Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/QrDSv2TmscF4aCu9pGiJ9wCX0tc.roa
File: QrDSv2TmscF4aCu9pGiJ9wCX0tc.roa (raw, json)
Hash identifier: 4NLblYL9PcTW/whHq6t1Jn/3/+YqISNlKyu6uPrp4lA=
Subject key identifier: 42:B0:D2:BF:64:E6:B1:C1:78:68:2B:BD:A4:68:89:F7:00:97:D2:D7
Certificate issuer: /CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Certificate serial: 01856DE65A178EF766D84AEF1071F7671BFE
Authority key identifier: 24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/QrDSv2TmscF4aCu9pGiJ9wCX0tc.roa
Signing time: Sun 01 Jan 2023 15:14:50 +0000
ROA not before: Sun 01 Jan 2023 15:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41609
IP address blocks: 178.250.190.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
2a00:4080::/48 maxlen: 48
2a00:4087::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:5a:17:8e:f7:66:d8:4a:ef:10:71:f7:67:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Validity
Not Before: Jan 1 15:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42b0d2bf64e6b1c178682bbda46889f70097d2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:76:b2:8e:e3:8c:7c:70:fe:57:70:18:1f:
9a:03:3e:bf:d2:a5:46:30:93:8b:2b:31:fc:e8:5b:
c3:38:27:2e:51:cf:d8:fd:b3:49:0e:d1:2f:e4:fa:
b1:d7:56:bf:86:9d:fc:c4:65:da:8d:ca:76:b4:d2:
10:d1:16:36:c1:7a:c2:3f:11:06:13:93:ac:ea:4e:
bf:91:f0:86:a4:cf:9b:65:e8:4b:2f:25:23:b4:56:
8c:92:40:b5:41:c8:55:77:34:20:6f:f4:f0:d7:c5:
03:2f:ac:0a:e5:83:d7:ea:4c:ee:b9:04:16:bc:6b:
be:7c:05:26:58:00:ac:de:41:40:64:d9:32:fc:8d:
68:89:bb:85:98:90:07:a2:a8:b1:33:dd:80:dd:0f:
b7:43:cd:8d:ac:ac:bd:9c:b3:aa:56:43:f7:88:75:
a0:fb:2b:39:a8:5c:06:b4:2c:15:e6:3f:34:73:d1:
5a:bc:ef:52:8f:22:27:ba:f1:2c:8d:90:18:19:31:
6f:c4:8c:f8:3c:a7:85:33:c0:88:f6:76:fe:dd:0e:
4b:9c:d0:78:33:29:a8:a2:c8:e3:82:2b:7a:e8:f0:
d8:70:9c:79:2d:c1:e4:46:d2:fd:46:d0:75:ae:59:
5a:7c:fe:1f:8c:86:1e:21:2f:dd:ca:3b:38:5e:27:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:D2:BF:64:E6:B1:C1:78:68:2B:BD:A4:68:89:F7:00:97:D2:D7
X509v3 Authority Key Identifier:
keyid:24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/QrDSv2TmscF4aCu9pGiJ9wCX0tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/JHpROsmn75yDUacntaxryDHNy-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.190.0/23
IPv6:
2a00:4080::/48
2a00:4087::/32
Signature Algorithm: sha256WithRSAEncryption
b0:a5:04:25:a0:14:a5:0b:37:30:eb:f8:24:21:92:05:43:5c:
54:12:40:10:8a:6a:54:14:56:e4:ca:a7:31:89:5e:cc:fc:9e:
e9:d4:0f:ba:83:4a:38:04:b2:27:98:0b:0f:69:61:08:a8:97:
93:2a:c4:d7:d0:19:aa:af:da:49:8e:26:98:78:bd:fc:95:e1:
e8:6b:ac:22:89:6c:05:50:2b:0b:0f:52:bf:08:be:1e:7f:3c:
0e:d9:11:20:f1:08:3a:41:47:b8:50:a4:98:c6:32:99:68:ad:
6a:0e:f6:24:09:41:13:c2:86:73:35:31:1c:db:b7:df:f1:a7:
81:b1:56:ee:31:91:3b:4a:bf:c2:14:3f:80:3c:34:49:aa:67:
d4:c9:06:99:eb:10:41:40:61:40:ce:18:ad:be:98:2f:54:02:
79:3d:bf:b3:e7:ad:76:6e:14:6a:7c:e0:af:65:27:cd:eb:41:
f6:ed:63:6f:56:b2:8c:e3:3b:25:d8:64:85:5d:26:47:73:e5:
17:f0:11:16:58:db:18:de:53:a4:83:42:2a:c9:43:fb:ae:30:
ec:14:d5:53:b9:cf:29:03:60:52:4d:e4:b3:a4:a4:07:b7:36:
ff:e9:59:54:80:d4:18:05:77:f2:8b:51:9c:7d:b5:9e:24:8f:
ce:1c:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:42 2024 by rpki-client on console-ams.rpki-client.org