Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/QUCJxTFaHHZN8dJhs5bYl9wv25Q.roa
File: QUCJxTFaHHZN8dJhs5bYl9wv25Q.roa (raw, json)
Hash identifier: aEwkb9NPQ9r4U9l3ugXcf5qPpkUUeoGhFEXsb7/YoIM=
Subject key identifier: 41:40:89:C5:31:5A:1C:76:4D:F1:D2:61:B3:96:D8:97:DC:2F:DB:94
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 018A188FB37CEFEE7C4065A8B0798C2244F8
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/QUCJxTFaHHZN8dJhs5bYl9wv25Q.roa
Signing time: Mon 21 Aug 2023 14:46:25 +0000
ROA not before: Mon 21 Aug 2023 14:46:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 93.183.100.0/22 maxlen: 24
93.183.120.0/22 maxlen: 24
176.123.184.0/22 maxlen: 24
176.106.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:8f:b3:7c:ef:ee:7c:40:65:a8:b0:79:8c:22:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Aug 21 14:46:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=414089c5315a1c764df1d261b396d897dc2fdb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:ec:c9:c5:36:f1:03:19:a9:2c:03:66:37:
69:08:bf:9d:28:3e:dd:1d:63:35:5c:d9:5d:1b:8a:
fb:1e:a8:c1:f6:b3:6b:c5:8c:2c:35:eb:b4:be:50:
67:e9:46:8f:a6:45:20:dc:7f:5a:fa:23:bd:85:44:
fb:e5:de:96:1b:f2:ab:b1:36:af:29:f8:40:1c:17:
99:27:66:f2:a5:6a:ad:05:92:d8:d1:6d:ec:f1:c3:
ad:e4:74:d3:04:91:03:01:5a:00:50:d5:36:6c:4e:
0e:09:f5:9c:d2:39:04:e2:d1:ef:89:71:a2:34:0f:
f1:8b:fc:f0:ec:3c:20:4d:2e:8a:20:b8:f4:a8:44:
ce:c1:6a:66:96:7d:ae:31:16:78:f4:fd:71:25:89:
a4:46:59:fb:e8:f8:98:b0:3e:6f:1e:63:b1:76:7a:
07:f2:1c:c9:5e:b4:dd:79:72:1d:ec:a7:02:54:2b:
f2:29:49:93:de:80:fe:26:79:5c:ea:c7:db:b1:a7:
e1:81:68:fa:51:eb:52:6c:6f:cf:fc:9b:65:ae:dd:
b0:80:2a:07:76:97:39:ed:ea:f4:c2:4c:0c:58:43:
07:f0:c8:e5:ba:69:9d:d7:f7:a1:6d:9d:7b:ea:ab:
ef:7e:2c:a2:34:b2:4d:d8:2c:11:e7:ba:02:c2:9c:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:40:89:C5:31:5A:1C:76:4D:F1:D2:61:B3:96:D8:97:DC:2F:DB:94
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/QUCJxTFaHHZN8dJhs5bYl9wv25Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.100.0/22
93.183.120.0/22
176.106.136.0/21
176.123.184.0/22
Signature Algorithm: sha256WithRSAEncryption
53:fa:68:f1:1e:0e:33:af:98:06:3b:39:54:e0:a0:26:07:76:
0e:37:29:28:6f:40:94:cc:44:15:b5:10:a3:5d:24:2d:b9:5b:
d1:a3:16:91:8b:54:32:86:60:1b:1b:f2:eb:ff:26:bb:72:14:
37:2e:9b:69:83:e7:eb:5a:12:a6:97:4c:5e:13:c1:f0:ea:5c:
e5:a0:4d:03:8d:8e:50:0a:8f:1c:4f:7c:dc:5a:ab:e5:99:cf:
db:7d:81:4e:82:9d:59:9a:9c:46:dc:4f:21:98:f0:b8:76:73:
db:f7:f7:d8:ce:ad:0e:98:3c:82:0f:30:9b:c5:cb:14:b2:b5:
ca:9a:58:7a:7d:15:8b:54:ae:49:1b:84:74:e9:a2:af:ba:64:
3e:00:c7:31:77:31:c8:ab:9b:57:1e:11:ae:52:2c:24:1b:8b:
ca:e6:16:86:92:50:59:91:de:1c:d8:e9:95:0a:21:c0:42:6a:
a6:b6:d9:d3:b0:39:94:8f:3e:c3:f5:45:9d:7a:4f:92:e0:1d:
4f:c5:79:9e:42:2d:7b:7f:e5:d8:33:24:ca:ac:63:6c:22:22:
fe:bc:a0:9d:b9:f6:68:6c:54:f1:55:dd:e5:cc:c8:1b:95:09:
77:3e:c4:19:f3:fa:58:d1:03:82:1c:87:23:f8:d6:42:f6:06:
0c:61:2f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:32 2025 by rpki-client