Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/Q-WS_1eQZ2HZIaTKS4UQBgC0WA8.roa
File: Q-WS_1eQZ2HZIaTKS4UQBgC0WA8.roa (raw, json)
Hash identifier: eZqnFjJxWRCzTG0KoEItC18SHXXm2bG1IsXZmAymG1Y=
Subject key identifier: 43:E5:92:FF:57:90:67:61:D9:21:A4:CA:4B:85:10:06:00:B4:58:0F
Certificate issuer: /CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Certificate serial: 0D45CB25
Authority key identifier: D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/Q-WS_1eQZ2HZIaTKS4UQBgC0WA8.roa
Signing time: Tue 08 Feb 2022 12:47:15 +0000
ROA not before: Tue 08 Feb 2022 12:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 185.240.240.0/24 maxlen: 24
185.240.242.0/23 maxlen: 23
185.240.241.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
2a0c:2500::/32 maxlen: 32
2a09:6302::/32 maxlen: 32
2a09:6301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222677797 (0xd45cb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Validity
Not Before: Feb 8 12:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43e592ff57906761d921a4ca4b85100600b4580f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:cc:92:87:2d:f2:84:04:df:28:ef:27:c4:
71:2c:5e:08:3b:07:57:d9:60:18:46:21:3c:c1:a7:
cc:f9:24:d3:ba:41:1d:a4:6d:79:be:19:0f:96:13:
f0:15:9a:9b:6c:78:2a:b9:e7:17:6b:a1:73:e3:16:
fb:bf:47:da:1b:21:c9:58:12:33:07:71:38:33:da:
22:a7:60:b8:78:25:ac:59:c5:af:2a:57:07:c8:b1:
7d:34:b1:72:c3:49:4e:b0:b4:8a:e8:a7:83:66:ac:
ab:61:2a:e2:75:35:7b:cb:4b:c2:b2:95:96:24:69:
75:a9:9c:9d:2a:66:3e:e6:6c:37:7a:1d:2a:17:01:
fe:25:87:09:e4:ec:56:97:33:a0:c4:78:62:df:bc:
d9:43:14:f8:37:11:15:38:40:7b:b5:6a:72:57:4b:
31:66:1b:8d:33:27:bb:7e:10:40:dd:a7:49:26:80:
bd:7b:75:35:73:60:5e:78:47:a4:13:2e:2b:c5:92:
55:6b:28:d8:f7:a1:fc:0f:ed:fe:44:18:69:54:85:
3d:9a:f4:a1:02:c8:3a:72:6c:10:21:c7:5b:8e:9b:
75:51:46:c0:88:79:c8:5c:bd:fb:2d:37:db:ce:50:
05:a2:bd:2a:eb:63:09:8d:82:62:5e:6e:40:64:cd:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:92:FF:57:90:67:61:D9:21:A4:CA:4B:85:10:06:00:B4:58:0F
X509v3 Authority Key Identifier:
keyid:D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/Q-WS_1eQZ2HZIaTKS4UQBgC0WA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.120.0/22
185.230.160.0/22
185.240.240.0/22
IPv6:
2a09:6301::-2a09:6302:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2500::/32
Signature Algorithm: sha256WithRSAEncryption
7b:92:46:49:f5:33:a6:4c:36:01:5a:62:88:cb:05:7b:de:5c:
c6:ec:41:da:05:90:73:17:79:ad:9f:95:c5:74:ce:bd:80:c4:
71:f4:d0:1e:0b:ec:41:6b:35:c6:47:3f:69:32:e9:9a:85:af:
cb:77:f0:11:f5:d9:88:35:a7:10:2e:a8:7f:19:f8:12:1f:9a:
d0:ba:51:94:78:e9:96:4f:6c:cf:5c:a2:03:4a:a4:89:c6:e0:
25:8f:c9:92:bd:0e:60:56:df:3b:7f:2d:6b:91:08:40:37:8b:
49:8f:36:8e:f1:cd:35:55:60:1e:43:20:3b:7b:82:dc:68:96:
94:eb:bb:41:f7:22:29:cc:63:1f:f2:76:a2:59:c9:4c:4c:8f:
5c:e0:c6:56:df:d7:3d:1d:d8:07:6d:fa:33:1a:21:8f:ff:54:
c1:5f:42:1a:3d:82:25:2a:47:49:a3:dd:5e:90:50:8b:b5:e1:
cd:bf:c2:42:de:59:97:13:e5:fa:94:04:33:09:44:1d:93:33:
4a:9b:13:0c:6d:1d:d5:1d:75:54:8c:7a:7d:7e:92:e9:fb:24:
d7:30:1f:9c:97:f9:c6:d2:a2:3e:65:cd:fb:36:a7:68:4f:21:
b6:bb:21:33:7b:dd:34:18:9a:ff:fc:99:c3:2f:b0:d4:d2:55:
d0:e5:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:49 2024 by rpki-client on console-fra.rpki-client.org