6a:29:a3:5c:40:
12:25:d1:3e:2c:5d:97:da:34:54:d8:7b:68:c1:03:ab:8f:a7:
f1:f7:4d:6e:2b:1f:c2:0e:c6:31:4e:39:b4:6e:f0:2d:69:e2:
a3:e5:05:1d:10:c4:76:ec:87:6e:cb:e7:fa:7a:1e:dd:c9:a7:
b7:2d:42:26:16:07:09:05:fe:80:8c:f0:80:9f:ab:e6:7c:67:
ea:9d:00:de:2e:e9:1d:cd:e3:13:d9:c2:0d:10:ac:5e:54:b1:
a2:fc:91:01:6c:80:7e:93:89:c8:bb:f0:d1:f7:6d:72:56:65:
1c:38:02:57:e8:a1:59:ba:f6:82:42:8a:4f:94:4f:1d:e0:b4:
8b:1b:ac:cb:db:62:01:bb:62:9d:f3:b3:3e:d5:69:b1:dd:26:
93:9b:9b:ff:45:50:a8:cd:6f:55:ee:aa:ca:98:17:84:13:43:
25:b1:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:14:10 2024 by rpki-client on console-fra.rpki-client.org