Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/qKhVPHvn7f0hHIb2WaeNrZADmqY.roa
File: qKhVPHvn7f0hHIb2WaeNrZADmqY.roa (raw, json)
Hash identifier: R+O9DzKyUh9kmqwNizjXBUMuy0rsUhgskK+AdVX8Sd0=
Subject key identifier: A8:A8:55:3C:7B:E7:ED:FD:21:1C:86:F6:59:A7:8D:AD:90:03:9A:A6
Certificate issuer: /CN=bb40290d0e6b0d8f556bde10519e135ffc098621
Certificate serial: 0561F634
Authority key identifier: BB:40:29:0D:0E:6B:0D:8F:55:6B:DE:10:51:9E:13:5F:FC:09:86:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/qKhVPHvn7f0hHIb2WaeNrZADmqY.roa
Signing time: Sat 01 Jan 2022 07:54:19 +0000
ROA not before: Sat 01 Jan 2022 07:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 185.218.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90306100 (0x561f634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb40290d0e6b0d8f556bde10519e135ffc098621
Validity
Not Before: Jan 1 07:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8a8553c7be7edfd211c86f659a78dad90039aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:7b:fe:8b:59:92:f2:e8:98:d8:c9:fd:55:
3e:5a:36:69:f0:8a:99:52:d8:78:5c:38:7c:0d:e3:
4e:05:9b:5a:e2:ab:75:f2:4e:3c:1d:b1:e4:d7:3c:
db:52:62:90:0c:fb:a3:71:e4:de:6b:22:3f:df:a4:
d2:91:7c:0d:74:03:57:50:49:f3:0d:fd:8c:a0:ac:
81:ae:c5:9f:88:47:27:78:78:79:45:81:d2:9d:8c:
0a:28:e2:c4:42:56:fb:05:44:b1:7a:fb:47:a4:d8:
1e:68:bd:3f:ba:31:dd:f7:9e:ea:05:47:2d:ea:7a:
30:af:aa:d0:22:80:9c:91:21:b9:71:1a:68:74:eb:
b9:2f:47:10:80:8d:48:b2:43:05:a4:88:e9:7e:00:
35:1c:b8:d0:45:96:93:f2:bf:b1:53:63:33:8e:5e:
80:da:a0:28:7f:8f:19:b9:72:8c:30:28:17:3f:79:
b2:a6:b0:33:05:c5:18:7e:b1:18:fe:55:b2:63:a4:
34:43:44:59:75:eb:41:31:64:ed:bc:34:2e:22:0d:
48:f3:4a:3d:e3:c7:b0:8d:78:e6:ff:39:07:01:7a:
7b:e8:53:8b:d6:8e:c5:9d:46:62:b3:07:70:97:37:
6e:86:b7:37:64:25:35:48:4e:0a:b0:a5:87:ac:c5:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A8:55:3C:7B:E7:ED:FD:21:1C:86:F6:59:A7:8D:AD:90:03:9A:A6
X509v3 Authority Key Identifier:
keyid:BB:40:29:0D:0E:6B:0D:8F:55:6B:DE:10:51:9E:13:5F:FC:09:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/qKhVPHvn7f0hHIb2WaeNrZADmqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.252.0/22
Signature Algorithm: sha256WithRSAEncryption
30:32:1d:cc:fa:d8:a9:f3:b8:4d:a4:a7:a5:5a:71:19:60:ad:
4d:ff:d2:01:1d:3c:00:0b:9f:11:5d:a4:04:b4:3f:8b:ed:8a:
a0:88:8e:f7:d8:05:16:d5:aa:6e:58:20:41:40:c2:b5:52:8c:
bb:f6:cb:17:55:7e:d1:5b:2e:22:9c:f6:f7:91:1b:53:27:d1:
c9:8f:a7:32:0a:36:be:66:f6:29:bf:16:b1:ca:50:d8:f9:02:
0b:ea:fa:96:48:27:09:bf:76:88:29:cf:07:2f:fb:23:2c:00:
11:1a:42:f7:25:8c:f2:35:e5:c1:c9:b6:ba:f4:92:89:a3:7d:
a0:13:47:66:19:fe:8c:83:0c:15:09:b0:ba:d7:31:9b:2b:d2:
a9:3f:b7:af:9c:f8:e0:66:e3:f8:4d:16:a1:d2:03:8e:a7:04:
72:01:06:47:ae:b0:a7:64:1f:b2:78:c5:94:ce:18:5a:04:24:
8d:8b:1a:e9:1b:eb:88:94:b5:82:39:d7:37:33:8f:bc:e7:c0:
55:c5:b2:35:c8:9f:69:e4:89:bf:ab:cf:3e:71:18:aa:5e:d1:
30:48:6c:a0:e9:4e:9a:57:c9:65:d2:1b:38:e1:a8:38:1e:35:
86:0c:72:6f:45:30:9a:c6:9e:72:99:bf:0f:6e:9a:80:61:05:
a1:10:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:49 2024 by rpki-client on console-ams.rpki-client.org