Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/dqR87K0CPTE9Q3VHc4Z-s23i-wc.roa
File: dqR87K0CPTE9Q3VHc4Z-s23i-wc.roa (raw, json)
Hash identifier: J6UGQjiOi0qBrlzpSivIhtW9KC0jMb4pYUpKpHBePZk=
Subject key identifier: 76:A4:7C:EC:AD:02:3D:31:3D:43:75:47:73:86:7E:B3:6D:E2:FB:07
Certificate issuer: /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial: 018204AB9541F33F935041C4776A795DE065
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/dqR87K0CPTE9Q3VHc4Z-s23i-wc.roa
Signing time: Sat 16 Jul 2022 01:42:09 +0000
ROA not before: Sat 16 Jul 2022 01:42:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.181.182.0/24 maxlen: 24
5.181.181.0/24 maxlen: 24
185.176.92.0/24 maxlen: 24
185.176.94.0/23 maxlen: 23
185.216.104.0/24 maxlen: 24
185.229.222.0/23 maxlen: 23
185.229.221.0/24 maxlen: 24
185.216.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:ab:95:41:f3:3f:93:50:41:c4:77:6a:79:5d:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Validity
Not Before: Jul 16 01:42:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76a47cecad023d313d43754773867eb36de2fb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:a8:00:4a:51:82:81:6c:a5:6b:fd:5a:06:
1e:b2:94:0d:ae:6d:7d:d7:2a:c1:4f:dd:30:37:b7:
28:e0:3a:ee:d6:94:1f:8e:9f:79:5e:b8:ef:19:1f:
fd:3a:9a:75:c3:fc:80:8c:8c:66:cd:6b:58:09:12:
97:74:51:b2:1d:03:60:53:f5:02:9a:92:71:6e:81:
c1:b4:ab:cd:6d:0e:47:39:9c:9b:eb:87:06:53:af:
e1:45:3e:e8:94:9b:d4:f4:b4:9a:f3:65:9f:3f:d1:
16:96:c1:94:45:28:0a:fe:2d:ad:0c:9b:47:5d:ca:
55:b4:d5:13:74:f7:b8:1f:5e:8a:56:30:84:1a:3b:
ed:9a:98:8c:15:31:c0:c0:3f:4d:45:a8:bd:53:21:
45:8b:f1:67:63:1d:b5:0a:e8:55:41:f5:57:2f:46:
b2:3d:68:0f:62:26:5e:88:a0:4a:0e:42:86:cc:8a:
a8:7e:18:f3:72:de:18:1d:92:b2:17:8a:39:b4:b1:
5d:6a:08:a6:15:e2:1e:17:f1:cd:a8:49:57:cc:db:
d3:de:e6:b3:0f:4a:dd:4a:ab:3f:56:df:e1:ff:50:
58:88:32:a1:0b:b4:49:9c:e2:32:8f:78:91:43:c6:
2b:3e:75:52:43:2b:c4:06:3c:ce:13:e7:32:51:04:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:7C:EC:AD:02:3D:31:3D:43:75:47:73:86:7E:B3:6D:E2:FB:07
X509v3 Authority Key Identifier:
keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/dqR87K0CPTE9Q3VHc4Z-s23i-wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.181.0-5.181.182.255
185.176.92.0/24
185.176.94.0/23
185.216.104.0/24
185.216.106.0/23
185.229.221.0-185.229.223.255
Signature Algorithm: sha256WithRSAEncryption
b9:74:10:b8:e5:87:d5:03:e3:1a:65:63:e8:bc:d6:bb:a8:52:
6a:c0:39:6b:41:68:79:16:57:77:39:c2:85:da:bd:e9:fa:2b:
e3:2a:99:01:55:03:85:b8:0d:27:dc:48:d7:8a:d9:a1:36:13:
1f:99:d1:fd:7b:85:d3:02:ec:51:54:2c:f6:7b:41:72:3d:7e:
54:0c:f4:b1:06:ab:e7:06:45:49:8f:57:8f:5e:e9:3d:e0:36:
7b:e2:4c:35:d6:8c:d1:38:ee:b2:a0:de:e7:fc:13:c3:06:15:
eb:71:23:e1:af:aa:78:ff:99:95:e1:2e:47:ff:e5:22:ab:43:
31:56:db:43:9f:7a:58:ff:3e:25:a1:0a:4c:85:19:4f:82:a9:
dc:94:02:89:d4:db:60:4a:d6:ee:fc:92:88:c7:60:83:67:f1:
87:19:2b:1a:4e:5d:c2:23:b5:70:03:51:d9:f8:4a:37:9b:98:
3f:d9:f5:bc:73:e8:b7:04:f6:62:1d:91:cf:a4:9c:76:a8:17:
c8:bb:e2:80:66:50:6a:c8:59:74:ef:79:4c:eb:e1:24:61:4d:
f0:a1:1c:25:f4:35:89:9b:bc:f8:a9:77:24:fc:5b:ee:b0:e0:
85:10:cf:71:4b:09:49:61:ce:ee:02:3b:5f:bf:cb:c5:c8:83:
a4:81:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:24 2023 by rpki-client on console-fra.rpki-client.org