Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/QPUqUMOQx9zOBibIwkSPEwISxus.roa
File: QPUqUMOQx9zOBibIwkSPEwISxus.roa (raw, json)
Hash identifier: R0NXy1fztG2B5bGr1Y++gn74P3IEPGIghUybxISGzQs=
Subject key identifier: 40:F5:2A:50:C3:90:C7:DC:CE:06:26:C8:C2:44:8F:13:02:12:C6:EB
Certificate issuer: /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial: 0182A17EC149CCAD32FCC6DE582E21F10955
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/QPUqUMOQx9zOBibIwkSPEwISxus.roa
Signing time: Mon 15 Aug 2022 12:33:35 +0000
ROA not before: Mon 15 Aug 2022 12:33:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 141.98.4.0/24 maxlen: 24
141.98.7.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:7e:c1:49:cc:ad:32:fc:c6:de:58:2e:21:f1:09:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Validity
Not Before: Aug 15 12:33:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40f52a50c390c7dcce0626c8c2448f130212c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a0:06:c8:1b:32:80:d1:f1:11:35:6e:c1:96:
17:10:45:e2:71:24:ac:1b:5b:1c:91:c3:3c:dd:f8:
7c:9c:d2:99:8a:ef:67:7a:13:bc:d6:8b:2b:3d:d2:
6d:4f:db:31:8d:f1:be:6c:8b:e7:3c:96:d6:6c:66:
c3:99:6f:c3:db:a5:ab:a7:5f:06:ed:9b:06:60:bf:
cc:11:dc:03:70:0c:7d:02:ca:ae:69:b7:0a:17:69:
ad:47:c3:7d:7f:aa:d0:a4:28:3e:37:e7:d7:c6:4e:
b8:27:e9:8d:6f:ec:75:b3:67:2c:05:fe:7b:ab:50:
db:72:a0:9a:5d:d0:0e:20:b5:b0:3f:b6:b0:67:28:
e8:60:13:5d:b7:fe:30:a9:18:e6:c1:af:ea:53:bb:
d6:0a:ab:04:da:a8:f1:85:4a:a7:be:e3:dd:84:8c:
d5:cd:ba:4d:f2:e8:28:1b:03:fd:07:96:aa:46:e3:
ad:06:c2:86:7d:c2:5a:b2:f8:c2:be:b2:c9:df:1e:
99:16:56:bc:e2:1c:dd:ef:d9:b3:63:ef:48:ff:66:
14:63:07:3c:95:a5:b0:a0:1d:88:ed:ce:f6:31:8d:
a5:5b:62:00:e6:87:92:a1:b1:de:91:22:1c:3d:26:
ee:1a:72:79:bf:17:2e:44:54:1f:8d:5a:e6:a6:29:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:2A:50:C3:90:C7:DC:CE:06:26:C8:C2:44:8F:13:02:12:C6:EB
X509v3 Authority Key Identifier:
keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/QPUqUMOQx9zOBibIwkSPEwISxus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.4.0/23
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5b:0d:22:ab:70:6b:f0:ff:ec:df:47:9e:dd:bf:a7:73:bb:
f6:f9:c1:f9:e3:3e:7b:d4:eb:19:00:eb:95:de:ed:0b:51:30:
be:15:9e:9a:36:a9:37:81:e6:c1:d7:c9:48:b7:29:56:d0:12:
b6:e6:3c:93:f1:ab:be:18:ee:a4:e1:59:29:ca:17:fe:f0:a6:
be:62:e6:18:bc:ea:20:9b:14:8d:b8:2f:83:41:59:91:2b:b1:
d9:b5:47:bd:87:91:76:53:37:53:4e:d9:ee:6d:b6:63:5d:80:
7f:a3:98:ac:99:a8:fa:ff:bf:1e:90:77:39:cc:98:f8:13:29:
cb:55:65:b8:20:5d:c1:6c:82:5d:78:0b:e5:6f:0d:67:b9:03:
4e:13:ad:dd:82:a4:3a:48:4c:c3:52:11:1d:9a:60:7e:22:7f:
e0:65:46:1a:de:48:bb:4f:c7:58:0d:55:ec:02:8f:31:39:6f:
58:70:88:40:f6:26:67:63:64:c5:11:4c:12:cd:8e:c5:0e:b6:
ad:fd:86:3a:b1:04:9d:90:7c:42:13:59:0f:42:e4:56:62:16:
66:53:15:9b:51:51:ac:26:3f:99:bb:d3:b3:ee:28:b3:e6:c5:
e9:4c:ca:c7:ff:56:5e:bc:0d:36:7e:75:e8:bc:d1:72:89:e7:
21:60:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-fra.rpki-client.org