Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/qBOqcdNsEvaosHf_BQHrBvSsnB4.roa
File: qBOqcdNsEvaosHf_BQHrBvSsnB4.roa (raw, json)
Hash identifier: Zn/tlN7Eh2ptMKC3RFrUG7DugvUOu3tVhu5jCEwiC48=
Subject key identifier: A8:13:AA:71:D3:6C:12:F6:A8:B0:77:FF:05:01:EB:06:F4:AC:9C:1E
Certificate issuer: /CN=584510e996ca0b8a55cb18c228c997d63c31a781
Certificate serial: 0185712787CED5F6AD09F45A3F35A7589198
Authority key identifier: 58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/qBOqcdNsEvaosHf_BQHrBvSsnB4.roa
Signing time: Mon 02 Jan 2023 06:24:54 +0000
ROA not before: Mon 02 Jan 2023 06:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 85.158.143.0/24 maxlen: 24
85.158.142.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
193.109.255.0/24 maxlen: 24
46.226.52.0/23 maxlen: 23
193.109.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:87:ce:d5:f6:ad:09:f4:5a:3f:35:a7:58:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584510e996ca0b8a55cb18c228c997d63c31a781
Validity
Not Before: Jan 2 06:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a813aa71d36c12f6a8b077ff0501eb06f4ac9c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:ae:c9:15:45:0a:33:bb:bc:87:0e:26:85:
f2:87:c9:61:42:36:08:6b:a0:ff:35:f7:cd:ff:f2:
fa:25:cb:b0:32:b2:79:b8:ab:62:5a:43:a7:72:fd:
10:d6:95:eb:fb:62:01:7f:2d:80:d5:21:05:a5:7e:
12:a2:3d:52:78:4b:87:b1:07:79:de:81:d3:eb:4c:
69:cc:4e:b5:9a:c7:93:b7:b0:69:0c:03:00:c7:f6:
72:97:a3:54:39:4a:10:c3:80:2e:82:56:2f:f0:92:
6d:b5:a6:72:e3:e9:6c:70:6e:8f:9f:e3:1d:e9:5b:
a5:2d:e6:4f:25:f9:e2:9b:66:47:0b:4b:93:e8:dd:
04:8a:82:13:ac:e1:b8:95:2d:aa:f5:c7:0d:59:48:
f5:a5:1c:27:79:de:92:ee:51:46:44:b7:e7:be:92:
af:a8:c6:b7:ad:98:72:ff:da:a1:f4:36:a5:81:15:
ce:e6:6e:1a:20:5f:4f:22:26:01:8b:a5:32:26:7a:
2b:f9:b7:55:c0:b3:b7:76:b7:ce:ed:69:61:48:03:
d2:4a:d5:0d:94:5f:a1:ec:c9:7d:9f:50:c5:58:01:
41:d7:ea:28:0f:af:ae:01:2d:81:12:23:1f:6e:7a:
dc:fa:96:84:06:c3:83:ba:a3:d1:c6:52:d7:a4:db:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:13:AA:71:D3:6C:12:F6:A8:B0:77:FF:05:01:EB:06:F4:AC:9C:1E
X509v3 Authority Key Identifier:
keyid:58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/qBOqcdNsEvaosHf_BQHrBvSsnB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/23
85.158.142.0/23
193.109.254.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
78:8e:b2:bd:b0:b7:1f:78:f3:79:b1:c1:03:15:91:41:d4:b0:
8e:27:41:47:0d:f5:ea:2b:7c:83:68:d9:95:ad:14:07:5a:24:
47:0d:88:e9:7d:92:5f:d6:78:13:43:a1:d1:2e:51:94:e4:49:
b9:85:5d:2e:25:85:df:59:92:d0:e4:d0:6c:bb:5b:01:23:6a:
1f:d9:82:93:cc:5f:f8:be:be:82:bc:42:0b:7f:88:bf:81:d1:
f2:d5:01:26:ae:73:29:87:89:a1:62:c4:dd:26:5e:91:32:fe:
0f:ad:71:ab:bb:bd:f7:2d:d4:8c:63:0d:0a:b5:fa:be:0f:c2:
c4:d0:95:03:c8:c1:f8:c7:8d:24:65:d5:50:ce:fb:7d:44:e8:
ce:95:48:ac:11:80:50:e5:98:a1:af:5b:ec:80:29:e4:01:86:
c9:8d:bd:e6:00:1f:8d:82:10:55:01:f4:61:dd:d1:7e:aa:df:
33:71:80:f7:c1:70:f5:7f:9d:86:1a:50:8c:27:df:80:98:12:
20:33:e6:3c:04:15:40:c8:e1:92:f2:1d:5c:04:30:b5:08:c1:
ad:c3:ce:8f:23:18:ed:4a:3b:3c:7e:99:e5:5a:ce:70:3e:62:
81:4c:06:a5:0f:db:72:3d:a8:74:d1:07:b3:9d:4a:36:20:c1:
3c:0b:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 14:55:23 2023 by rpki-client on console-fra.rpki-client.org