Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/QQYHuusZz9pU2hchtbMIMjcIxrs.roa
File: QQYHuusZz9pU2hchtbMIMjcIxrs.roa (raw, json)
Hash identifier: B3bLMkRawkZaiTwDS/B4B2g+BECTLLGPv9Ok+iGwr48=
Subject key identifier: 41:06:07:BA:EB:19:CF:DA:54:DA:17:21:B5:B3:08:32:37:08:C6:BB
Certificate issuer: /CN=b9e9715aa915236be45d32664d9ad9f37f4cea60
Certificate serial: 08A9C0CF
Authority key identifier: B9:E9:71:5A:A9:15:23:6B:E4:5D:32:66:4D:9A:D9:F3:7F:4C:EA:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uelxWqkVI2vkXTJmTZrZ839M6mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/QQYHuusZz9pU2hchtbMIMjcIxrs.roa
Signing time: Sat 01 Jan 2022 15:06:43 +0000
ROA not before: Sat 01 Jan 2022 15:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8823
IP address blocks: 193.35.80.0/22 maxlen: 22
2a0d:6140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145342671 (0x8a9c0cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e9715aa915236be45d32664d9ad9f37f4cea60
Validity
Not Before: Jan 1 15:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=410607baeb19cfda54da1721b5b308323708c6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:68:c1:4c:16:55:06:1d:53:66:73:56:44:
2f:cf:a2:70:81:1b:9f:3a:62:9d:d9:ba:60:35:67:
80:ea:d3:18:85:3e:19:4c:89:4f:3b:f7:03:67:ab:
7b:b2:07:8f:52:35:5c:a9:d2:90:35:89:3d:f3:cb:
91:23:21:0d:cd:bb:d3:1d:c5:d8:fe:f4:f9:5e:4a:
f2:74:a8:cf:91:96:ac:d9:d4:12:4f:d0:e5:64:04:
e0:9b:c9:86:e3:8b:c0:fc:2f:47:6a:9a:1d:46:f2:
a8:a7:95:c2:32:ba:b2:65:c3:8a:0a:08:bf:56:eb:
46:ec:0f:97:5e:30:76:01:34:7a:d0:e9:b1:58:0f:
48:9d:0f:f4:32:bf:bc:ba:9e:4c:ab:d2:e7:16:3a:
fc:39:93:ed:59:80:6c:78:46:60:66:c9:60:74:c7:
2b:41:9d:d7:a9:6a:9b:82:c9:56:22:ad:a1:dd:9f:
c5:27:e9:c0:40:d3:be:16:f5:85:af:a2:bc:56:de:
1d:7e:90:e7:a1:62:e2:e8:22:c6:21:dd:07:e0:ee:
fe:f0:f8:98:3f:09:d3:60:8e:f5:c4:24:87:04:f9:
0d:ce:de:8c:fc:a5:bd:e4:04:69:45:3c:15:11:23:
86:7b:6e:96:cf:17:a9:78:6b:fd:13:90:1e:67:29:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:07:BA:EB:19:CF:DA:54:DA:17:21:B5:B3:08:32:37:08:C6:BB
X509v3 Authority Key Identifier:
keyid:B9:E9:71:5A:A9:15:23:6B:E4:5D:32:66:4D:9A:D9:F3:7F:4C:EA:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uelxWqkVI2vkXTJmTZrZ839M6mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/QQYHuusZz9pU2hchtbMIMjcIxrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/35bfd4-addf-4d45-a0fb-9939d16f8165/1/uelxWqkVI2vkXTJmTZrZ839M6mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.80.0/22
IPv6:
2a0d:6140::/29
Signature Algorithm: sha256WithRSAEncryption
98:31:7b:ca:ba:f9:32:c1:ce:06:31:c5:f4:cb:ae:30:6c:c4:
71:8d:17:f9:99:0b:60:10:42:49:67:06:98:23:15:2c:ab:c7:
d9:bc:e8:8d:50:97:c6:88:86:49:cd:f9:8a:ab:67:0f:ac:c6:
49:ab:07:ba:b4:a7:67:c6:8b:cc:02:6d:ab:df:07:3a:9f:84:
1d:37:c6:b3:5a:c1:29:a1:62:64:5c:58:87:7d:ad:80:64:8f:
85:34:8a:cf:79:57:5d:48:66:31:2e:a7:06:b9:cd:d5:d2:19:
63:8a:b8:7b:09:4f:68:b6:ed:a4:d2:0c:41:d8:28:00:cd:4f:
4f:44:fd:95:d2:29:73:6e:cd:6e:c7:59:a3:fd:4a:08:37:b5:
4b:18:7b:a2:00:9c:0f:58:e5:0b:73:2a:1b:a9:3b:0e:84:69:
54:76:b8:12:f3:3f:5e:fd:0e:51:ed:7b:3a:8a:b8:7e:37:d8:
57:38:f8:2a:9c:9b:da:50:b6:3a:6a:7d:33:e1:11:a3:ea:e3:
ec:97:94:f4:51:b4:07:22:8f:ef:87:8e:8c:5a:a5:69:70:e8:
75:40:94:10:89:fb:3a:80:0f:b0:9c:a2:24:b2:ab:de:85:49:
94:24:21:20:ef:6f:3d:c0:eb:db:5d:c3:1d:d9:4f:c5:17:4f:
9b:04:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-fra.rpki-client.org