Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/QfMaN8XD6PcKf6myyz-0j4fnkcw.roa
File: QfMaN8XD6PcKf6myyz-0j4fnkcw.roa (raw, json)
Hash identifier: YHE/Gt+bMjp+Z+4qLgwR3M/CPVtf/kFYVpqIj+eEcqI=
Subject key identifier: 41:F3:1A:37:C5:C3:E8:F7:0A:7F:A9:B2:CB:3F:B4:8F:87:E7:91:CC
Certificate issuer: /CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
Certificate serial: 01856FF9629513F4197D7DD58A042C5D0396
Authority key identifier: 1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/QfMaN8XD6PcKf6myyz-0j4fnkcw.roa
Signing time: Mon 02 Jan 2023 00:54:52 +0000
ROA not before: Mon 02 Jan 2023 00:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50131
IP address blocks: 188.93.139.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:62:95:13:f4:19:7d:7d:d5:8a:04:2c:5d:03:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b731c9cd1efa389724aa266ff280f4c108c7bec
Validity
Not Before: Jan 2 00:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41f31a37c5c3e8f70a7fa9b2cb3fb48f87e791cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:24:b2:95:63:b5:c6:23:ea:74:43:ba:89:
3d:b9:15:da:51:f6:46:fc:25:c6:e1:13:78:d0:58:
dd:97:57:0c:34:07:a6:f4:e3:7f:9d:4e:b7:65:8f:
67:32:54:2b:23:65:5c:5a:c8:33:e3:8f:59:86:bd:
4c:72:7c:68:4c:8c:1f:0b:66:7f:d9:1e:d3:7f:01:
47:e1:9c:66:da:bf:9d:44:51:a5:97:bd:13:d7:d1:
31:ca:c7:ee:11:da:7a:b2:c8:28:c5:a0:11:b7:c0:
ad:d7:97:51:25:4b:b9:b0:db:ad:d2:83:98:63:7b:
7c:40:00:21:7e:69:9b:c3:53:40:71:ae:f0:f7:24:
5c:17:aa:a8:23:9c:02:c0:04:26:1f:0e:09:a2:7b:
e4:dc:e6:9a:dc:95:d1:8d:51:70:24:ea:43:ce:57:
9c:a7:f6:94:57:c2:4b:0a:fb:fb:dd:ce:86:c0:33:
7c:25:2f:cd:a0:39:69:93:ec:f6:a0:27:b9:89:0f:
95:fa:a1:1d:73:5c:ee:6b:5b:61:59:45:4b:57:f2:
31:ec:e4:04:63:37:6a:26:ea:ca:10:85:f7:3e:9b:
b8:20:11:e7:8d:ba:e1:07:31:5e:2e:80:77:29:ce:
e9:af:5d:ec:21:fb:de:de:d3:d8:1d:a2:62:95:80:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F3:1A:37:C5:C3:E8:F7:0A:7F:A9:B2:CB:3F:B4:8F:87:E7:91:CC
X509v3 Authority Key Identifier:
keyid:1B:73:1C:9C:D1:EF:A3:89:72:4A:A2:66:FF:28:0F:4C:10:8C:7B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3McnNHvo4lySqJm_ygPTBCMe-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/QfMaN8XD6PcKf6myyz-0j4fnkcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c82faf-5733-4d46-946f-79a121fcf6a8/1/G3McnNHvo4lySqJm_ygPTBCMe-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.139.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f0:0b:35:b1:f3:dd:3d:0c:de:7a:bf:bd:27:e8:a0:f3:9a:
4c:95:83:85:df:77:d3:e3:aa:ad:dd:73:24:a6:1d:16:cc:9c:
3b:e6:f1:d4:cc:b9:de:af:ed:c9:27:c2:30:e8:83:d4:7a:55:
31:ed:57:5c:06:28:13:02:de:8c:23:df:11:ce:4b:1d:6e:a0:
34:bb:d2:85:89:b7:e3:0e:f6:0e:b2:5d:a5:df:3b:0c:9a:be:
ad:0b:ef:51:79:2f:6c:eb:dc:5d:7e:fe:59:5d:33:11:78:3b:
73:fd:ea:9d:cc:08:bb:a3:41:ec:e5:d1:82:b7:30:60:34:52:
9a:d6:04:23:a8:12:c1:a6:ff:db:c7:b5:7f:c2:d4:a5:df:ef:
ed:a5:cb:15:05:02:39:e6:5f:a3:74:93:45:89:b2:fe:13:86:
d5:4e:85:c1:36:a6:b1:60:10:49:fc:65:c1:be:7d:57:66:d4:
47:00:87:6f:57:68:95:8c:34:43:0b:8a:0c:23:fb:9b:96:9e:
69:f3:2e:5f:d4:aa:f4:64:63:d7:10:1f:49:65:27:4d:b2:6d:
92:27:d1:52:a3:48:a2:2c:57:8d:d1:8a:7d:99:a4:42:a9:1c:
73:84:b9:d0:3b:2c:dd:92:7a:30:f9:5d:b5:33:fa:c0:52:9a:
7d:16:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:09 2024 by rpki-client on console-ams.rpki-client.org