Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/Qfb0TjDoScrEcIDaM5FHvsH7jVc.roa
File: Qfb0TjDoScrEcIDaM5FHvsH7jVc.roa (raw, json)
Hash identifier: paN5XeU6cVmOcgMKFvRKBCNWM7238Dxpw4BiHp/iXLE=
Subject key identifier: 41:F6:F4:4E:30:E8:49:CA:C4:70:80:DA:33:91:47:BE:C1:FB:8D:57
Certificate issuer: /CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Certificate serial: 0D729FFD
Authority key identifier: D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/Qfb0TjDoScrEcIDaM5FHvsH7jVc.roa
Signing time: Sun 27 Feb 2022 14:34:20 +0000
ROA not before: Sun 27 Feb 2022 14:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 185.240.240.0/24 maxlen: 24
185.240.242.0/24 maxlen: 24
185.240.242.0/23 maxlen: 23
185.240.243.0/24 maxlen: 24
185.240.241.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
2a0c:2500::/32 maxlen: 32
2a09:6302::/32 maxlen: 32
2a09:6301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225615869 (0xd729ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Validity
Not Before: Feb 27 14:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41f6f44e30e849cac47080da339147bec1fb8d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:f3:93:2f:1a:14:6c:5d:35:3a:e8:05:5a:
93:c5:5b:a3:55:56:04:36:00:f7:9f:a7:00:90:88:
d4:17:4f:38:2a:98:77:b1:09:6c:e5:2f:f6:22:c7:
ac:fb:ac:0c:f5:2a:fe:01:30:dd:69:6d:f8:94:c5:
40:44:ef:8d:55:23:11:03:83:0b:3c:6b:9b:5e:2f:
5a:dc:84:bb:98:60:82:05:7b:9e:20:d4:e5:3b:aa:
1a:7d:55:e5:f0:1f:4d:e5:73:a6:33:7d:e7:42:6d:
e7:e2:6f:20:de:12:93:ae:d3:2f:64:31:45:2c:12:
49:a3:65:03:94:5e:a2:51:32:f5:eb:af:97:28:b4:
90:51:29:cb:de:93:97:69:09:ed:58:52:5a:9c:18:
38:4f:b4:7f:69:30:ab:ae:e1:8f:6a:8d:c7:aa:c8:
15:be:8d:ea:56:7a:78:40:e6:dc:c9:a3:f8:1c:e7:
d6:4d:ac:e3:ac:be:0c:ec:e4:69:23:4e:9f:f1:9f:
cb:58:96:14:22:8a:e4:00:22:2c:f3:66:51:9b:02:
85:5c:7b:e0:76:54:68:ae:0b:4e:0d:9e:bc:b9:73:
fb:55:92:57:10:03:1a:d0:a5:cf:7c:3f:5a:67:7e:
65:cb:4a:e2:6d:e5:5a:d1:d9:ce:17:82:cb:c2:a4:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F6:F4:4E:30:E8:49:CA:C4:70:80:DA:33:91:47:BE:C1:FB:8D:57
X509v3 Authority Key Identifier:
keyid:D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/Qfb0TjDoScrEcIDaM5FHvsH7jVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.120.0/22
185.230.160.0/22
185.240.240.0/22
IPv6:
2a09:6301::-2a09:6302:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2500::/32
Signature Algorithm: sha256WithRSAEncryption
94:3d:bb:9c:6a:e3:c3:40:17:75:e7:f3:61:21:dc:cf:52:26:
22:fc:f9:72:3b:4b:af:b5:40:ac:a6:85:9e:54:b4:c0:5e:b6:
60:ac:6f:33:32:7c:5b:fa:5b:ca:f5:e3:c7:4a:82:2b:7f:4e:
91:e3:e4:09:64:53:50:d6:a2:71:ab:ae:70:45:d6:f5:3f:d4:
f8:2b:1f:e1:1e:38:1f:12:46:1d:a0:ac:fd:45:ef:14:d2:86:
f5:5c:34:4d:82:5c:0a:d8:b3:cc:4f:eb:4d:4a:5b:04:3a:89:
31:dd:03:39:67:51:f6:f8:7c:b1:a6:02:8e:dd:7c:5c:31:f3:
f5:46:0a:7e:93:6c:05:2d:b1:5f:75:7d:ee:96:d1:42:74:2f:
15:18:97:59:bc:c4:29:6c:08:71:00:95:df:04:14:f8:72:74:
01:da:b6:08:b6:7b:ca:ba:26:bc:7c:0a:f8:a6:bd:00:6b:29:
2d:9a:3f:db:4c:73:d8:29:72:ac:f4:80:35:40:54:c5:23:ce:
2f:f4:fd:4e:d0:ab:fb:44:30:2f:e5:fe:9a:49:c9:69:9e:3f:
41:50:49:6c:f6:89:6b:ff:30:87:e5:5c:8c:dc:d4:b8:0f:52:
e2:79:1d:73:84:4f:79:d0:d4:f8:7e:d7:5f:f8:8b:36:30:90:
2f:96:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:23 2023 by rpki-client on console-ams.rpki-client.org