Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/qoVqDR9YbVw0C55WbxVwdZFnm84.roa
File: qoVqDR9YbVw0C55WbxVwdZFnm84.roa (raw, json)
Hash identifier: Ba3RSwP6/mPuI5WKTaF4nak8jY6mjCj1ZD/lOV5R1OQ=
Subject key identifier: AA:85:6A:0D:1F:58:6D:5C:34:0B:9E:56:6F:15:70:75:91:67:9B:CE
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 07A7F770
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/qoVqDR9YbVw0C55WbxVwdZFnm84.roa
Signing time: Sat 01 Jan 2022 14:01:13 +0000
ROA not before: Sat 01 Jan 2022 14:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209604
IP address blocks: 194.36.85.0/24 maxlen: 24
45.155.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128448368 (0x7a7f770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 1 14:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa856a0d1f586d5c340b9e566f15707591679bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:45:6c:e8:cf:c9:48:d2:cb:83:5f:97:12:
ab:a7:71:0b:b5:a9:0b:b0:95:ea:14:42:52:aa:b2:
4f:5a:5d:d6:6e:1c:cf:da:fb:bb:b1:a6:89:4e:de:
d1:0b:a1:4a:61:39:eb:a5:43:3e:1f:59:fd:f8:36:
74:1c:cd:49:75:d3:22:7b:78:84:aa:bf:6d:d8:ad:
9c:05:c4:64:d5:52:a7:e6:f1:d0:43:05:a2:a8:38:
29:b7:e0:de:62:ff:aa:60:93:ed:f0:a0:71:9e:41:
51:0b:19:98:8b:ed:c5:bf:09:14:39:b2:eb:fd:fd:
2f:6d:42:95:c2:6a:d9:8f:5d:ff:a5:56:95:90:91:
a6:30:b5:14:f5:f9:4b:07:c4:7b:83:60:02:de:e8:
fb:f4:de:28:bd:87:80:51:23:5b:91:d8:88:6d:9b:
04:88:05:f1:35:4a:13:3c:91:12:11:71:a0:42:9d:
66:84:36:1c:f3:a4:3e:da:d2:62:b7:1f:55:7f:27:
69:30:4f:14:15:a5:e6:ee:cd:cd:23:ee:f5:7f:47:
4f:01:c0:0e:45:99:2c:3f:4b:f5:1a:72:bd:b0:64:
3b:2d:86:1c:3f:e0:10:2e:37:19:ca:3d:06:4b:1c:
c1:e7:22:99:9a:bf:b0:b2:32:45:9a:37:f4:e9:60:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:6A:0D:1F:58:6D:5C:34:0B:9E:56:6F:15:70:75:91:67:9B:CE
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/qoVqDR9YbVw0C55WbxVwdZFnm84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:06:6d:73:d6:a8:82:6c:be:5b:f8:c6:f4:8c:08:3f:85:9e:
bf:d4:d2:89:53:9e:0d:e5:90:02:8b:8a:28:b3:d4:0b:dd:ab:
9b:13:77:03:cc:b5:4e:00:c4:c1:8c:32:33:cd:52:ac:16:0d:
08:41:22:5d:ac:02:aa:26:98:8a:42:1a:bc:bc:7f:45:18:22:
d9:b4:56:67:c4:e7:fd:55:1c:39:1a:52:b6:34:3a:c7:6f:41:
13:07:9e:e3:1a:c1:b4:e1:0f:56:32:9c:1f:d1:52:4c:2e:21:
7b:9a:a6:d9:22:2e:ab:fa:0d:6b:27:ba:e6:b7:a9:3b:4e:c3:
68:02:dc:38:8b:a0:76:3e:d6:59:1f:f8:06:2c:da:3c:c3:a6:
7f:15:1f:86:10:38:4c:34:b9:c7:d8:a4:0b:9f:e4:89:35:de:
8a:b1:2f:f7:15:31:d2:e5:79:10:fd:c1:8f:71:ea:58:4c:4b:
c1:0d:85:03:6f:ab:ce:79:c8:e0:fe:1e:ba:78:27:a3:32:c7:
86:1c:bc:a2:82:b4:1f:8b:11:89:83:cb:91:c9:86:45:e0:e9:
a3:1a:ec:78:0e:b6:91:a2:46:f0:9e:63:c0:6a:b6:d6:cf:fc:
00:cf:3a:4e:49:d6:0e:a3:8f:4d:d8:27:1f:dd:26:a9:21:04:
6d:a3:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org