Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/Qm6cG_WqmGhUYXLQrVb4m4ilySM.roa
File: Qm6cG_WqmGhUYXLQrVb4m4ilySM.roa (raw, json)
Hash identifier: 2BKFssNjF3Hum4hkfxW9JKeFoS1UvLyW8aFHBEhMf3U=
Subject key identifier: 42:6E:9C:1B:F5:AA:98:68:54:61:72:D0:AD:56:F8:9B:88:A5:C9:23
Certificate issuer: /CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Certificate serial: 018360E622D64F1BED7B691DFA1F1FF2A277
Authority key identifier: 04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/Qm6cG_WqmGhUYXLQrVb4m4ilySM.roa
Signing time: Wed 21 Sep 2022 16:33:58 +0000
ROA not before: Wed 21 Sep 2022 16:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 185.4.33.0/24 maxlen: 24
185.4.32.0/22 maxlen: 22
185.4.32.0/24 maxlen: 24
185.4.35.0/24 maxlen: 24
185.4.34.0/24 maxlen: 24
185.239.160.0/22 maxlen: 22
2a02:5fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:e6:22:d6:4f:1b:ed:7b:69:1d:fa:1f:1f:f2:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Validity
Not Before: Sep 21 16:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=426e9c1bf5aa9868546172d0ad56f89b88a5c923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:f4:e1:58:90:f4:33:58:bd:59:24:c5:c5:
50:2c:75:09:8f:76:22:6d:6a:78:49:d4:af:7f:b1:
54:d7:13:4c:2f:05:5b:43:9f:3d:b5:53:d5:a5:f7:
c9:b8:88:d2:4c:a1:a4:26:46:87:2d:4a:1c:7a:3b:
f5:9a:bf:f2:ba:70:8b:eb:9d:91:8f:25:18:e3:2d:
96:a1:72:a8:4b:aa:92:13:a9:46:96:2e:3b:dc:a5:
6d:74:e9:2b:4e:e6:39:ff:e0:74:fb:52:24:26:49:
be:dd:ae:93:70:1d:00:af:68:55:46:8f:08:ec:fc:
4d:3b:58:51:f2:33:86:d2:f9:58:27:13:4a:b4:30:
c2:fc:fd:f7:50:3c:f2:ec:77:2b:1c:fa:8d:7f:ec:
2c:83:93:4e:ad:ea:08:d1:4a:9b:48:75:01:99:98:
2b:59:7a:46:3c:4b:68:54:74:d9:07:ac:f0:ff:96:
50:3c:0c:fb:89:9a:6a:72:cb:62:a5:7c:4e:ca:8c:
9c:7b:97:b2:bc:cd:0e:45:d4:5d:12:52:04:a8:dd:
0f:80:a5:4d:91:1a:42:26:ab:5a:c9:c4:a2:ca:b9:
38:76:18:62:ab:23:5f:b3:57:a9:9b:1e:10:ce:cb:
11:47:f4:ff:6f:2c:71:27:2b:19:5e:15:a3:7a:3d:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6E:9C:1B:F5:AA:98:68:54:61:72:D0:AD:56:F8:9B:88:A5:C9:23
X509v3 Authority Key Identifier:
keyid:04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/Qm6cG_WqmGhUYXLQrVb4m4ilySM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.32.0/22
185.239.160.0/22
IPv6:
2a02:5fc0::/48
Signature Algorithm: sha256WithRSAEncryption
51:23:f0:3b:4a:1a:5f:f4:e8:69:4e:f9:40:c5:64:14:74:7b:
a8:28:3b:dc:a0:94:83:69:20:5c:e4:3f:ea:4c:7e:94:dc:c5:
24:9c:d0:cc:c7:50:c3:9f:68:cd:df:86:1e:78:1f:91:59:0e:
fe:8f:e3:be:91:a7:1c:45:b3:58:ed:41:6d:23:6c:47:b8:28:
37:7f:52:f8:5a:a8:ea:f3:62:f6:38:89:24:68:c6:e7:50:6a:
94:90:ec:59:70:92:79:87:88:0c:53:2c:ed:32:e6:c5:f8:ca:
f0:af:9a:4a:80:18:1f:48:c9:4d:be:8a:43:78:4a:b3:23:70:
ec:7d:c5:3b:df:20:d2:42:5e:34:47:6d:d5:40:85:42:d7:9a:
bf:a6:24:9d:f3:41:83:7c:62:3e:47:1c:b2:52:ec:1a:6d:2e:
2c:7b:c8:35:30:75:aa:6d:39:7c:3f:d3:30:67:6e:90:76:ad:
a2:1a:bf:9a:8b:09:0c:26:82:1f:8b:3e:27:6c:55:16:b9:be:
74:87:0c:48:9c:38:1a:52:29:77:47:07:34:2f:ae:3e:6e:5c:
84:c8:df:80:51:da:d1:f2:4c:e1:3b:64:ee:2c:6b:7c:f7:55:
97:b7:36:2a:f8:04:01:b9:09:d8:86:01:f2:59:7d:ad:2d:23:
a1:5d:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:16 2024 by rpki-client on console-ams.rpki-client.org