Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Qt8yEHByvdn8mRQ6Amic33MszDw.roa
File: Qt8yEHByvdn8mRQ6Amic33MszDw.roa (raw, json)
Hash identifier: QXkEFUPaieI4Pf7S4DbvxyrjsF15CfDhg88+ElTii5o=
Subject key identifier: 42:DF:32:10:70:72:BD:D9:FC:99:14:3A:02:68:9C:DF:73:2C:CC:3C
Certificate issuer: /CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Certificate serial: 01831D17825B438BEDA3812776ACD4F8BCAD
Authority key identifier: 62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Qt8yEHByvdn8mRQ6Amic33MszDw.roa
Signing time: Thu 08 Sep 2022 12:33:43 +0000
ROA not before: Thu 08 Sep 2022 12:33:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49305
IP address blocks: 185.228.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:17:82:5b:43:8b:ed:a3:81:27:76:ac:d4:f8:bc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Validity
Not Before: Sep 8 12:33:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42df32107072bdd9fc99143a02689cdf732ccc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:03:1a:99:39:a6:fa:9f:e4:4f:35:48:dd:
2f:1f:ef:0a:0e:f1:5e:e9:14:db:16:96:46:10:f8:
aa:44:7b:98:82:2f:10:df:ae:68:db:9e:94:b3:df:
6d:bf:31:1b:33:da:ef:58:13:59:8f:c8:f5:73:75:
ef:97:6d:e1:8b:8a:41:49:c9:50:8f:5d:97:b9:6d:
a7:27:25:db:d0:5e:5f:ef:8a:aa:ed:bd:08:72:87:
38:fa:12:12:a2:8a:ae:ca:bf:ce:d9:26:17:c1:73:
02:72:0a:7c:18:63:4a:dc:8f:28:71:02:e6:6a:2a:
cb:20:d7:23:a7:95:2a:da:45:6d:03:6d:3e:14:1c:
08:cd:6d:4f:9c:d6:e8:f4:dd:75:83:0c:75:9a:dc:
73:76:aa:db:1c:3e:2a:49:fc:31:ae:45:05:e8:6c:
05:01:18:49:f3:64:fc:5f:b3:d5:ec:97:39:21:53:
40:fe:e6:55:86:bc:f5:3b:82:41:1e:b9:3b:0c:f0:
d8:14:b0:2f:42:9a:af:b6:99:26:4d:9c:1e:60:13:
dd:49:03:c7:8e:bd:23:65:bb:4e:9c:ce:17:0f:60:
be:7f:76:d7:e2:cd:41:88:20:00:6d:3b:8b:6a:c1:
d6:00:db:f6:5a:f8:fc:2a:c4:dd:ee:98:a9:3a:41:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DF:32:10:70:72:BD:D9:FC:99:14:3A:02:68:9C:DF:73:2C:CC:3C
X509v3 Authority Key Identifier:
keyid:62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Qt8yEHByvdn8mRQ6Amic33MszDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:12:1e:02:68:fe:97:b3:09:17:53:78:bc:45:c8:05:e0:e9:
58:1e:61:a0:88:d6:6b:01:95:7a:a4:91:8f:f9:cf:7a:45:bf:
10:49:06:35:ad:61:69:6b:84:d7:29:17:d2:ba:4f:dd:85:28:
ee:be:4e:57:3a:f7:7c:86:86:68:1b:ad:64:27:82:40:d5:6b:
ee:40:52:85:0b:9c:63:4d:a2:60:28:8c:0d:24:24:40:50:af:
14:fb:00:6f:2e:d7:36:79:a6:b3:4a:7d:58:6b:c7:da:10:e0:
c9:f3:ed:b2:fe:e1:21:c9:f6:c2:24:f6:18:75:24:4f:83:a7:
a7:18:fb:b9:ee:49:5f:e8:08:0a:76:07:cd:2a:af:05:4f:c1:
f6:0b:ed:11:b7:de:09:ba:b7:78:c5:3a:fa:f8:02:d9:c8:73:
0e:b3:c9:1a:e1:96:7b:8c:ed:cb:32:7b:da:e7:f7:07:82:b4:
14:83:16:dc:b5:d4:ce:48:1f:bf:ad:b7:fa:4a:71:1c:13:12:
1c:43:a3:cf:a8:1d:9d:f7:35:3a:84:7a:af:9b:02:35:07:fc:
f5:52:3a:4c:fa:ed:6a:5e:a8:25:a4:4d:18:d4:e4:63:74:77:
41:0a:70:56:ae:0e:5a:9e:76:28:71:19:84:5d:db:33:56:f6:
4c:d1:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:01 2024 by rpki-client on console-ams.rpki-client.org