Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/QrQvhMT7xtY7kWo-sfI_icUtNTU.roa
File: QrQvhMT7xtY7kWo-sfI_icUtNTU.roa (raw, json)
Hash identifier: C1zjUicCl+FcJOXv0cupTK1frifVQmGdroN8/Ao5Iqw=
Subject key identifier: 42:B4:2F:84:C4:FB:C6:D6:3B:91:6A:3E:B1:F2:3F:89:C5:2D:35:35
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 0189A833B22B95FFEE5D4BA0B0A96F4028ED
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/QrQvhMT7xtY7kWo-sfI_icUtNTU.roa
Signing time: Sun 30 Jul 2023 19:08:27 +0000
ROA not before: Sun 30 Jul 2023 19:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200598
IP address blocks: 37.156.226.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
46.102.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:33:b2:2b:95:ff:ee:5d:4b:a0:b0:a9:6f:40:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jul 30 19:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42b42f84c4fbc6d63b916a3eb1f23f89c52d3535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:58:52:94:59:c6:13:27:39:f1:76:66:f7:
1a:35:15:48:b3:8c:f9:1b:73:0d:ec:43:d7:72:a4:
cd:75:44:82:98:15:8e:fb:94:4a:d6:26:50:9d:dc:
55:fc:55:42:24:6f:fe:5e:ab:f4:03:ba:f1:51:85:
07:fd:77:24:48:83:84:57:f5:f4:6b:14:00:4a:07:
44:c2:c2:db:de:2e:a8:5c:b6:e7:60:7c:b1:c2:3d:
22:04:a4:15:28:8a:7b:c0:3a:1f:ac:c0:1d:92:8d:
32:f9:3e:2b:dc:cc:16:86:36:4b:d8:a6:bf:fd:e7:
d8:1f:8a:4e:43:df:30:c7:91:6b:1f:41:69:02:88:
6d:35:81:a5:29:f9:93:5b:27:22:9f:fc:8b:cb:50:
3a:59:d3:57:61:da:ac:3c:be:f0:a9:59:4c:d7:81:
55:e3:03:fb:b5:71:64:fb:d2:0b:fb:4f:ab:5b:5d:
50:9c:46:6e:b4:75:fa:d2:c6:bc:56:43:eb:fb:6a:
c6:26:a9:38:e0:ee:14:5b:b4:49:ca:10:e5:7e:4f:
60:dd:75:25:03:d5:a0:ac:d5:85:49:c8:d5:fa:b7:
58:5a:42:59:84:7b:97:01:6a:40:07:31:39:b2:47:
aa:31:80:c8:7c:a1:e8:f4:58:5a:49:b0:15:cc:da:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:2F:84:C4:FB:C6:D6:3B:91:6A:3E:B1:F2:3F:89:C5:2D:35:35
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/QrQvhMT7xtY7kWo-sfI_icUtNTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.226.0/24
46.102.116.0/24
87.121.136.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:e3:93:e9:cc:b5:ad:6b:30:ce:d8:65:61:b3:23:9a:00:04:
ef:0f:59:ac:10:8d:d7:0f:b0:62:1d:06:b9:d2:62:4e:38:ba:
8d:e9:ce:ce:be:74:97:23:1b:b8:9a:78:66:8e:88:3b:2d:48:
14:31:da:68:df:fd:b8:5a:e3:9b:7a:19:5e:0e:13:05:2e:97:
17:c0:13:d2:bf:a6:c6:13:e2:ec:80:d6:68:c1:eb:82:3b:f5:
98:a0:fd:b1:cb:e0:e1:3f:3e:4e:0c:c0:ae:14:dc:c8:c3:f0:
97:a5:b1:a0:6b:c2:8e:ff:86:9d:92:90:0a:eb:78:c7:88:d0:
61:02:fc:24:65:40:87:81:61:d9:c8:17:b5:ed:2f:21:12:e4:
20:a8:39:24:c8:7f:f2:dc:41:c5:b6:56:33:1a:1c:7b:55:ba:
b2:f3:22:cf:88:a3:13:1b:42:dc:a7:e8:17:26:2d:a6:5b:05:
78:e4:ad:a6:58:ac:0e:b7:95:de:b9:a0:06:bb:55:43:76:d7:
df:56:68:06:50:f3:59:d1:79:bd:af:70:f3:38:23:29:e8:d5:
e6:3e:1f:70:ba:95:ee:21:24:a1:90:58:bf:50:3c:ae:92:d0:
9f:72:2f:95:86:b9:7e:d7:d0:ea:91:68:7a:a5:3e:26:07:73:
41:70:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:20 2025 by rpki-client