Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/QZcUjCYhy5fae5RO2KBN0nTYgfo.roa
File: QZcUjCYhy5fae5RO2KBN0nTYgfo.roa (raw, json)
Hash identifier: F/xttSmdgExkXhNrhIWSiLmSifG2Rp4q66QJnBVaQ9o=
Subject key identifier: 41:97:14:8C:26:21:CB:97:DA:7B:94:4E:D8:A0:4D:D2:74:D8:81:FA
Certificate issuer: /CN=ee6f8793b065b22f5dbc653c7af1de56da4b6a1f
Certificate serial: 057BAED0
Authority key identifier: EE:6F:87:93:B0:65:B2:2F:5D:BC:65:3C:7A:F1:DE:56:DA:4B:6A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m-Hk7Blsi9dvGU8evHeVtpLah8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/QZcUjCYhy5fae5RO2KBN0nTYgfo.roa
Signing time: Sat 01 Jan 2022 05:53:26 +0000
ROA not before: Sat 01 Jan 2022 05:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15788
IP address blocks: 217.29.160.0/20 maxlen: 20
193.219.30.0/24 maxlen: 24
217.29.161.0/24 maxlen: 24
217.29.162.0/24 maxlen: 24
217.29.165.0/24 maxlen: 24
217.29.163.0/24 maxlen: 24
217.29.166.0/24 maxlen: 24
217.29.164.0/24 maxlen: 24
217.29.160.0/24 maxlen: 24
217.29.168.0/24 maxlen: 24
217.29.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91991760 (0x57baed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f8793b065b22f5dbc653c7af1de56da4b6a1f
Validity
Not Before: Jan 1 05:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4197148c2621cb97da7b944ed8a04dd274d881fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:ac:5d:d0:b7:00:40:2e:b3:d2:e0:33:e9:
3f:cf:0c:93:ea:cc:f7:e2:d4:6e:9d:06:7c:27:91:
64:b9:76:6a:e3:62:42:b9:48:bc:26:ff:01:7c:0f:
b2:e4:98:79:ae:86:15:54:6f:ae:48:1e:ae:ba:bb:
af:60:c4:40:c8:59:65:5f:49:5c:46:b0:07:5b:e3:
ca:70:ca:e4:6b:a7:16:7e:cb:ee:0f:14:71:9d:82:
02:ae:bc:58:9a:a4:9c:b2:29:74:76:26:ac:9c:05:
e2:e9:23:0a:e7:28:ad:7d:b5:41:b6:2f:3f:d4:0a:
78:c4:1b:d5:46:1f:7c:b1:e5:a0:01:ee:52:51:59:
7b:ee:bb:af:52:34:1f:49:04:b7:8c:4b:30:26:23:
59:4a:88:7f:46:48:b1:bb:cd:b5:f7:4d:26:af:d1:
4a:9e:f7:03:01:9d:e4:20:86:4d:ed:3d:73:be:ce:
66:70:c8:cb:50:30:4f:da:b8:80:61:91:83:51:a1:
1b:2e:5f:81:b8:9c:e7:6b:16:7e:e6:a3:ec:f2:d8:
bf:79:77:cb:25:c0:df:e0:4a:db:3a:b0:5e:93:05:
dc:8a:4c:c9:88:ea:8c:25:6d:77:40:ae:4a:ca:44:
cf:ba:4e:4e:9e:8a:b6:07:ec:45:6c:f4:c5:5c:e0:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:97:14:8C:26:21:CB:97:DA:7B:94:4E:D8:A0:4D:D2:74:D8:81:FA
X509v3 Authority Key Identifier:
keyid:EE:6F:87:93:B0:65:B2:2F:5D:BC:65:3C:7A:F1:DE:56:DA:4B:6A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m-Hk7Blsi9dvGU8evHeVtpLah8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/QZcUjCYhy5fae5RO2KBN0nTYgfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c4f235-14a6-4746-9a76-0b42b4f29940/1/7m-Hk7Blsi9dvGU8evHeVtpLah8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.30.0/24
217.29.160.0/20
Signature Algorithm: sha256WithRSAEncryption
21:b1:ab:17:c7:6c:e0:c1:5c:c8:92:b7:06:7a:f1:df:2e:c2:
bf:a3:7d:dd:e8:9e:a8:92:8a:e6:f6:96:3a:ab:95:01:8a:8e:
28:1e:d7:6f:a4:3c:ae:06:ca:2d:85:44:ee:2e:bb:8e:04:66:
ee:33:73:d7:dd:c9:de:3e:d7:08:bf:3f:9d:12:ae:cd:52:da:
46:6f:4a:8c:88:27:13:ab:db:d2:4e:85:ea:9a:64:e5:37:9b:
0a:88:05:d2:6a:da:be:00:41:68:83:f7:3b:32:8e:14:b2:e8:
f6:31:81:40:7e:3b:ba:f1:40:c7:11:ca:03:3c:08:09:25:cd:
07:95:3d:bf:8f:74:70:33:1b:04:e5:82:62:55:57:40:93:be:
02:e0:7f:7d:d4:f1:e5:f6:10:63:9d:af:84:13:85:16:9b:98:
72:5b:43:90:d5:04:6d:79:86:d8:4f:ce:e9:47:8b:4b:8f:5f:
48:d3:bc:a9:88:b1:7f:32:71:ff:e7:66:e8:da:36:48:aa:d5:
63:dd:3c:a0:db:10:79:67:69:b3:e0:02:74:eb:9c:73:94:e1:
60:c5:13:7d:c0:24:1c:62:84:24:d1:87:94:54:e8:80:43:c1:
01:99:94:c5:3a:55:f5:c8:40:d5:e9:da:d4:bc:a2:db:85:f9:
f4:f0:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org