Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/Qwuw2oUijzvSMdheHccesxJkog0.roa
File: Qwuw2oUijzvSMdheHccesxJkog0.roa (raw, json)
Hash identifier: mxhNBLBef0ZCfF14D7siNZs+UP6wg7EZVyLfJXQP0C4=
Subject key identifier: 43:0B:B0:DA:85:22:8F:3B:D2:31:D8:5E:1D:C7:1E:B3:12:64:A2:0D
Certificate issuer: /CN=c0a40ef08447b1e28445e4414523c51957298c2d
Certificate serial: 01C5C98A
Authority key identifier: C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/Qwuw2oUijzvSMdheHccesxJkog0.roa
Signing time: Sat 01 Jan 2022 05:55:40 +0000
ROA not before: Sat 01 Jan 2022 05:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212855
IP address blocks: 185.36.229.0/24 maxlen: 24
2a07:cd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29739402 (0x1c5c98a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a40ef08447b1e28445e4414523c51957298c2d
Validity
Not Before: Jan 1 05:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=430bb0da85228f3bd231d85e1dc71eb31264a20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:81:52:04:c3:59:11:e8:8b:9a:80:8b:34:
10:d7:98:6e:61:a1:3f:66:1b:a7:11:68:a9:0e:fc:
68:02:31:be:ed:5d:75:06:13:78:84:42:a3:fa:97:
a2:20:1a:cb:b2:a1:12:22:30:ce:2e:8e:a5:d9:16:
d0:5d:d8:7f:9e:7b:9d:04:fd:63:27:7e:9e:d8:78:
1f:f3:70:b5:25:be:0f:38:d8:88:d9:b9:9e:69:37:
e7:92:4f:99:30:e4:f2:2c:56:b7:39:45:4e:11:6c:
4f:98:7b:8a:ca:32:90:5d:4b:a9:9e:ff:49:ea:c9:
5b:df:e7:e7:19:f0:5a:85:e7:6c:5f:d8:b2:05:b2:
6b:e3:92:6e:a2:7d:ee:54:99:38:0a:d0:66:80:ff:
d5:63:44:93:b3:63:79:b6:80:6f:59:81:7b:bf:e4:
74:0c:0f:a2:13:d2:29:ff:7f:6f:e1:e9:08:82:43:
e6:77:4a:70:9a:b8:7e:17:da:dd:3d:b6:56:ba:e5:
3f:e1:eb:eb:9c:c8:ec:ee:6c:9d:f5:f1:52:5c:94:
5c:c0:6b:d8:e4:d6:c9:fc:9d:a5:5b:fe:23:46:e9:
b5:01:d1:a4:c9:05:11:6d:9a:e7:fe:59:aa:ff:70:
bc:98:f0:5a:03:77:ec:d9:5d:a2:c5:3e:7c:83:16:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:B0:DA:85:22:8F:3B:D2:31:D8:5E:1D:C7:1E:B3:12:64:A2:0D
X509v3 Authority Key Identifier:
keyid:C0:A4:0E:F0:84:47:B1:E2:84:45:E4:41:45:23:C5:19:57:29:8C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKQO8IRHseKEReRBRSPFGVcpjC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/Qwuw2oUijzvSMdheHccesxJkog0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bc4027-6d47-4275-816a-478648bf7010/1/wKQO8IRHseKEReRBRSPFGVcpjC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.229.0/24
IPv6:
2a07:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
5b:d4:46:f3:a2:b4:78:4b:77:ed:16:0e:a0:a0:7c:82:fa:2a:
9d:e3:f8:ed:62:3b:bc:30:2c:35:3d:62:d0:56:f2:a3:f6:c5:
a2:3d:af:4b:67:12:2c:4c:bf:95:be:79:45:50:a8:ed:21:37:
1d:72:71:54:da:8f:26:23:a2:3c:27:05:f6:46:07:f1:04:3b:
12:5e:95:c3:4d:e0:84:cb:10:cb:16:cd:15:21:1a:7e:2f:d3:
ec:d7:54:70:9a:3a:9e:44:76:6a:fe:a7:c2:8c:73:c9:9a:58:
95:74:1a:08:fe:2d:6f:65:46:0d:82:7b:c3:fb:2d:01:92:9f:
81:5a:38:47:54:bc:08:f3:bc:63:e2:aa:74:14:6d:ee:ac:c7:
2a:e5:8c:75:3a:89:c6:c6:0c:23:c3:da:32:2a:d9:37:d7:6c:
93:43:76:1d:9d:89:79:a9:a1:17:d4:99:e6:ce:74:8a:ab:ec:
7d:2c:8d:80:ea:e1:8c:58:ce:f4:1a:cc:7a:6e:c8:48:19:25:
9b:be:c9:31:e5:5f:c7:a3:10:7b:f7:78:8c:25:8a:7c:07:eb:
2b:82:bc:2c:c6:24:35:4e:5a:5b:db:7c:8a:3a:30:67:ac:d6:
fa:83:b3:97:3e:3c:67:7d:36:a5:b5:00:98:0b:b8:3b:b1:39:
01:ac:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:51 2024 by rpki-client on console-ams.rpki-client.org