Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/quyGP95R3wE4pbw9FHbIeoFLAiA.roa
File: quyGP95R3wE4pbw9FHbIeoFLAiA.roa (raw, json)
Hash identifier: YlF/1k+5YrpSNFevnKPYf9qUZMcz/CWUoYe8vmZsKfw=
Subject key identifier: AA:EC:86:3F:DE:51:DF:01:38:A5:BC:3D:14:76:C8:7A:81:4B:02:20
Certificate issuer: /CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Certificate serial: 018571B0C8ECEE7E1B5E997E80F676AE00A3
Authority key identifier: FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/quyGP95R3wE4pbw9FHbIeoFLAiA.roa
Signing time: Mon 02 Jan 2023 08:54:49 +0000
ROA not before: Mon 02 Jan 2023 08:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48361
IP address blocks: 91.209.127.0/24 maxlen: 24
185.16.116.0/23 maxlen: 23
185.16.118.0/23 maxlen: 23
2001:67c:1484::/48 maxlen: 48
2a04:280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:c8:ec:ee:7e:1b:5e:99:7e:80:f6:76:ae:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Validity
Not Before: Jan 2 08:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaec863fde51df0138a5bc3d1476c87a814b0220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:19:e2:fd:48:16:5a:a3:28:16:03:44:a2:
ce:b1:f5:eb:74:24:32:d9:9b:9e:69:fa:1e:62:85:
f0:14:59:2a:9e:74:2d:38:e8:65:02:a2:92:8f:a2:
68:b0:59:84:c5:cb:d9:d1:23:c1:8b:75:6a:97:c2:
41:31:6d:67:6d:c5:f3:d0:d1:45:9c:db:56:ac:80:
bc:fe:cc:05:ef:0b:01:f1:89:6c:bf:83:03:4c:66:
ba:91:56:22:86:90:e5:54:c7:f2:22:92:51:04:ce:
30:60:29:7e:c4:ee:27:e1:34:0e:e5:5b:01:a0:48:
b7:26:65:e1:78:5f:02:98:38:2f:fa:b6:2d:0a:79:
6b:f2:f7:34:2e:bd:bc:d6:dd:4e:d7:9f:7e:d7:e5:
f6:f7:0a:ef:20:ed:72:85:31:0e:ce:d7:53:b4:74:
4a:d4:cd:de:5b:c5:00:61:30:b3:93:22:54:c2:d8:
6c:8c:64:ab:2f:90:9c:de:d0:e7:62:a3:d3:91:0e:
16:aa:e1:67:37:8b:27:1d:70:e8:68:58:42:21:53:
5d:35:4b:3a:8e:84:50:47:95:af:6e:a5:79:74:c3:
56:52:72:dc:04:c5:da:73:dd:fd:9b:f5:99:9c:ef:
42:0e:f8:a7:ff:29:93:55:12:70:a8:6a:55:e2:bf:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EC:86:3F:DE:51:DF:01:38:A5:BC:3D:14:76:C8:7A:81:4B:02:20
X509v3 Authority Key Identifier:
keyid:FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/quyGP95R3wE4pbw9FHbIeoFLAiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.127.0/24
185.16.116.0/22
IPv6:
2001:67c:1484::/48
2a04:280::/29
Signature Algorithm: sha256WithRSAEncryption
1d:2a:ac:76:5b:e7:ed:5b:ef:99:a3:d4:39:03:d0:46:79:eb:
35:50:2f:e0:9f:87:d3:31:44:d3:e5:54:90:c3:2a:3d:c7:32:
cc:79:fa:10:86:1c:96:f9:8f:4d:27:e5:f4:44:10:85:7e:e1:
c2:61:c7:f6:eb:f3:f5:cc:21:10:e2:8a:18:a8:ed:57:30:11:
4b:e3:30:07:68:e3:3a:82:9f:5c:d7:b8:6c:56:e4:3e:18:97:
a4:8a:2b:14:e5:ff:ef:db:1f:a2:b6:39:1e:98:69:1b:c1:12:
7f:3e:a7:6f:82:64:18:1c:0f:ec:58:b9:ca:b4:ac:94:4a:7a:
7d:5b:a2:7f:43:d7:ce:1c:78:36:45:5d:d2:25:a1:4f:93:7c:
1f:41:8b:39:be:7d:d8:79:b7:a0:59:bf:ac:92:cd:02:ed:6b:
88:42:3b:fd:a7:13:42:84:f0:d3:dc:10:19:e6:01:79:5a:78:
ee:03:df:89:da:8e:10:f5:3a:93:f7:04:2d:79:6b:91:bf:98:
9a:84:b1:80:f1:3b:f3:1a:d9:bf:f8:14:db:9a:45:33:58:e6:
1b:bf:1e:b9:9f:da:21:22:c6:b3:c8:e0:8e:05:8c:63:55:27:
77:07:8c:ea:35:bf:62:d5:c4:1a:74:13:81:83:35:79:8b:47:
26:0d:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:21 2024 by rpki-client on console-fra.rpki-client.org