Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/qtINBuoPKYGrO9CEZlcUM_nfxt4.roa
File: qtINBuoPKYGrO9CEZlcUM_nfxt4.roa (raw, json)
Hash identifier: xrgko1rc+8ZQZMThnuhXhKWfPSfTx1rgWhPsvIH+GA8=
Subject key identifier: AA:D2:0D:06:EA:0F:29:81:AB:3B:D0:84:66:57:14:33:F9:DF:C6:DE
Certificate issuer: /CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Certificate serial: 074C6B6B
Authority key identifier: 2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/qtINBuoPKYGrO9CEZlcUM_nfxt4.roa
Signing time: Mon 31 Jan 2022 14:59:57 +0000
ROA not before: Mon 31 Jan 2022 14:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209730
IP address blocks: 193.26.121.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122448747 (0x74c6b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Validity
Not Before: Jan 31 14:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aad20d06ea0f2981ab3bd08466571433f9dfc6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:e0:27:60:c2:81:2c:b3:ce:92:10:ef:f3:
6e:82:1b:49:5a:0b:70:fa:ff:a5:b1:b5:8b:ba:1a:
8e:59:a9:8b:9a:e3:77:32:6d:de:c8:2e:92:29:3f:
1b:28:16:87:9f:ec:58:21:a1:d8:20:ff:49:0a:c0:
df:a6:6d:85:c9:d7:61:07:e9:b9:65:7c:17:67:11:
e5:c1:2b:5e:98:0d:ab:ef:0e:9d:81:2e:29:10:e7:
6d:aa:23:db:3c:7a:2b:0c:99:95:c5:c3:72:2c:dd:
7b:97:62:a6:24:fc:6a:d4:bf:51:f2:c2:0f:57:3b:
72:1b:2f:0f:a0:92:07:26:54:d9:aa:1a:92:0f:52:
b2:ef:2a:02:08:76:b3:6a:d3:38:0f:49:40:11:74:
43:1c:30:6e:d0:8d:f4:6e:5e:03:91:91:78:69:ce:
10:1b:ae:fc:41:31:66:0a:b3:c7:d6:be:17:84:af:
32:16:ee:84:7c:ac:c5:db:00:ac:33:5e:96:4c:d8:
4c:c6:bc:37:bd:c6:92:1d:e3:5d:ca:cb:d0:21:aa:
d8:e6:8d:11:0a:30:cb:9d:25:31:c9:7f:6a:00:43:
df:e4:59:cb:4c:94:bd:72:10:f4:c2:bd:9f:e3:be:
08:33:da:56:54:d9:09:34:f0:dc:69:eb:2f:15:f1:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:0D:06:EA:0F:29:81:AB:3B:D0:84:66:57:14:33:F9:DF:C6:DE
X509v3 Authority Key Identifier:
keyid:2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/qtINBuoPKYGrO9CEZlcUM_nfxt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.21.0-193.26.22.255
193.26.121.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9d:10:62:0b:a7:35:c2:0c:db:81:ac:13:3c:76:7b:37:5e:
d6:ac:d2:63:68:69:d6:4e:2d:6c:73:01:50:ea:3e:73:15:fb:
db:c7:73:16:f6:4a:9a:a9:8f:91:cf:a6:a9:01:6c:2f:cb:f2:
c3:59:ae:2b:9f:f1:1f:f0:a7:7c:c7:4b:81:9e:b5:e5:75:ad:
5a:08:11:5f:12:ea:6f:1b:92:bf:16:44:08:9e:7f:fe:b3:30:
15:20:c3:81:c4:6e:67:dc:1e:a0:1f:72:73:28:17:42:24:94:
cb:15:64:3f:65:dc:07:24:20:6f:03:0f:2a:d7:e3:b3:7a:c9:
d3:bd:79:eb:68:6e:37:4e:43:81:df:bf:5f:73:d3:6b:b6:ed:
f5:fe:ff:14:c1:1c:dc:d4:2e:44:6a:5c:7d:51:b6:b0:65:c2:
e0:f2:9a:f8:5e:8f:02:fb:60:a8:15:0c:24:9a:95:1f:63:f1:
f9:ae:1b:64:40:e0:ae:99:a3:fd:da:5b:bf:4e:23:17:93:c9:
63:08:4e:bb:b9:b4:bd:a9:9b:46:d8:9c:25:51:6c:08:c4:d5:
24:83:e9:66:a8:15:9b:6d:87:5e:b1:b7:33:4c:9a:96:26:75:
e9:b4:99:7a:eb:64:1d:da:c4:f6:36:f3:9f:e2:9b:4d:53:c7:
50:2e:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org