Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/qDDgFbvtRluCiBANKFs61Tazg6s.roa
File: qDDgFbvtRluCiBANKFs61Tazg6s.roa (raw, json)
Hash identifier: lp4f0VE4MLnmjWc3ABq7poooRX8OdiOYYBypZY4GR8E=
Subject key identifier: A8:30:E0:15:BB:ED:46:5B:82:88:10:0D:28:5B:3A:D5:36:B3:83:AB
Certificate issuer: /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial: 02D4F4E3
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/qDDgFbvtRluCiBANKFs61Tazg6s.roa
Signing time: Sat 01 Jan 2022 15:06:40 +0000
ROA not before: Sat 01 Jan 2022 15:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208121
IP address blocks: 185.227.216.0/23 maxlen: 23
185.227.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47510755 (0x2d4f4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
Validity
Not Before: Jan 1 15:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a830e015bbed465b8288100d285b3ad536b383ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:81:82:d7:25:e5:0d:f3:7f:5d:7e:71:15:
07:82:97:7b:bb:51:dd:6c:fe:37:54:1a:0c:b9:8e:
bc:f8:5e:01:fb:ae:24:4c:5b:32:aa:47:c9:0b:ef:
7e:bb:2b:7d:c5:86:e8:40:18:f2:8f:15:1e:d1:95:
98:e1:a3:a9:ab:fc:8c:7b:74:09:3a:62:2a:24:a5:
ac:2e:d4:63:d5:72:1d:51:e4:5a:1b:16:c5:54:81:
94:c8:d6:27:c5:0a:be:2a:d6:01:74:5b:d3:39:92:
a0:e7:90:0a:e2:16:8a:5f:9e:49:55:47:a9:c0:63:
d7:bf:3d:85:84:20:ab:b8:43:a9:76:4b:87:13:7b:
0b:6c:69:58:ca:48:be:d6:c3:05:28:95:70:c4:a6:
2f:36:36:2b:46:3f:3d:09:5e:5d:e2:ce:f1:4a:0d:
08:59:97:e2:68:9c:3e:87:ed:3b:a2:40:6c:22:ce:
e7:0b:77:a3:11:b7:3b:78:f1:00:6b:4b:5c:a9:c5:
6f:83:0d:02:04:5d:3d:6a:99:55:15:5c:17:04:d2:
60:55:bb:90:2a:f3:ac:94:3c:c6:35:e5:79:9d:a2:
8b:28:a5:c9:c2:34:f7:f2:3c:7f:fc:f4:ab:39:97:
da:a3:cb:6c:f7:a4:89:b2:f6:33:95:7a:23:ae:44:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:30:E0:15:BB:ED:46:5B:82:88:10:0D:28:5B:3A:D5:36:B3:83:AB
X509v3 Authority Key Identifier:
keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/qDDgFbvtRluCiBANKFs61Tazg6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.216.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:02:b6:4e:e5:d1:1c:82:5e:de:ab:4c:29:da:f6:38:16:7a:
52:e0:96:20:8c:31:26:31:b3:d9:a3:22:4f:04:4c:06:7c:60:
d5:8c:d2:bf:62:f2:80:f7:c2:6e:20:da:ae:27:25:be:9a:41:
81:5d:e2:56:ee:66:a1:31:88:4a:68:d7:6c:7b:cf:74:5a:c6:
85:80:b1:05:eb:8c:33:94:16:a1:c4:14:c0:2e:6d:c0:73:e8:
7d:be:3c:ef:34:99:a2:c0:f3:ff:9b:0b:c5:bf:f9:97:ee:af:
bb:cb:dc:9b:95:10:35:84:5a:b7:50:89:ce:fb:80:24:8a:81:
e1:21:58:59:95:1c:86:17:6c:34:33:75:ae:88:af:84:04:91:
da:08:16:71:22:55:22:49:be:55:1d:50:3c:99:aa:6c:58:f4:
da:b8:ed:95:f8:fe:00:34:38:56:48:8f:b8:33:5d:6f:ac:df:
73:0d:26:ee:95:fc:f1:7a:13:28:29:79:10:3f:a8:c2:8b:cd:
e2:6a:70:88:d9:5d:98:29:b3:9f:c7:0f:97:a0:c6:51:13:26:
2a:b1:e0:56:d8:08:03:ce:d1:de:02:67:96:31:c7:78:fc:c2:
e1:d0:ed:cc:5f:34:fe:24:68:ad:1b:5d:8e:f2:b8:89:16:2c:
c5:09:bb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:43 2024 by rpki-client on console-ams.rpki-client.org