Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/qbIvH4aNrbovVdwJW6h7p9BoQJA.roa
File: qbIvH4aNrbovVdwJW6h7p9BoQJA.roa (raw, json)
Hash identifier: kpysEOEfuwCH2yTMzD5b+GZEy55xttSSIfvCljFpKWI=
Subject key identifier: A9:B2:2F:1F:86:8D:AD:BA:2F:55:DC:09:5B:A8:7B:A7:D0:68:40:90
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 01878693BFA943DC6E7AB210F77D6311BD46
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/qbIvH4aNrbovVdwJW6h7p9BoQJA.roa
Signing time: Sat 15 Apr 2023 20:20:42 +0000
ROA not before: Sat 15 Apr 2023 20:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 92.249.24.0/24 maxlen: 24
92.249.26.0/24 maxlen: 24
92.249.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:93:bf:a9:43:dc:6e:7a:b2:10:f7:7d:63:11:bd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Apr 15 20:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9b22f1f868dadba2f55dc095ba87ba7d0684090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:46:c5:64:95:d8:b0:64:af:3e:de:d2:5f:
ec:7d:3a:4e:d8:5b:a5:5f:24:3b:f0:f3:5f:b3:94:
a2:0e:b3:9c:fe:ac:83:71:05:9f:c9:c0:6a:9c:d1:
f4:fa:6a:f5:b5:62:0a:75:a6:91:a3:c2:6a:37:eb:
32:49:00:41:26:8a:38:3c:18:57:28:e3:65:3f:0c:
cc:cb:d8:eb:65:bc:c6:b3:8a:16:69:7d:80:3a:b6:
23:ed:1f:9d:5f:00:d3:04:12:32:eb:32:fd:df:5b:
c0:d0:16:18:7d:10:bf:68:61:a2:fc:7b:ae:d8:3f:
66:86:41:3b:0e:ba:16:20:0c:ba:e2:4f:1c:f9:bb:
31:d0:59:2d:08:fb:1e:3b:62:4a:7e:f1:de:d8:7a:
45:e7:ce:f8:de:71:55:15:41:ab:a8:29:37:d4:22:
6f:49:53:87:d2:6c:be:8f:01:7a:64:27:50:a3:0e:
97:2c:f0:b3:9e:9d:9a:5a:ca:a5:27:90:53:fe:b5:
8b:7e:9d:40:cc:bc:82:f2:f1:83:a9:bc:48:fe:62:
af:f7:3d:d2:ae:95:7f:9a:0f:0e:5d:4d:05:6c:4b:
da:59:ce:6f:16:6c:a9:6e:08:65:bc:d6:98:4e:72:
64:63:eb:42:ea:c4:2a:18:18:8f:1d:6a:f5:d4:c6:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:2F:1F:86:8D:AD:BA:2F:55:DC:09:5B:A8:7B:A7:D0:68:40:90
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/qbIvH4aNrbovVdwJW6h7p9BoQJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
92.249.26.0/23
Signature Algorithm: sha256WithRSAEncryption
95:5f:03:c3:3b:f4:f7:b2:08:79:c5:ee:77:22:47:a4:7c:eb:
0a:c3:3c:f6:05:e0:e4:15:08:59:c4:48:45:b4:be:46:12:cf:
90:fb:55:87:fe:3a:c1:18:d9:67:ff:95:4e:13:f7:c3:23:cf:
46:bd:3f:d5:72:db:2f:9d:60:05:17:27:1c:80:47:47:9e:b6:
8e:66:ad:94:67:21:c2:f6:09:96:e6:47:f0:fa:d5:fb:1c:fe:
ee:24:26:f7:91:bf:7f:f7:77:e2:c9:df:94:16:da:67:0f:47:
a3:e3:7a:ff:64:cc:73:0f:8d:ff:ac:31:83:88:97:fa:0d:a8:
e4:25:db:34:35:38:8e:25:5d:c4:d3:c9:05:d2:57:33:f6:c5:
0b:a1:33:ad:19:07:7d:a7:5a:d4:80:47:70:c7:b0:aa:62:c8:
ab:a7:f0:76:85:fb:76:64:f1:44:32:e2:0a:1f:1c:35:fe:b6:
06:2e:29:f2:b6:34:c4:53:f8:eb:90:66:20:4b:28:85:13:89:
30:57:d8:9b:5b:67:8e:b3:7c:43:7e:6a:01:2d:7f:72:12:99:
77:fe:a6:2a:99:3d:cc:dc:0b:2d:c7:56:4c:64:c8:af:e8:9e:
b0:d8:18:01:11:71:70:46:8a:68:c1:09:42:32:65:05:50:d1:
f7:28:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:26 2023 by rpki-client on console-ams.rpki-client.org