Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/QBQ4UoMDz1VS0L8Vv8rhJoGssmc.roa
File: QBQ4UoMDz1VS0L8Vv8rhJoGssmc.roa (raw, json)
Hash identifier: 6Bt1FD9i2htcH/Kxce+5M/UXie6LcUCvnDUZTflA9vE=
Subject key identifier: 40:14:38:52:83:03:CF:55:52:D0:BF:15:BF:CA:E1:26:81:AC:B2:67
Certificate issuer: /CN=655db0434a917bb2980986a7c84e3512c2a895ad
Certificate serial: 07
Authority key identifier: 65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/QBQ4UoMDz1VS0L8Vv8rhJoGssmc.roa
Signing time: Wed 02 Feb 2022 06:24:39 +0000
ROA not before: Wed 02 Feb 2022 06:24:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 194.70.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655db0434a917bb2980986a7c84e3512c2a895ad
Validity
Not Before: Feb 2 06:24:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=401438528303cf5552d0bf15bfcae12681acb267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:e2:5e:18:d5:50:d5:7d:f1:8f:60:20:5b:
5e:46:af:b4:71:80:f2:41:df:f6:2c:15:90:91:0b:
a9:88:55:80:6f:44:62:bb:98:84:6f:65:5a:eb:a9:
8e:36:a5:4a:cf:36:42:07:63:3c:65:20:7c:30:af:
ed:51:cb:1f:bc:40:a3:8e:07:ae:4d:6e:ad:fd:e0:
df:cd:89:35:7f:3d:da:91:3d:42:cc:d0:7f:a0:6f:
be:86:ae:01:6f:5e:be:7d:a2:30:fc:4d:a5:f5:06:
95:cd:e1:f5:ba:9d:ce:b5:31:88:e8:82:47:e0:ed:
54:f0:f4:c2:54:a2:cf:01:01:8e:c5:b3:7e:f6:69:
bd:5b:4e:11:1b:83:62:61:76:f6:b5:40:3e:7b:99:
24:30:4b:14:c6:4a:e0:48:50:90:65:10:1c:15:4c:
28:bf:86:64:41:55:b9:91:a9:e1:c7:c2:2e:b1:64:
04:53:ec:7e:e3:b7:3d:a8:73:03:ff:f8:1f:bb:7f:
cb:d8:ef:61:67:f4:bd:dc:a3:11:68:07:31:52:d2:
7f:ac:34:32:8a:a6:30:64:72:87:ed:7f:ea:2a:54:
2f:99:ec:1b:df:9c:67:b6:46:a1:68:33:ce:f1:92:
f5:d2:7e:11:72:7e:04:1d:25:f0:de:88:ac:81:be:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:38:52:83:03:CF:55:52:D0:BF:15:BF:CA:E1:26:81:AC:B2:67
X509v3 Authority Key Identifier:
keyid:65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/QBQ4UoMDz1VS0L8Vv8rhJoGssmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/ZV2wQ0qRe7KYCYanyE41EsKola0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.70.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b0:0c:bb:bb:75:45:01:53:1c:67:db:bd:d0:71:24:f8:28:
fc:34:a2:19:80:c3:7b:2e:4b:89:e7:6f:c0:8d:52:b2:c5:e3:
8c:a5:61:3a:9c:76:4e:cb:54:d4:02:a1:ed:ca:d1:bf:1e:58:
a9:1c:49:12:fd:17:e2:0d:a5:38:aa:91:48:59:53:51:3d:51:
6c:9f:66:ec:4b:31:7c:bc:2b:91:9e:fc:0f:03:a9:60:2d:ef:
e4:61:43:7f:c7:55:ee:ac:c9:14:c7:5f:26:a3:fc:d1:b8:06:
ae:35:61:c7:c0:6a:5d:d4:2f:84:88:64:bf:1c:37:ae:04:a0:
4d:32:a5:48:97:1f:e7:b6:e7:61:8f:62:3b:5d:64:17:72:42:
d9:52:ee:7c:64:68:8f:25:76:fc:e1:1f:17:1f:17:43:0c:38:
28:76:00:99:4e:d2:cc:db:07:bc:2f:94:99:dd:3c:8b:c6:a2:
ab:31:95:45:c8:68:76:35:72:fd:1e:37:9e:81:d7:fd:b5:98:
e9:48:99:11:71:1a:4d:6f:a1:5e:64:7a:05:c2:c7:b8:2a:06:
28:49:10:9d:50:a5:d4:f9:78:9f:ef:79:e4:a7:8e:2f:9b:d4:
b9:f4:78:28:a9:96:6d:5e:86:0d:5b:82:13:f9:2b:f5:0a:6c:
68:6f:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:08 2024 by rpki-client on console-fra.rpki-client.org