Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/QTdlDJYfjlHZ6UwSB1GSNAzpAqs.roa
File: QTdlDJYfjlHZ6UwSB1GSNAzpAqs.roa (raw, json)
Hash identifier: KHt2GlSQMDIzvXI1+EjEnWDprB/qAYgx7qz6GaF9dKA=
Subject key identifier: 41:37:65:0C:96:1F:8E:51:D9:E9:4C:12:07:51:92:34:0C:E9:02:AB
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 09170E5D
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/QTdlDJYfjlHZ6UwSB1GSNAzpAqs.roa
Signing time: Sat 01 Jan 2022 13:01:09 +0000
ROA not before: Sat 01 Jan 2022 13:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 92.249.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152505949 (0x9170e5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Jan 1 13:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4137650c961f8e51d9e94c12075192340ce902ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:f5:12:a3:52:b8:e9:1d:6b:b6:d0:ba:d3:
79:51:6d:f8:1d:34:62:99:01:4a:be:ce:ea:0e:b6:
3a:14:92:22:c0:97:85:d6:16:d5:c5:7a:1e:7b:71:
36:cd:18:63:82:7b:b3:c7:77:7c:d8:9b:5a:01:22:
95:9d:33:4f:28:3b:66:13:2d:f1:e4:b2:2a:e5:d1:
87:8f:93:3f:37:05:ad:6a:f4:74:4c:d1:32:19:1e:
26:1d:62:89:62:f1:8f:5a:c3:9c:d5:2b:cd:8c:11:
10:70:02:9b:f1:79:2b:5c:d7:1f:7c:c7:32:af:bb:
d3:22:f9:98:71:72:dc:03:e5:7b:95:d3:77:b4:e4:
20:e5:6b:a3:6c:c8:46:cf:7c:90:07:83:e5:77:93:
9e:35:09:0f:35:47:c1:bc:78:3b:99:5e:3c:aa:03:
24:e5:5b:e4:02:21:6c:9e:96:d3:59:d4:c4:ca:32:
72:6d:8c:3e:27:3c:fb:eb:91:33:ef:a1:f1:56:ca:
b3:64:1a:72:ea:aa:c5:f8:de:f8:32:64:40:97:81:
de:8b:fc:7a:7e:86:7a:8b:41:f0:f0:0c:1a:5b:3c:
71:93:04:5c:8e:4e:3a:72:e7:03:0e:b0:4f:4e:9c:
7e:c6:8c:51:33:24:61:c1:26:6b:99:95:80:30:16:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:65:0C:96:1F:8E:51:D9:E9:4C:12:07:51:92:34:0C:E9:02:AB
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/QTdlDJYfjlHZ6UwSB1GSNAzpAqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
Signature Algorithm: sha256WithRSAEncryption
14:57:54:dd:00:5d:b4:de:f1:95:a8:9e:90:10:9a:da:82:7f:
64:c1:f2:7d:43:17:77:d3:d5:56:df:36:c2:0a:03:dc:e4:01:
eb:77:4d:4f:dd:71:f2:86:e7:d0:fc:0f:a9:ff:1a:55:c0:6a:
97:5d:86:d7:20:1c:96:1a:34:c2:42:cf:77:24:f5:13:d6:f1:
c4:f7:92:aa:5a:3a:79:69:40:a1:97:42:58:08:3d:f7:77:a7:
a1:e0:6a:dc:11:8d:b8:25:4b:90:61:4a:f4:ce:26:84:4b:40:
99:56:f7:9e:89:d9:29:46:a0:dc:60:d0:b0:af:6e:4b:cf:00:
f1:e5:b7:88:4c:83:81:b6:7f:ad:38:56:32:c3:47:5f:7e:c2:
54:63:5d:df:6b:f6:18:8f:7a:a6:ca:d8:18:3c:24:0b:ad:3c:
6b:81:66:e4:7e:2d:26:29:50:e9:87:f1:7c:f6:07:0f:36:93:
de:a0:4b:75:e8:7f:9d:75:f2:18:9e:6c:d4:fe:69:95:b0:52:
4a:2e:13:f2:85:18:2b:b3:db:c5:5e:a9:08:f8:53:23:b5:6a:
d0:6e:d3:39:76:95:94:4c:66:8e:18:98:ed:19:0f:79:02:bc:
ed:68:9c:53:f3:7b:e7:ec:cd:c2:ef:07:a5:b3:c4:0c:f6:96:
16:8d:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org