Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/1QgRN-9zFzb_vsZZkgLgT7kHDY8.roa
File: 1QgRN-9zFzb_vsZZkgLgT7kHDY8.roa (raw, json)
Hash identifier: qLBbpscSuekOGZZXGiQEXJ7tDfHG6NUz0+wNVcK54IE=
Subject key identifier: D5:08:11:37:EF:73:17:36:FF:BE:C6:59:92:02:E0:4F:B9:07:0D:8F
Certificate issuer: /CN=e295f4dd0cecbedc6916dd1f8683524c088bef63
Certificate serial: 01856FE703741B5BF81B4F93DEE1F2F8D73F
Authority key identifier: E2:95:F4:DD:0C:EC:BE:DC:69:16:DD:1F:86:83:52:4C:08:8B:EF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pX03QzsvtxpFt0fhoNSTAiL72M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/1QgRN-9zFzb_vsZZkgLgT7kHDY8.roa
Signing time: Mon 02 Jan 2023 00:34:48 +0000
ROA not before: Mon 02 Jan 2023 00:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29639
IP address blocks: 194.5.31.0/24 maxlen: 24
194.5.30.0/24 maxlen: 24
194.5.38.0/24 maxlen: 24
194.5.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:03:74:1b:5b:f8:1b:4f:93:de:e1:f2:f8:d7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e295f4dd0cecbedc6916dd1f8683524c088bef63
Validity
Not Before: Jan 2 00:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5081137ef731736ffbec6599202e04fb9070d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:45:8f:45:28:67:61:42:93:88:49:58:7c:
f2:24:47:fe:23:b3:df:24:6e:de:b1:2b:41:44:b9:
5a:51:09:d5:d6:c1:84:5c:a2:68:bb:f8:05:c3:b5:
da:47:04:b0:f4:db:83:46:6e:29:37:c7:0e:f3:f6:
38:e3:59:2b:95:9e:1b:dc:00:e8:ef:5b:5f:b9:4b:
e7:db:1b:df:c2:0b:80:e8:c0:ef:7b:a2:ef:dc:51:
29:88:ab:54:b7:af:ec:b0:44:64:6e:d6:7b:79:c6:
d8:ab:f6:73:8b:02:04:74:ca:47:44:ba:fb:b0:a9:
58:82:56:38:8e:fc:b7:d7:d3:ac:00:27:04:ae:21:
22:02:0d:d3:52:36:c4:63:9c:0f:db:db:4a:de:64:
5e:10:55:86:0e:93:a3:41:91:6e:19:2b:82:cd:cd:
bc:b9:b9:32:ae:7c:10:05:35:42:20:3a:bc:d5:16:
09:ad:4e:94:82:cd:a2:b1:79:e6:22:67:d1:90:bc:
71:df:a1:67:5d:68:12:2e:9b:39:0b:8d:fa:27:24:
67:2f:60:f0:f0:11:14:4e:fb:20:95:cd:b1:cd:7f:
1a:88:45:ed:46:e5:b3:d4:2b:92:08:45:48:32:ca:
24:25:58:99:cc:3d:fe:94:e3:ca:fe:4d:14:db:54:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:11:37:EF:73:17:36:FF:BE:C6:59:92:02:E0:4F:B9:07:0D:8F
X509v3 Authority Key Identifier:
keyid:E2:95:F4:DD:0C:EC:BE:DC:69:16:DD:1F:86:83:52:4C:08:8B:EF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pX03QzsvtxpFt0fhoNSTAiL72M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/1QgRN-9zFzb_vsZZkgLgT7kHDY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/4pX03QzsvtxpFt0fhoNSTAiL72M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.30.0/23
194.5.37.0-194.5.38.255
Signature Algorithm: sha256WithRSAEncryption
6c:a3:c3:ce:f7:36:ed:57:62:d1:d2:4a:9f:ec:f9:0f:f3:9e:
ec:f2:2d:d8:de:36:43:b4:58:9c:79:87:51:25:7b:19:15:1e:
c9:1a:df:2e:f3:85:77:b5:f6:96:bd:79:ca:3d:af:80:3e:9f:
8e:dc:59:29:fd:96:0f:7f:48:48:68:7f:69:a1:51:66:5d:d8:
75:66:45:71:69:b4:0f:93:a2:e8:b6:28:a6:b6:45:35:02:5b:
d8:fd:5b:34:f2:a6:09:f4:0d:eb:27:c2:cf:49:99:73:8b:c8:
00:05:15:7f:67:8b:f7:7c:71:a5:39:8c:03:07:d6:28:50:c9:
ba:92:50:e3:ea:6b:d2:14:cc:81:db:f5:35:e8:9f:4f:c5:6b:
9e:9c:07:7e:5d:95:6b:7e:ca:4a:d8:50:2e:87:1c:23:a8:02:
c1:f3:c6:8d:a3:e7:fe:fc:4e:81:50:5a:54:71:e9:bb:c2:f4:
55:0d:c6:44:b9:49:84:33:0b:8d:60:5a:b0:77:e8:1d:eb:1f:
10:2f:d7:cf:24:ec:d8:3f:b8:11:0e:91:2e:f5:fa:44:35:d0:
7e:85:be:69:e5:87:3f:4b:06:61:c0:a1:0a:85:e4:d6:4d:fe:
a2:88:a5:7c:1e:4f:07:21:18:ff:5a:41:3b:6e:a6:58:41:59:
a8:c5:6d:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:30 2023 by rpki-client on console-ams.rpki-client.org