Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/qbVw2NI5rg3c9W0HT_yQtbqvEJo.roa
File: qbVw2NI5rg3c9W0HT_yQtbqvEJo.roa (raw, json)
Hash identifier: wZ6oT53OuY+WzIHYEEu5QXJK4SNKgA06WeHt1ZW6ViQ=
Subject key identifier: A9:B5:70:D8:D2:39:AE:0D:DC:F5:6D:07:4F:FC:90:B5:BA:AF:10:9A
Certificate issuer: /CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Certificate serial: 01661BD5
Authority key identifier: 53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/qbVw2NI5rg3c9W0HT_yQtbqvEJo.roa
Signing time: Fri 11 Mar 2022 20:38:00 +0000
ROA not before: Fri 11 Mar 2022 20:38:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208261
IP address blocks: 62.204.43.0/24 maxlen: 24
193.58.42.0/23 maxlen: 24
45.149.56.0/22 maxlen: 22
193.57.226.0/23 maxlen: 23
2a0f:ce00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23469013 (0x1661bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Validity
Not Before: Mar 11 20:38:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9b570d8d239ae0ddcf56d074ffc90b5baaf109a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:90:16:8d:44:8d:2e:0b:ab:86:dc:63:fc:
07:7b:03:97:9a:5f:ff:e0:e1:6f:56:b6:a3:0f:dd:
0a:6a:a9:33:97:8e:ba:89:eb:d5:0d:51:f3:ad:b1:
1b:1e:f8:c8:df:c0:92:7e:ec:55:f5:4d:de:95:a9:
eb:5f:8c:08:38:a9:10:11:50:06:6b:e9:58:48:71:
4d:e5:6e:a8:6c:48:39:01:6e:d5:26:42:77:0a:b8:
1a:1b:44:ff:a9:87:0e:3a:ff:2f:fe:80:8d:f1:3d:
30:e8:b4:7d:ef:ef:b1:3f:c7:f5:8d:f4:e8:0d:bd:
78:4d:69:21:cd:83:9a:f9:ea:e4:26:e4:cf:71:0d:
37:88:4c:97:a1:db:75:75:98:9e:a3:0a:9a:b9:3f:
ee:99:90:7d:72:de:6c:42:3d:83:58:c8:22:50:2c:
bc:9c:21:34:2c:09:2e:eb:23:35:10:3b:1f:60:b8:
14:07:9a:ff:f6:6a:ee:f4:a9:f5:f1:e0:0e:29:a7:
9e:8b:c7:cb:dc:fd:a8:ad:8f:84:5b:4b:e1:ca:2f:
64:ec:8c:f2:59:5f:67:e3:24:6e:56:66:ea:a9:fe:
dc:9f:5b:9e:0a:ac:88:b6:92:50:61:c2:5e:70:47:
40:39:38:2e:9a:78:a9:c0:55:96:db:31:af:9d:bb:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:70:D8:D2:39:AE:0D:DC:F5:6D:07:4F:FC:90:B5:BA:AF:10:9A
X509v3 Authority Key Identifier:
keyid:53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/qbVw2NI5rg3c9W0HT_yQtbqvEJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/U3GSzI_PUugejQUwRm_pmlaq89E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.56.0/22
62.204.43.0/24
193.57.226.0/23
193.58.42.0/23
IPv6:
2a0f:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
43:79:af:25:9a:94:f7:1e:e3:51:18:b0:b2:06:a1:53:42:64:
c1:96:ba:c0:8d:48:97:31:a8:ca:9c:6f:94:fd:61:9e:23:45:
ac:38:e2:de:52:4a:21:7c:ff:4d:9a:d2:25:cf:de:27:cb:c8:
03:5b:46:5f:89:b1:2a:ca:eb:84:95:47:40:5f:7b:57:ff:cf:
40:3d:28:06:07:71:53:a6:8e:91:d2:d6:8d:f1:e3:fd:52:a0:
f3:58:a5:69:a7:08:98:81:43:57:3f:7a:e6:30:6a:8f:bc:39:
d7:c7:11:69:40:d8:7c:90:02:6d:96:0c:5f:3a:24:40:fe:3c:
ef:67:fd:28:79:df:08:5b:aa:31:e2:46:9e:2b:61:a6:d0:8b:
2b:28:c5:be:7f:0b:45:9a:59:50:68:b7:e9:3b:e6:60:4c:1f:
1e:f8:a8:2c:c2:4f:b2:dc:5c:8b:97:b6:86:2c:b0:91:88:8b:
1e:50:a6:e2:ab:08:75:fa:4d:0b:86:df:fe:34:8f:04:b1:14:
5c:64:ef:87:8c:51:20:b5:8e:b6:4c:d6:2e:0f:a1:d0:ff:7c:
cd:47:0f:f8:1b:d3:9d:56:d4:8c:70:7c:85:9d:c1:62:91:6a:
df:f4:5a:e2:8c:bd:96:72:48:0b:b4:84:8c:a4:b9:cc:8b:69:
3f:73:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:27 2024 by rpki-client on console-fra.rpki-client.org