Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Jqz8xele-E1l0joYDrr3tKECLeI.roa
File: Jqz8xele-E1l0joYDrr3tKECLeI.roa (raw, json)
Hash identifier: IN/nQHEBN/SmO0Xu0bpBRkPRot2rnNHe/Rq7Z/ujsZ8=
Subject key identifier: 26:AC:FC:C5:E9:5E:F8:4D:65:D2:3A:18:0E:BA:F7:B4:A1:02:2D:E2
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186A34B0AA3AD995269E2A4A75B1D21FC5C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Jqz8xele-E1l0joYDrr3tKECLeI.roa
Signing time: Thu 02 Mar 2023 17:07:29 +0000
ROA not before: Thu 02 Mar 2023 17:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.39.10.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
2.56.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:4b:0a:a3:ad:99:52:69:e2:a4:a7:5b:1d:21:fc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 2 17:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26acfcc5e95ef84d65d23a180ebaf7b4a1022de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:d2:bf:5a:e8:9c:43:a9:33:21:c0:7a:12:
64:2e:76:ae:68:38:a1:f1:04:b7:1f:b0:eb:57:fc:
93:ee:18:b4:97:19:9b:36:5a:05:90:e6:46:38:2f:
b8:b8:b8:af:01:01:ed:7a:33:e9:1a:3c:7a:4c:71:
df:22:a6:71:4e:a9:8f:60:c1:b0:1e:12:d6:37:44:
e5:d1:7c:ca:a5:a9:93:95:26:b4:c3:ed:0b:e3:b3:
f5:14:c0:bf:89:cf:8a:6d:94:98:00:d5:0e:b4:a2:
66:d1:fe:e0:72:3e:60:02:cd:e5:88:ef:5e:c2:2d:
57:0c:9a:a1:b3:de:87:bb:81:54:37:51:9a:00:1a:
86:6a:56:74:70:8f:e4:6e:65:aa:4a:9a:60:ca:87:
5b:4a:02:79:c5:d6:50:9f:8a:b0:1e:b2:e1:29:58:
ef:88:7d:61:a8:27:70:2f:86:df:a6:b5:cf:cc:b9:
2f:6f:e6:48:6f:8f:ae:7d:86:ba:0a:3b:28:e2:09:
ff:7a:fe:e5:80:17:a7:b0:c6:df:8a:6a:9f:7a:0d:
ba:65:8d:09:03:3c:c3:8d:28:dd:34:7a:6c:80:3d:
e5:e3:b1:c4:4f:03:cc:bc:6f:d2:1d:b3:9f:3b:58:
27:07:30:61:f9:99:b7:cd:0b:0c:cd:c8:16:59:33:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AC:FC:C5:E9:5E:F8:4D:65:D2:3A:18:0E:BA:F7:B4:A1:02:2D:E2
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Jqz8xele-E1l0joYDrr3tKECLeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
45.12.81.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:fc:3f:4d:2e:e8:5a:eb:72:69:bd:23:e6:c9:fa:02:db:a6:
59:43:77:39:a8:66:51:a8:96:a9:c9:41:29:bc:f4:1d:e9:51:
e7:cd:11:23:d5:42:ed:1f:39:6d:32:78:18:e8:89:02:02:44:
81:83:e0:2c:fc:65:b7:e9:13:fe:dc:65:11:a1:40:a0:45:c2:
71:aa:00:b9:23:e6:42:d8:23:60:e2:81:f6:64:4d:9c:86:57:
7b:c3:41:a1:e9:3c:c5:99:42:8e:af:30:39:c4:86:79:47:ff:
a8:e3:b6:d4:e9:7a:6c:49:44:1b:2b:97:18:30:b7:72:d4:a1:
48:c2:76:e3:86:08:fd:6a:22:97:d0:99:36:2c:51:49:c3:b7:
40:37:5a:a6:ba:94:e2:c2:af:a8:e2:75:4a:af:73:c4:02:d7:
a3:a5:96:20:82:a3:53:e2:e8:fe:1e:93:fc:22:52:01:95:64:
90:b5:3d:f7:f6:af:08:f1:5d:31:4b:c1:d2:02:85:cc:76:1d:
e8:ae:2f:b5:c2:ef:b1:fc:59:99:6b:64:b9:de:74:cf:38:4c:
ed:7e:5d:89:f2:74:8a:ff:b9:19:3e:c0:bb:f4:51:78:9b:c9:
ea:17:62:85:6c:c7:4f:1c:3d:33:5f:3e:8a:87:db:d1:54:16:
25:b9:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org