Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/QScYRKZcEKzaPWd6BZZLoyOq_Hc.roa
File: QScYRKZcEKzaPWd6BZZLoyOq_Hc.roa (raw, json)
Hash identifier: 4tebuqRBzOGDEPbQg7SizkdJAFLxgCHt33TQoLeod2o=
Subject key identifier: 41:27:18:44:A6:5C:10:AC:DA:3D:67:7A:05:96:4B:A3:23:AA:FC:77
Certificate issuer: /CN=923c1cff0bd0d026bdd1096c80d1eed3ee90cb2e
Certificate serial: 0185720C5A8E23F7639231F542FE66C23422
Authority key identifier: 92:3C:1C:FF:0B:D0:D0:26:BD:D1:09:6C:80:D1:EE:D3:EE:90:CB:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/QScYRKZcEKzaPWd6BZZLoyOq_Hc.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51489
IP address blocks: 46.30.192.0/22 maxlen: 22
46.30.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5a:8e:23:f7:63:92:31:f5:42:fe:66:c2:34:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923c1cff0bd0d026bdd1096c80d1eed3ee90cb2e
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41271844a65c10acda3d677a05964ba323aafc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:db:e9:ee:24:ec:a0:e0:4c:2e:40:f6:cd:
c4:4d:79:84:4b:95:8d:2f:c7:c6:42:a5:7b:14:1e:
fa:69:38:7c:67:f1:ce:04:18:b3:40:10:23:8f:3d:
d8:0c:a2:70:36:84:2e:c1:e0:49:b3:d9:d5:a5:5f:
d9:a4:ca:6d:34:7b:50:18:76:fe:01:19:75:c4:c6:
25:72:86:e2:90:88:02:be:6a:82:e6:a5:12:17:4c:
7e:8d:cb:6b:b3:d2:5c:d1:06:77:f3:2b:c1:38:66:
7e:f6:b0:23:9b:60:41:5e:6d:48:be:9e:ab:cc:9d:
ef:14:d7:7a:52:70:e7:e7:d7:3a:89:b2:bf:75:7d:
be:d7:be:04:21:e1:60:2d:57:5e:a0:bc:bf:14:42:
1a:f7:3c:f7:97:24:61:ac:a8:ab:80:44:b8:61:e0:
82:cd:3f:df:e5:19:cf:9c:98:dc:3b:6c:6f:97:42:
b3:e5:97:6f:04:06:56:c6:9f:14:25:4f:fe:36:38:
b5:74:09:a6:08:a0:92:f2:40:38:a1:c2:a4:8c:e4:
67:32:96:94:0f:59:5c:fb:b5:54:ad:59:89:54:c5:
f5:cc:7e:f0:c3:15:28:17:c2:33:ee:28:97:98:d8:
96:76:4d:65:1a:8e:63:74:1d:78:bc:b5:13:44:28:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:18:44:A6:5C:10:AC:DA:3D:67:7A:05:96:4B:A3:23:AA:FC:77
X509v3 Authority Key Identifier:
keyid:92:3C:1C:FF:0B:D0:D0:26:BD:D1:09:6C:80:D1:EE:D3:EE:90:CB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/QScYRKZcEKzaPWd6BZZLoyOq_Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/48997f-aace-434d-948d-5d7c83fd07e9/1/kjwc_wvQ0Ca90QlsgNHu0-6Qyy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.192.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:68:4b:8a:ea:53:eb:98:58:24:ba:8f:f2:f7:37:87:61:42:
97:df:64:37:23:ec:28:c3:96:99:de:d9:91:3b:31:43:03:37:
24:2f:28:5a:2e:94:7a:89:cb:1d:19:c9:1e:c7:c6:22:22:7f:
73:3b:fd:9c:25:66:3c:2e:dd:89:a3:cd:c5:33:f0:14:9d:a0:
ff:06:31:a7:fc:ec:ed:0f:85:b0:34:51:2b:06:a5:40:58:ab:
1e:13:0e:f2:a3:6f:6d:85:c1:1c:22:71:42:08:fd:04:a8:3d:
4d:d0:6e:67:0d:e8:aa:86:10:8b:59:b7:ff:0e:1e:37:64:cb:
f4:39:71:8a:a4:55:27:4f:6f:27:9c:d8:a9:0b:ef:08:33:21:
cc:c1:46:5a:e0:3e:f5:5a:55:f6:3d:66:4f:76:2c:38:cb:c2:
56:c7:00:c7:ad:9f:e2:b2:cc:cd:06:7f:59:52:96:79:c8:9b:
fb:65:8d:d9:cc:2f:d9:36:cb:67:3f:ec:38:43:12:17:af:b3:
e8:8c:fe:35:3a:04:d0:c1:0f:18:ab:a3:3e:e0:ec:1b:dd:5e:
cf:c0:c7:06:1f:72:9b:04:f0:82:5d:5b:bc:a3:e5:6d:9a:0c:
47:89:35:9a:6e:e9:a2:cc:93:5a:c7:74:64:eb:bd:92:f9:d0:
1e:69:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:23 2024 by rpki-client on console-ams.rpki-client.org