Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/QnuN7z5AUdBet8gSYKNrzZwWSfM.roa
File: QnuN7z5AUdBet8gSYKNrzZwWSfM.roa (raw, json)
Hash identifier: o9SwxOiGqNUE2/t2s3w3SUyMmy7xUooxHH/3Srtnsac=
Subject key identifier: 42:7B:8D:EF:3E:40:51:D0:5E:B7:C8:12:60:A3:6B:CD:9C:16:49:F3
Certificate issuer: /CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Certificate serial: 0186499CF46A3323EA4A4E19B848EA2558EA
Authority key identifier: 5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/QnuN7z5AUdBet8gSYKNrzZwWSfM.roa
Signing time: Mon 13 Feb 2023 07:11:08 +0000
ROA not before: Mon 13 Feb 2023 07:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 94.103.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:9c:f4:6a:33:23:ea:4a:4e:19:b8:48:ea:25:58:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Validity
Not Before: Feb 13 07:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=427b8def3e4051d05eb7c81260a36bcd9c1649f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:39:d0:4b:69:7f:6e:53:9a:85:69:df:41:
d6:d1:ce:69:2f:95:89:c0:7c:46:c1:4c:fd:6e:63:
39:87:02:92:8b:53:b6:19:db:f1:7c:e6:8a:1b:03:
c1:04:d1:c3:65:8f:ec:12:99:62:0b:4d:5e:37:b1:
9d:ec:68:bc:e8:5a:5d:80:51:12:67:2f:da:4f:16:
cd:88:c9:18:58:8e:8c:70:46:cc:b8:6a:80:d5:ca:
72:03:ad:c1:9a:b7:a3:3b:c3:ac:d8:86:65:41:a0:
6d:50:67:e7:b8:1c:fd:74:24:f9:5d:d7:f4:1b:3a:
21:cd:72:20:36:64:5b:c2:cb:0c:d3:c9:ad:da:d2:
8d:34:04:02:da:3d:bf:55:b6:e9:d8:06:aa:73:94:
2d:02:91:aa:a3:fb:7a:e1:3c:60:05:bf:fb:5e:80:
9d:00:d0:62:65:42:70:60:3b:0b:3a:57:c6:12:36:
ee:28:d7:37:4f:ae:31:4c:d2:49:51:c9:0d:30:01:
16:58:f9:b9:2b:78:b2:3b:92:00:63:d0:32:71:01:
80:bd:ad:78:f0:eb:16:02:b3:b5:09:c6:dc:4d:77:
99:60:7f:6c:4f:69:db:6a:63:3a:7a:18:0a:81:8e:
9e:6c:dc:c2:d1:94:98:c8:a8:b6:24:99:74:da:37:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:8D:EF:3E:40:51:D0:5E:B7:C8:12:60:A3:6B:CD:9C:16:49:F3
X509v3 Authority Key Identifier:
keyid:5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/QnuN7z5AUdBet8gSYKNrzZwWSfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.186.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8b:16:3d:b3:b2:4b:0f:13:06:f5:36:1f:b9:e0:6a:46:b7:
0b:f5:1e:99:b2:45:c9:0f:27:81:d8:00:73:03:73:e8:81:20:
b2:3a:a2:49:09:1a:0f:5e:7e:fa:86:af:bb:14:ae:c5:a3:58:
2e:43:4a:67:6e:47:61:7d:8a:60:6c:93:7f:b1:42:ab:2d:e9:
fa:83:72:80:ed:4d:8a:82:a6:b9:40:2f:e9:df:58:15:f5:1b:
f6:36:12:ba:91:14:82:b7:5e:89:a5:f7:af:e0:10:32:ff:04:
f9:88:65:d6:2f:27:4e:ae:a0:02:51:92:12:01:76:6a:50:b8:
f4:a0:1b:1d:94:4c:0d:1c:37:f9:6e:a8:65:a9:d8:50:d3:9f:
5a:d6:39:8a:1e:6f:e2:70:f4:c8:14:61:68:b4:04:08:48:ee:
07:76:aa:46:1e:57:21:7b:7d:1c:44:e7:4c:05:02:63:86:a7:
26:0c:c1:9f:f2:2c:fc:a2:a5:ae:ed:20:56:89:ac:5e:f7:54:
98:ae:d2:58:82:6b:cb:85:2b:1f:55:87:3f:0f:e0:72:1d:bb:
64:b3:04:39:25:14:1b:35:27:b5:07:24:ba:01:f1:db:2b:f3:
0d:74:1e:f2:a3:ca:b8:56:03:30:2a:b2:cf:de:8e:86:c0:94:
c4:37:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:09 2024 by rpki-client on console-ams.rpki-client.org