Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/vhj7w0TQwHPCNBVg8XaHU_Qgsok.roa
File: vhj7w0TQwHPCNBVg8XaHU_Qgsok.roa (raw, json)
Hash identifier: h1bEi1SnA0C8Nlz5qYB7TrZwArMQmJoX+hB6zgkLEmw=
Subject key identifier: BE:18:FB:C3:44:D0:C0:73:C2:34:15:60:F1:76:87:53:F4:20:B2:89
Certificate issuer: /CN=38227faf7513610334320ad9b3f95be1ff1099c5
Certificate serial: 63D5
Authority key identifier: 38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/vhj7w0TQwHPCNBVg8XaHU_Qgsok.roa
Signing time: Tue 25 Jan 2022 11:47:31 +0000
ROA not before: Tue 25 Jan 2022 11:47:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57523
IP address blocks: 152.89.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25557 (0x63d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227faf7513610334320ad9b3f95be1ff1099c5
Validity
Not Before: Jan 25 11:47:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be18fbc344d0c073c2341560f1768753f420b289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:d7:2f:6c:74:d5:d5:55:f6:1a:e4:b7:87:
13:d9:d9:44:a5:f6:76:d1:7f:70:0d:74:8c:41:a8:
5c:8f:bc:16:c6:18:d6:b8:2d:5b:2e:a2:fa:54:54:
97:d1:93:0e:17:91:2a:da:5d:a5:9b:17:ac:8e:ec:
ad:65:5a:c4:f4:d2:26:65:32:22:9a:f0:34:6e:7c:
24:dd:5d:d2:7a:63:3f:9c:b4:4d:ed:54:77:8c:fc:
8c:e5:b4:d4:83:ff:31:8c:05:17:f1:54:3f:1a:c7:
e6:79:e2:54:a9:af:6f:64:f0:66:57:5e:24:a8:b3:
17:0a:c5:45:08:8e:3e:1b:23:57:3b:48:04:e0:bb:
d0:b4:d9:ed:db:75:cf:44:2b:6f:b1:f0:09:3d:e4:
75:9a:fd:70:3d:1d:6b:46:de:9a:79:68:23:43:d6:
70:4d:57:83:e3:96:96:6d:9c:64:17:0f:73:76:5b:
e1:01:4c:92:a6:53:99:15:20:38:38:e8:a3:bd:b2:
cd:f8:dc:55:9a:c3:44:df:ce:cd:1c:77:0f:ba:d9:
0e:f9:b7:98:7e:5b:da:7a:80:0e:81:43:62:38:3f:
c2:a7:51:cb:06:24:d3:01:1a:08:c8:0f:81:53:df:
43:e8:4f:90:d5:be:5e:a9:96:ba:33:7d:97:90:0a:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:FB:C3:44:D0:C0:73:C2:34:15:60:F1:76:87:53:F4:20:B2:89
X509v3 Authority Key Identifier:
keyid:38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/vhj7w0TQwHPCNBVg8XaHU_Qgsok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5f:a7:3d:88:ed:9e:26:8f:4e:36:5f:0c:19:5b:36:57:77:
19:bd:ea:3e:16:98:5b:6e:9e:df:eb:f5:22:1f:f3:09:1c:7d:
a9:99:02:f2:f6:13:63:87:6a:e3:f2:45:f1:2f:eb:4a:f4:66:
ee:0f:31:db:03:7b:3b:88:4c:6b:41:81:5e:28:69:70:87:a6:
d1:03:6e:6d:47:9d:95:01:d6:cd:8f:3c:ec:c3:b4:fc:02:50:
86:03:99:8b:a2:5a:07:b3:26:0a:5d:06:60:e8:a3:e4:ee:a5:
b2:12:d4:23:6e:7b:b1:4f:29:43:93:18:0a:23:c2:ef:f5:13:
13:77:24:fc:6c:cc:24:99:46:c6:0d:7b:f8:08:f9:ec:90:ec:
5d:c4:b7:74:fe:52:52:2a:d6:67:fa:03:22:ec:19:bd:7b:18:
2e:ac:2b:c7:23:39:94:11:99:96:61:0f:d6:b1:87:70:bd:e2:
de:78:6e:34:9b:1c:d1:3f:c8:af:36:f2:96:6e:9c:9d:d7:8b:
2a:d2:1a:3f:7f:0f:6c:34:c7:cb:6d:1a:0a:cf:62:59:41:e0:
38:27:03:34:13:0e:f2:f2:f8:d1:9d:00:1c:9e:77:d9:a3:49:
e8:b2:78:a0:a3:01:a5:fa:79:97:5a:0e:28:85:6d:5d:c5:8a:
59:21:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:39 2024 by rpki-client on console-ams.rpki-client.org