Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/qvhY81k-GTf9jSVC-HSRu6KjAXA.roa
File: qvhY81k-GTf9jSVC-HSRu6KjAXA.roa (raw, json)
Hash identifier: LnkPdVVi3azA33u9EgEir77Z2jnPMzY+OIMsTslH8kA=
Subject key identifier: AA:F8:58:F3:59:3E:19:37:FD:8D:25:42:F8:74:91:BB:A2:A3:01:70
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 0181F46A8C739C8A27A387CDD31E2223F533
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/qvhY81k-GTf9jSVC-HSRu6KjAXA.roa
Signing time: Tue 12 Jul 2022 21:57:12 +0000
ROA not before: Tue 12 Jul 2022 21:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 45.15.252.0/24 maxlen: 24
194.34.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:6a:8c:73:9c:8a:27:a3:87:cd:d3:1e:22:23:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jul 12 21:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaf858f3593e1937fd8d2542f87491bba2a30170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a2:49:da:b4:9d:6b:dd:d4:a4:cf:36:38:ea:
b4:fc:1e:4e:cb:70:04:f9:ee:c1:60:66:37:f7:9a:
96:93:9b:b5:7b:fc:dc:3b:67:a4:fb:c4:05:14:a1:
94:2e:55:06:0b:d5:82:60:e4:a9:71:9f:db:6e:2f:
ec:73:41:46:64:3a:f8:7e:17:b0:ab:3e:9d:90:09:
65:fe:8c:8f:54:e0:80:cd:1f:a1:03:65:4b:93:99:
d9:74:47:91:16:3c:56:8e:0d:40:8a:0a:bb:fe:01:
eb:77:a2:60:c9:f5:9e:0e:c3:d5:6d:73:12:d0:e2:
c1:01:03:d9:dd:e2:37:4b:00:95:21:7e:3f:a4:24:
a3:08:99:db:ce:28:49:e7:ce:09:e9:9b:73:b8:9e:
ce:05:20:c9:15:a1:d7:39:24:31:82:b8:59:bb:51:
49:6a:ef:71:4f:57:43:e6:75:56:98:45:36:14:a9:
8e:f0:69:cb:e9:46:c1:fd:cb:78:c3:40:96:2d:be:
f8:12:19:cf:c6:99:5a:22:e6:08:03:fa:0b:cd:9d:
88:54:8f:d3:29:e5:e1:c7:17:78:12:87:e1:0e:db:
34:6c:67:22:82:3b:25:63:e4:af:45:65:d3:87:01:
10:d7:03:80:3b:77:9b:ee:32:bb:de:c5:2d:00:34:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:58:F3:59:3E:19:37:FD:8D:25:42:F8:74:91:BB:A2:A3:01:70
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/qvhY81k-GTf9jSVC-HSRu6KjAXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.252.0/24
194.34.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2a:8a:bd:70:f4:a5:36:9c:2f:6f:6f:4d:1b:be:b6:2b:5f:
ee:35:95:b0:42:2c:bf:12:01:33:b6:c3:17:5d:28:32:23:9c:
ed:80:91:69:3e:da:24:88:13:98:04:fd:ed:ec:4a:63:23:96:
9b:8e:1b:03:cf:cb:8f:a3:eb:b6:9f:9a:42:af:ad:71:8f:2d:
58:cd:27:25:d3:1f:df:c2:70:3c:45:41:fb:67:a4:50:f1:aa:
4e:b4:b6:8d:9b:b4:d4:ee:e6:30:d7:5f:97:43:46:33:58:3c:
b1:25:77:19:b1:3b:20:95:48:4a:71:8c:71:fb:94:60:72:1f:
8e:b2:2c:44:10:81:db:0f:70:75:c2:aa:26:ba:90:5a:77:07:
e5:3a:75:e5:5c:b5:36:25:ef:3f:44:24:ad:28:97:4a:a8:42:
13:c9:22:80:41:2f:8c:8c:5d:48:9d:dc:a7:a9:2a:ad:81:78:
c9:e6:2e:28:66:a3:28:b5:ce:61:73:56:25:f6:5b:2c:10:4d:
cf:ef:9d:ae:fd:2a:7b:f7:12:3a:ed:6b:83:23:33:45:f5:fa:
c9:9a:5b:e0:dd:c9:fd:1e:c4:fb:6c:a3:ea:27:bf:e8:c6:36:
ef:ed:b0:18:40:40:00:9e:1a:26:11:69:96:2d:6e:f7:61:58:
66:d8:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:31 2023 by rpki-client on console-fra.rpki-client.org