Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/tqGqKarub4KzmFUL2LOHe3aCBvw.roa
File: tqGqKarub4KzmFUL2LOHe3aCBvw.roa (raw, json)
Hash identifier: FyKlUddlQuse5WjdnLHIj5AOXOJcaW9AkDGh8Qkft54=
Subject key identifier: B6:A1:AA:29:AA:EE:6F:82:B3:98:55:0B:D8:B3:87:7B:76:82:06:FC
Certificate issuer: /CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Certificate serial: 0183C5E70C6668691A30E592632F54C8ECBA
Authority key identifier: CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/tqGqKarub4KzmFUL2LOHe3aCBvw.roa
Signing time: Tue 11 Oct 2022 07:16:37 +0000
ROA not before: Tue 11 Oct 2022 07:16:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 92.119.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:e7:0c:66:68:69:1a:30:e5:92:63:2f:54:c8:ec:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Validity
Not Before: Oct 11 07:16:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6a1aa29aaee6f82b398550bd8b3877b768206fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:67:5b:4c:da:68:56:86:8f:d3:1a:76:36:
3a:18:8e:04:b9:ff:97:60:d2:31:9e:1e:8a:ca:9f:
cc:e5:bf:58:40:89:77:ef:6f:74:a5:0e:c7:28:53:
d7:9f:4c:91:11:96:59:52:d4:76:fd:c8:33:93:fd:
30:8f:8e:d5:c4:6a:a3:3b:d7:0c:a9:5f:55:f5:8d:
28:ce:45:e2:77:7b:d7:e3:7c:0a:cd:a1:f2:e4:b1:
9b:8f:a1:35:5c:6e:bb:63:b8:4b:07:63:39:0a:15:
0c:b5:8b:d1:67:c1:9a:6b:c0:50:e2:28:ab:83:6a:
fc:5d:f0:f3:b0:b6:fb:7c:a4:10:02:ca:78:62:da:
03:80:56:a1:5a:b4:c7:e0:54:23:ac:66:f6:84:e5:
18:30:c9:5e:6f:49:4f:08:a0:5c:a1:af:68:b9:69:
a1:91:4a:6b:a9:38:e2:6c:fa:8c:c6:35:69:a7:d4:
08:9e:4f:4d:6f:a4:e0:cc:2b:4e:ac:7a:14:fe:b8:
58:59:67:84:e9:a0:9f:6a:bd:a2:06:40:ad:02:b0:
ee:05:6d:1d:7c:b5:1c:fc:16:33:b3:6d:aa:23:f3:
bc:79:a8:14:8b:4b:3a:1e:08:72:e6:05:0a:62:4f:
73:cc:29:a8:46:59:5d:c2:4e:30:8a:d8:b8:57:b0:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:AA:29:AA:EE:6F:82:B3:98:55:0B:D8:B3:87:7B:76:82:06:FC
X509v3 Authority Key Identifier:
keyid:CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/tqGqKarub4KzmFUL2LOHe3aCBvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/za7RPzCm3J1NJ3DTIyNtH9IEU5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:66:a1:4c:b7:a4:0d:a8:2a:f8:65:27:15:db:bb:f8:e6:15:
cc:05:29:ba:99:03:88:b1:ac:33:0f:5e:d8:cd:fb:72:8f:99:
eb:10:63:31:2f:3c:62:e2:ee:c0:3f:fa:2d:0c:8f:64:03:76:
f0:b6:f9:31:10:08:51:83:ca:3e:63:6f:26:4c:1a:f3:99:c4:
08:bf:e0:8a:aa:90:19:9b:1f:b5:0a:3a:2d:7e:a7:7f:19:4c:
78:4e:8c:30:97:7d:e7:19:9a:b8:03:de:80:c1:8c:ed:f1:45:
96:56:f5:18:97:ba:10:72:78:d6:48:dc:55:71:c4:e9:72:f4:
df:9c:c4:60:5d:6d:fb:35:f9:1b:18:57:bb:59:8c:94:a7:ea:
67:4f:69:dd:c4:ed:68:7d:9a:1b:4c:d8:01:70:55:3e:7b:68:
4e:b7:6b:fd:ee:30:9b:87:d9:91:f5:96:00:50:43:e3:12:6f:
bb:e8:e0:87:5d:b8:9d:97:63:93:96:10:bd:c7:c0:04:94:5b:
5c:cc:ef:0d:c1:a8:97:24:df:6c:47:59:4d:33:af:01:42:9a:
cd:1e:73:fd:a7:54:b4:8d:fb:cc:08:2b:88:24:ba:7b:40:0d:
9a:89:20:fd:a8:ef:ce:cc:1a:ca:c0:26:d6:2e:73:09:cc:a4:
b0:89:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:54 2024 by rpki-client on console-fra.rpki-client.org