Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/QZv4H6QmR4KlFk_KiKKu8KHIzPU.roa
File: QZv4H6QmR4KlFk_KiKKu8KHIzPU.roa (raw, json)
Hash identifier: UP/69NbsvJtGxr669f0F4waigWnepp8tSrn0QTLxlSs=
Subject key identifier: 41:9B:F8:1F:A4:26:47:82:A5:16:4F:CA:88:A2:AE:F0:A1:C8:CC:F5
Certificate issuer: /CN=c0d4bcb45d851025811f532f478a8c7b3ce66888
Certificate serial: 0188AFEDEBAE3C4215F016942A6A61007070
Authority key identifier: C0:D4:BC:B4:5D:85:10:25:81:1F:53:2F:47:8A:8C:7B:3C:E6:68:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNS8tF2FECWBH1MvR4qMezzmaIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/QZv4H6QmR4KlFk_KiKKu8KHIzPU.roa
Signing time: Mon 12 Jun 2023 14:06:25 +0000
ROA not before: Mon 12 Jun 2023 14:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.3.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:ed:eb:ae:3c:42:15:f0:16:94:2a:6a:61:00:70:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d4bcb45d851025811f532f478a8c7b3ce66888
Validity
Not Before: Jun 12 14:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=419bf81fa4264782a5164fca88a2aef0a1c8ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:92:11:55:86:56:c7:05:01:b3:d7:94:c8:
b0:64:55:03:de:8d:4f:54:52:12:fb:2d:05:dc:5b:
e7:0b:02:75:31:28:d5:0d:55:91:f7:de:a6:f2:d1:
14:e4:f5:dd:b6:eb:be:07:77:29:b4:1d:44:4f:23:
24:92:f6:1c:24:b3:f5:cc:55:05:ba:c4:6f:85:e6:
e0:b4:a2:0f:f3:4b:5a:72:5b:05:d6:97:01:29:ff:
5d:2e:3e:79:7a:df:6f:d7:6d:23:fe:b7:d6:99:22:
8f:a6:58:ac:57:73:c2:2d:a7:b5:2c:b2:95:2b:02:
6c:20:cd:a1:bc:7e:a3:b8:11:65:50:54:88:38:2c:
49:31:4b:85:0d:4c:09:1f:50:00:db:d7:35:b8:cf:
0b:22:f5:39:29:29:f1:90:66:5a:2c:44:80:00:6c:
1a:e4:fb:96:7d:39:4e:48:5c:f3:33:dd:4f:26:49:
c1:d9:3d:72:a2:bc:fe:37:84:63:2a:ac:2e:82:62:
bb:4d:0e:6d:1c:a8:5e:ab:9f:d5:83:a0:af:7a:7e:
57:f2:fd:a0:e7:7d:1d:a9:d5:15:9c:1e:48:11:53:
a7:e3:8b:0d:d5:07:eb:4e:63:e0:ea:8d:78:40:32:
7d:04:a2:a7:e7:c3:aa:50:01:7e:11:09:83:98:7b:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:F8:1F:A4:26:47:82:A5:16:4F:CA:88:A2:AE:F0:A1:C8:CC:F5
X509v3 Authority Key Identifier:
keyid:C0:D4:BC:B4:5D:85:10:25:81:1F:53:2F:47:8A:8C:7B:3C:E6:68:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNS8tF2FECWBH1MvR4qMezzmaIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/QZv4H6QmR4KlFk_KiKKu8KHIzPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/wNS8tF2FECWBH1MvR4qMezzmaIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:59:28:10:39:4d:4d:bc:a2:be:60:42:20:25:8f:d0:c3:19:
e9:40:6d:5b:d6:94:3c:9d:f6:d4:8f:46:e5:5a:62:b2:9d:8d:
0d:b5:44:df:a6:3f:b5:9a:44:45:b9:74:b5:44:d6:7e:5c:03:
28:ef:8c:ac:ab:88:a7:77:6f:4d:ca:6a:94:08:2c:76:a8:5f:
c0:cb:37:0f:49:e2:48:62:be:37:d2:3a:f6:48:a5:f2:fe:50:
db:2f:b0:88:f9:13:28:0e:b1:dd:24:bc:b9:e2:e6:04:1c:08:
5e:92:46:36:4c:cf:fb:67:46:a4:df:89:78:9c:0b:68:13:3c:
a9:ae:7b:61:48:c5:db:97:9c:b6:9c:95:2e:f1:57:f7:8e:b2:
80:73:88:f1:3d:8f:1e:92:ef:10:d9:3f:b8:52:5d:87:41:45:
9f:1c:3b:a6:40:34:bc:c8:76:a8:c3:6b:43:08:b0:e8:7d:b5:
d4:66:be:41:7e:26:75:2d:3e:b8:23:b3:4c:4b:05:ad:f8:7c:
3f:e4:8b:85:24:95:fc:4a:47:2e:0a:85:cc:4c:99:ee:bc:56:
5f:31:95:e4:d3:d5:43:31:ca:a1:1c:f0:e8:be:77:3c:fe:77:
83:3c:62:e8:d6:8e:6b:30:7f:ed:d7:53:d1:f1:c8:7d:33:48:
da:cb:3d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:27 2024 by rpki-client on console-fra.rpki-client.org