Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/QmoaXH_bZ7yk7kGrneNa99VHMxI.roa
File: QmoaXH_bZ7yk7kGrneNa99VHMxI.roa (raw, json)
Hash identifier: /yUY+BfQQ+T7nzZk3DwvcRtow4wnJgEHhOruC47EuZw=
Subject key identifier: 42:6A:1A:5C:7F:DB:67:BC:A4:EE:41:AB:9D:E3:5A:F7:D5:47:33:12
Certificate issuer: /CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Certificate serial: 05F930F2
Authority key identifier: B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/QmoaXH_bZ7yk7kGrneNa99VHMxI.roa
Signing time: Sat 01 Jan 2022 14:07:21 +0000
ROA not before: Sat 01 Jan 2022 14:07:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209288
IP address blocks: 185.112.73.0/24 maxlen: 24
151.248.17.0/24 maxlen: 24
151.248.16.0/24 maxlen: 24
151.248.16.0/22 maxlen: 22
151.248.19.0/24 maxlen: 24
151.248.18.0/24 maxlen: 24
2a05:ccc0::/29 maxlen: 29
2a10:c080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100217074 (0x5f930f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Validity
Not Before: Jan 1 14:07:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=426a1a5c7fdb67bca4ee41ab9de35af7d5473312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:15:d5:ad:6f:84:99:72:87:34:bd:e0:06:
84:91:95:0a:dd:86:2b:bc:36:b0:32:02:ee:40:e8:
fd:54:13:4b:fd:5b:5e:b8:37:1e:54:53:1f:4f:5f:
1d:e5:6a:43:6c:11:1d:75:f6:89:4a:dc:6e:ff:8d:
ca:36:b9:50:dc:1b:ad:88:4e:02:59:9d:7b:7e:d4:
02:26:26:c9:a7:c0:82:4a:78:98:08:6d:44:52:4e:
95:00:4b:a1:80:71:4f:ab:69:11:da:41:3f:b4:6f:
ca:46:7e:c7:c6:11:f2:6c:8d:a4:47:3d:00:f1:36:
f9:4f:e7:b8:25:b7:99:d7:f3:15:71:c4:38:fb:c6:
2b:a1:c8:83:2b:d2:6e:38:66:67:a3:8f:0f:1a:30:
2f:3e:a4:5d:13:b8:f5:fa:f8:16:51:a8:cc:c5:19:
14:51:9f:31:4f:5b:64:b4:86:91:34:3c:c5:bd:12:
5c:2c:95:0c:c3:5a:fc:3b:7a:32:1e:05:9a:73:49:
7f:d8:c8:57:4f:2b:23:df:e7:38:05:d9:c6:9b:1d:
59:d8:72:98:40:b1:67:88:9b:e4:70:bd:74:49:ab:
bc:9d:fe:de:f1:fa:a1:05:d0:16:5d:c0:ad:e3:aa:
93:4a:1d:63:f7:7b:61:e2:a7:41:50:94:31:19:93:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:1A:5C:7F:DB:67:BC:A4:EE:41:AB:9D:E3:5A:F7:D5:47:33:12
X509v3 Authority Key Identifier:
keyid:B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/QmoaXH_bZ7yk7kGrneNa99VHMxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.16.0/22
185.112.73.0/24
IPv6:
2a05:ccc0::/29
2a10:c080::/29
Signature Algorithm: sha256WithRSAEncryption
c3:02:6d:ff:62:95:99:9e:95:2d:98:52:a8:2b:b0:72:1c:03:
ec:41:d4:79:54:51:87:c8:f8:3b:f0:42:32:3a:54:53:eb:6c:
75:ed:c3:59:d9:6d:52:58:d0:1a:97:9a:b4:7f:c0:cb:6a:1c:
61:cb:15:75:b2:82:95:1d:f5:5c:fb:69:1e:eb:73:da:c3:45:
ea:e3:fb:16:7e:7b:1f:0e:42:4a:4d:88:80:eb:bc:46:d5:4c:
a7:55:b2:ac:8b:71:3f:f7:36:35:af:94:aa:94:6d:57:7c:3d:
3b:d0:36:c9:b0:0c:f0:8e:89:bd:49:1b:9e:74:70:68:18:44:
1d:fb:1c:0e:5a:16:3d:e1:4a:8b:28:ba:bd:4e:1f:a6:4e:87:
a1:f6:5b:bc:19:cf:00:ae:66:73:bc:02:a4:ae:7b:27:f5:6f:
d6:35:95:43:f2:a3:c8:a1:b4:33:3f:16:89:55:cd:31:b7:f1:
a4:62:95:59:cb:43:76:30:ba:84:f6:93:f5:c9:79:af:da:b3:
2e:91:c1:7d:cf:1f:96:81:a3:e1:cb:c3:d0:0f:dc:bd:57:55:
1b:f7:55:2f:7f:61:f8:34:1e:9a:fb:af:0b:b8:7c:aa:2d:f7:
a0:d8:c2:f4:8e:a0:81:d4:ec:0c:b9:90:88:13:b1:dc:09:54:
15:66:9b:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:49 2024 by rpki-client on console-fra.rpki-client.org