Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/qGrO4NT6mP_3Uzuvmc4P_R0uF8Q.roa
File: qGrO4NT6mP_3Uzuvmc4P_R0uF8Q.roa (raw, json)
Hash identifier: B8on3Rr2R97/zDfdbuWgkz5cl+u76kligrzBo+5VIYw=
Subject key identifier: A8:6A:CE:E0:D4:FA:98:FF:F7:53:3B:AF:99:CE:0F:FD:1D:2E:17:C4
Certificate issuer: /CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Certificate serial: 0354DD8F
Authority key identifier: 62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/qGrO4NT6mP_3Uzuvmc4P_R0uF8Q.roa
Signing time: Sat 01 Jan 2022 02:59:55 +0000
ROA not before: Sat 01 Jan 2022 02:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 185.228.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55893391 (0x354dd8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62b79dd3dc6463df003ed8f11e7cd6bdb140aef5
Validity
Not Before: Jan 1 02:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a86acee0d4fa98fff7533baf99ce0ffd1d2e17c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:6c:c0:c0:f0:4e:01:10:e1:b4:46:b0:aa:
69:18:5b:17:a7:76:91:78:c3:00:35:c4:34:c9:0e:
8b:e1:28:47:6d:2c:f4:58:95:03:9f:8a:80:6c:b5:
66:30:b5:26:43:b6:c0:b4:1a:37:09:4f:bd:79:67:
e0:7b:d2:c7:bd:e7:9a:cd:ce:28:44:cf:9c:08:f3:
ab:14:1d:0e:28:84:db:60:c3:90:ae:73:3f:14:ba:
a6:aa:ef:64:9f:6d:57:99:07:2e:57:f9:d9:2a:ac:
ef:14:c7:f3:21:39:12:50:2b:78:d2:6f:af:3b:ea:
47:8a:db:cd:51:6a:9a:97:60:46:22:cc:8a:cd:cb:
c8:71:7e:fe:d0:e1:28:2b:ed:2e:ed:50:90:79:d8:
6f:0f:9f:7f:43:cf:b4:3f:fb:63:10:b7:5f:59:38:
9d:ec:16:3f:da:ce:fd:13:83:a9:68:3c:c5:07:7e:
00:68:f9:02:34:c3:7e:05:e6:9b:26:74:79:c1:62:
a8:6d:43:98:a4:c8:ed:7f:ff:73:27:91:8f:dc:b3:
25:a6:7a:f3:d9:79:ea:fd:ba:22:06:8d:1b:ca:44:
80:a7:d6:1e:13:24:0f:ba:2a:a3:58:d4:7c:1e:76:
20:b3:a2:c9:f4:8b:75:7d:bd:8b:56:d5:a0:95:86:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6A:CE:E0:D4:FA:98:FF:F7:53:3B:AF:99:CE:0F:FD:1D:2E:17:C4
X509v3 Authority Key Identifier:
keyid:62:B7:9D:D3:DC:64:63:DF:00:3E:D8:F1:1E:7C:D6:BD:B1:40:AE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yred09xkY98APtjxHnzWvbFArvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/qGrO4NT6mP_3Uzuvmc4P_R0uF8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b65a14-9cd7-4667-abee-67ef20768490/1/Yred09xkY98APtjxHnzWvbFArvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:70:a7:7b:3a:ce:b1:63:0d:43:17:fd:8f:f2:67:3e:63:cd:
93:52:f9:01:c2:47:0d:98:9c:7a:1f:53:8d:f8:aa:e1:c8:79:
2d:55:48:e0:cc:81:29:80:ee:3d:c7:7c:b6:73:9f:dc:1a:2b:
e4:be:95:9d:dd:55:51:f2:3e:61:73:35:cb:42:d2:e9:f0:8b:
70:d9:24:6c:58:04:a9:b7:4a:f5:34:92:a4:2c:7b:43:3e:95:
42:b9:5b:62:3a:4f:c6:4d:43:2e:d8:65:87:c8:cd:e8:c0:38:
73:e9:c9:68:26:2c:a7:35:64:c2:5d:2a:83:7b:2b:59:93:f1:
15:a9:08:e1:50:a6:59:4b:e0:08:5f:c9:5f:ef:5b:a6:58:81:
08:82:f9:92:71:d7:2c:e8:93:aa:8d:f3:1f:1f:39:40:68:78:
69:da:33:4e:ef:e1:1a:d1:61:bb:fe:56:44:b2:db:ac:bf:3b:
04:1f:40:87:30:85:7a:3b:6a:ee:b8:87:8e:9b:98:94:f4:b2:
89:67:c6:3a:06:10:f8:58:1d:fa:9c:1d:ba:62:1b:65:0a:dd:
b4:41:39:03:45:1a:15:85:07:e2:a0:25:00:48:2e:f3:1f:64:
de:50:60:90:d5:67:db:b7:6b:34:39:c6:62:ee:9f:e0:90:81:
15:8c:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:01 2024 by rpki-client on console-ams.rpki-client.org