Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/qmvuSaxqNmgNWqDSN9EzPx7cexM.roa
File: qmvuSaxqNmgNWqDSN9EzPx7cexM.roa (raw, json)
Hash identifier: 3uqVMQQa3sr9un29MeoRbjF3TEBNQJawyX6QYYlzuAI=
Subject key identifier: AA:6B:EE:49:AC:6A:36:68:0D:5A:A0:D2:37:D1:33:3F:1E:DC:7B:13
Certificate issuer: /CN=fd60dbd9a63e1d3b8ecb5c0b3fcb71a2499d86bd
Certificate serial: 018570E76FB6FBEE169129F5DA101F05AAB9
Authority key identifier: FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WDb2aY-HTuOy1wLP8txokmdhr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/qmvuSaxqNmgNWqDSN9EzPx7cexM.roa
Signing time: Mon 02 Jan 2023 05:14:53 +0000
ROA not before: Mon 02 Jan 2023 05:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209326
IP address blocks: 130.193.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:6f:b6:fb:ee:16:91:29:f5:da:10:1f:05:aa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd60dbd9a63e1d3b8ecb5c0b3fcb71a2499d86bd
Validity
Not Before: Jan 2 05:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa6bee49ac6a36680d5aa0d237d1333f1edc7b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:73:67:15:a6:8b:f5:1f:85:4a:11:18:ea:
60:7b:f9:e5:93:df:33:b6:fb:b9:b2:e6:27:9e:2b:
9c:eb:a8:4a:a3:d8:c5:0d:f3:11:51:6d:ce:5d:b1:
20:af:39:07:79:c3:93:02:24:c6:e0:04:8d:d3:57:
39:3b:c2:af:c4:87:61:15:11:c6:d9:db:d3:19:5a:
77:8a:e2:69:15:c4:62:98:09:02:f6:05:bc:54:86:
49:0d:e6:ca:71:f0:db:3d:c1:fb:0f:5f:a5:e3:10:
6c:f7:cb:46:d6:4d:a5:81:d1:4c:27:6c:c1:21:84:
b5:5b:98:20:d1:e7:16:07:f1:e2:d6:1a:c0:8a:20:
fe:33:9e:a7:4c:a9:ec:68:9e:79:a3:97:56:80:0a:
0b:03:99:f1:77:63:fb:f3:a5:03:88:e0:32:3e:55:
7d:be:70:c9:0c:a0:16:7b:aa:49:d2:0f:9e:52:4c:
1e:ca:51:02:84:00:46:c4:a3:fb:40:16:9a:9e:62:
5e:eb:08:63:7b:0b:f1:13:d4:4c:15:f1:b2:b8:2a:
f6:f6:05:d7:dd:4e:af:51:f2:ce:99:4f:ad:db:04:
66:07:d9:da:5e:96:7b:89:32:73:ae:88:41:28:49:
a5:b9:68:0f:bc:78:b5:35:95:9e:f6:ee:40:4e:5c:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6B:EE:49:AC:6A:36:68:0D:5A:A0:D2:37:D1:33:3F:1E:DC:7B:13
X509v3 Authority Key Identifier:
keyid:FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WDb2aY-HTuOy1wLP8txokmdhr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/qmvuSaxqNmgNWqDSN9EzPx7cexM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/_WDb2aY-HTuOy1wLP8txokmdhr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
82:48:26:5a:fa:2a:91:52:e2:fa:7d:78:ca:a1:8b:71:7f:7b:
01:e8:bf:6b:49:35:2f:a8:0c:d8:5f:77:0f:f1:ba:ee:9a:a7:
98:4f:36:09:b9:5b:53:d1:de:c3:81:e7:72:c8:2b:03:59:68:
3a:4c:20:5f:2a:84:fd:fc:3a:ea:f3:ee:44:3b:21:01:86:49:
1d:b2:87:20:78:88:77:f2:71:6c:de:58:e1:38:c1:76:99:f9:
88:9a:17:70:bb:6d:97:90:9d:4d:fc:18:b8:18:23:c1:5c:ec:
c5:25:88:bf:9e:f5:71:f0:84:f4:3c:e5:4f:ec:08:cf:43:a5:
92:a3:e1:1e:23:29:be:4f:d8:c7:b5:53:1d:67:b7:b7:5d:e5:
76:a9:89:18:87:de:9f:db:a8:49:e2:b9:4a:a6:4a:07:8c:f6:
f5:36:6e:6f:85:ef:d5:c0:4c:23:a8:c4:db:44:d2:5b:ef:56:
1e:19:df:8b:30:cb:5b:58:29:a9:1e:c3:29:2f:cf:17:ea:38:
e2:f0:78:4c:d4:af:48:97:6e:06:03:e6:f6:75:96:84:ed:5a:
25:ce:26:af:e0:ec:33:cf:ed:0a:3e:39:c1:e1:60:69:21:12:
6e:31:b3:39:fa:1f:d5:6c:d0:f1:99:a8:80:5f:07:07:a7:af:
ad:09:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 13:39:40 2023 by rpki-client on console-ams.rpki-client.org