Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qc_oCo4_n-4pIxr2IOr7zJGd-2k.roa
File: qc_oCo4_n-4pIxr2IOr7zJGd-2k.roa (raw, json)
Hash identifier: zpIyE/qTRwI9TmCVhAQJdbitf6UlV7NFw42KzLS0/eo=
Subject key identifier: A9:CF:E8:0A:8E:3F:9F:EE:29:23:1A:F6:20:EA:FB:CC:91:9D:FB:69
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0181E04677E00D18FBA6BDFE1F3E3C2A08BE
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qc_oCo4_n-4pIxr2IOr7zJGd-2k.roa
Signing time: Sat 09 Jul 2022 00:05:23 +0000
ROA not before: Sat 09 Jul 2022 00:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 2.56.248.0/24 maxlen: 24
2.56.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e0:46:77:e0:0d:18:fb:a6:bd:fe:1f:3e:3c:2a:08:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jul 9 00:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9cfe80a8e3f9fee29231af620eafbcc919dfb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:c7:be:68:81:8d:6c:37:a4:d2:9c:81:7a:
c1:2a:7c:71:8b:e0:b2:f6:61:62:48:fc:db:a0:ae:
3b:74:01:ad:01:0a:1b:fe:0f:36:d0:b5:d6:31:50:
8a:8e:84:76:4a:c1:f1:e9:69:e2:a6:29:9b:f1:54:
29:ca:64:97:f3:15:87:61:98:5a:91:ec:80:6e:70:
bf:67:f8:2a:be:5c:ed:ca:0b:1c:4b:01:8b:00:e9:
e5:27:1a:27:2e:11:36:60:c0:a3:78:95:9b:36:10:
62:19:be:88:81:36:44:ab:e9:42:86:d4:8e:82:0e:
83:c7:e3:c9:eb:b7:6d:36:b7:d4:98:29:d1:aa:e2:
29:5b:0d:83:ed:75:a8:01:24:92:05:80:30:31:71:
96:2c:1d:d7:19:32:c8:99:6b:be:91:ee:f4:39:ea:
62:66:a9:9c:81:8c:1a:f7:02:1c:55:ab:2d:9b:ae:
41:0f:81:f9:af:6b:b2:08:b0:33:0c:01:80:2c:c0:
22:72:57:5d:8c:73:6e:60:2d:5e:7d:a9:b8:e3:f4:
c1:b7:8b:16:02:e3:b9:5b:8f:c0:a2:11:f3:fe:7b:
2a:23:70:53:f1:3e:ca:46:44:d9:99:99:ab:fe:ab:
77:98:7a:d0:46:d5:4e:e5:c7:74:96:3e:74:b3:1c:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:E8:0A:8E:3F:9F:EE:29:23:1A:F6:20:EA:FB:CC:91:9D:FB:69
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qc_oCo4_n-4pIxr2IOr7zJGd-2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:73:5e:00:ef:4d:93:b2:f1:6c:10:3d:bc:9a:85:c7:4d:42:
a9:f0:b9:67:7a:cf:86:f5:93:51:4a:bf:7e:43:87:14:7a:33:
35:29:51:6d:3b:29:cf:e4:ea:11:83:aa:f2:06:42:14:23:1c:
12:aa:8b:ce:79:08:cd:e4:0b:9e:7a:bc:19:36:73:ab:93:f3:
47:93:e2:bd:37:0c:52:a6:c2:c2:bb:47:ef:ff:8e:ed:2c:e4:
48:17:5c:f3:08:9e:eb:1e:a0:bb:c6:69:e1:5a:c7:3d:7f:71:
ca:88:80:7e:2c:2a:9a:55:f6:e3:ec:cc:ee:77:ad:7b:c2:a7:
22:f4:71:9d:58:b1:b8:f0:d0:11:51:74:99:68:a4:d0:d5:10:
d4:ad:74:b7:a0:45:5e:85:7e:d6:ae:00:d2:bb:4e:43:30:e0:
8a:8b:bf:24:8e:48:c3:29:28:15:d0:6a:41:65:1a:69:85:95:
9c:9c:07:62:7b:1a:d8:f0:72:57:de:f5:a4:c7:64:f3:aa:ab:
23:5d:39:90:a7:1f:71:f2:85:95:80:62:37:4c:29:7d:3a:98:
46:5f:51:27:0d:15:d7:46:0d:11:9b:da:95:e8:ce:67:bd:2b:
4f:fb:59:1a:67:a5:ba:3d:5c:45:5c:8f:20:95:ef:37:77:79:
a4:a5:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org